Package | Description |
---|---|
org.owasp.esapi |
The ESAPI interfaces and
Exception classes model the most
important security functions to enterprise web applications. |
org.owasp.esapi.crypto |
This package contains ESAPI cryptography-related classes used throughout
ESAPI.
|
org.owasp.esapi.reference.crypto |
This package contains the reference implementation for some of
the ESAPI cryptography-related classes used throughout ESAPI.
|
Modifier and Type | Method and Description |
---|---|
CipherText |
Encryptor.encrypt(PlainText plaintext)
Encrypts the provided plaintext bytes using the cipher transformation
specified by the property
Encryptor.CipherTransformation
and the master encryption key as specified by the property
Encryptor.MasterKey as defined in the ESAPI.properties file. |
CipherText |
Encryptor.encrypt(SecretKey key,
PlainText plaintext)
Encrypts the provided plaintext bytes using the cipher transformation
specified by the property
Encryptor.CipherTransformation
as defined in the ESAPI.properties file and the
specified secret key. |
Modifier and Type | Method and Description |
---|---|
PlainText |
Encryptor.decrypt(CipherText ciphertext)
Decrypts the provided
CipherText using the information from it
and the master encryption key as specified by the property
Encryptor.MasterKey as defined in the ESAPI.properties
file. |
PlainText |
Encryptor.decrypt(SecretKey key,
CipherText ciphertext)
Decrypts the provided
CipherText using the information from it
and the specified secret key. |
Modifier and Type | Method and Description |
---|---|
CipherText |
CipherTextSerializer.asCipherText()
Return the actual
CipherText object. |
static CipherText |
CipherText.fromPortableSerializedBytes(byte[] bytes)
Create a
CipherText object from what is supposed to be a
portable serialized byte array, given in network byte order, that
represents a valid, previously serialized CipherText object
using asPortableSerializedByteArray() . |
Modifier and Type | Method and Description |
---|---|
static boolean |
CryptoHelper.isCipherTextMACvalid(SecretKey sk,
CipherText ct)
If a Message Authentication Code (MAC) is required for the specified
CipherText object, then attempt to validate the MAC that
should be embedded within the CipherText object by using a
derived key based on the specified SecretKey . |
static boolean |
CryptoHelper.isMACRequired(CipherText ct)
Check to see if a Message Authentication Code (MAC) is required
for a given
CipherText object and the current ESAPI.property
settings. |
Constructor and Description |
---|
CipherTextSerializer(CipherText cipherTextObj) |
Modifier and Type | Method and Description |
---|---|
CipherText |
JavaEncryptor.encrypt(PlainText plaintext)
Encrypts the provided plaintext bytes using the cipher transformation
specified by the property
Encryptor.CipherTransformation
and the master encryption key as specified by the property
Encryptor.MasterKey as defined in the ESAPI.properties file. |
CipherText |
JavaEncryptor.encrypt(SecretKey key,
PlainText plain)
Encrypts the provided plaintext bytes using the cipher transformation
specified by the property
Encryptor.CipherTransformation
as defined in the ESAPI.properties file and the
specified secret key. |
Modifier and Type | Method and Description |
---|---|
PlainText |
JavaEncryptor.decrypt(CipherText ciphertext)
Decrypts the provided
CipherText using the information from it
and the master encryption key as specified by the property
Encryptor.MasterKey as defined in the ESAPI.properties
file. |
PlainText |
JavaEncryptor.decrypt(SecretKey key,
CipherText ciphertext)
Decrypts the provided
CipherText using the information from it
and the specified secret key. |
Copyright © 2014 The Open Web Application Security Project (OWASP). All rights reserved.