com.google.crypto.tink

Class PrivilegedRegistry

java.lang.Object

com.google.crypto.tink.PrivilegedRegistry

public class PrivilegedRegistry
extends Object

Privileged access to the Registry.

Access is granted on the BUILD.bazel-file level. This is internal and should not be used externally.

Method Summary

Modifier and Type	Method and Description
static KeyData	deriveKey(KeyTemplate keyTemplate, InputStream randomStream) Method to derive a key, using the given , with the randomness as provided by the second argument.
static com.google.protobuf.MessageLite	parseKeyData(KeyData keyData) Returns the key proto in the keyData if a corresponding key type manager was registered.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

deriveKey

public static KeyData deriveKey(KeyTemplate keyTemplate,
                                InputStream randomStream)
                         throws GeneralSecurityException

Method to derive a key, using the given , with the randomness as provided by the second argument.

This method is on purpose not in the public interface. Calling it twice using different key templates and the same randomness can completely destroy any security in a system, so we prevent this by making it accessible only to safe call sites.

This functions ignores keyTemplate.getOutputPrefix().

Throws:

GeneralSecurityException

parseKeyData

public static com.google.protobuf.MessageLite parseKeyData(KeyData keyData)
                                                    throws GeneralSecurityException,
                                                           com.google.protobuf.InvalidProtocolBufferException

Returns the key proto in the keyData if a corresponding key type manager was registered. Returns null if the key type was registered with a KeyManager (and not a KeyTypeManager).

Throws:

GeneralSecurityException

com.google.protobuf.InvalidProtocolBufferException