Uses of Class
io.getlime.security.powerauth.crypto.lib.model.exception.CryptoProviderException

Packages that use CryptoProviderException

Package	Description
io.getlime.security.powerauth.crypto.client.activation
io.getlime.security.powerauth.crypto.client.keyfactory
io.getlime.security.powerauth.crypto.client.signature
io.getlime.security.powerauth.crypto.client.token
io.getlime.security.powerauth.crypto.client.vault
io.getlime.security.powerauth.crypto.lib.api
io.getlime.security.powerauth.crypto.lib.config
io.getlime.security.powerauth.crypto.lib.generator
io.getlime.security.powerauth.crypto.lib.totp
io.getlime.security.powerauth.crypto.lib.util
io.getlime.security.powerauth.crypto.server.activation
io.getlime.security.powerauth.crypto.server.keyfactory
io.getlime.security.powerauth.crypto.server.signature
io.getlime.security.powerauth.crypto.server.token
io.getlime.security.powerauth.crypto.server.vault

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.client.activation

Methods in io.getlime.security.powerauth.crypto.client.activation that throw CryptoProviderException

Modifier and Type	Method	Description
String	PowerAuthClientActivation.computeActivationFingerprint(PublicKey devicePublicKey, PublicKey serverPublicKey, String activationId)	Compute a fingerprint for the version 3 activation.
String	PowerAuthClientActivation.computeActivationFingerprint(PublicKey devicePublicKey, PublicKey serverPublicKey, String activationId, ActivationVersion activationVersion)	Compute a fingerprint for the activation.
byte[]	PowerAuthClientActivation.generateActivationNonce()	Generate a new activation nonce.
KeyPair	PowerAuthClientActivation.generateDeviceKeyPair()	Generate a device related activation key pair.
ActivationStatusBlobInfo	PowerAuthClientActivation.getStatusFromEncryptedBlob(byte[] cStatusBlob, byte[] challenge, byte[] nonce, SecretKey transportKey)	Returns an activation status from the encrypted activation blob as described in PowerAuth Specification.
boolean	PowerAuthClientActivation.verifyActivationCodeSignature(String activationCode, byte[] signature, PublicKey masterPublicKey)	Verify the signature of activation code using Master Public Key.
boolean	PowerAuthClientActivation.verifyHashForHashBasedCounter(byte[] receivedCtrDataHash, byte[] expectedCtrData, SecretKey transportKey)	Verify whether client's value of hash based counter is equal to the value received from the server.
boolean	PowerAuthClientActivation.verifyServerDataSignature(String activationId, byte[] C_serverPublicKey, byte[] signature, PublicKey masterPublicKey)	Verify signature of the encrypted activation ID and server public key using a Master Public Key.

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.client.keyfactory

Methods in io.getlime.security.powerauth.crypto.client.keyfactory that throw CryptoProviderException

Modifier and Type	Method	Description
SecretKey	PowerAuthClientKeyFactory.generateClientMasterSecretKey(PrivateKey devicePrivateKey, PublicKey serverPublicKey)	Generate a master secret key KEY_MASTER_SECRET using the device private key KEY_DEVICE_PRIVATE and server public key KEY_SERVER_PUBLIC.
SecretKey	PowerAuthClientKeyFactory.generateClientSignatureBiometryKey(SecretKey masterSecretKey)	Generate a signature key KEY_SIGNATURE_BIOMETRY from master secret key KEY_MASTER_SECRET using KDF.
SecretKey	PowerAuthClientKeyFactory.generateClientSignatureKnowledgeKey(SecretKey masterSecretKey)	Generate a signature key KEY_SIGNATURE_KNOWLEDGE from master secret key KEY_MASTER_SECRET using KDF.
SecretKey	PowerAuthClientKeyFactory.generateClientSignaturePossessionKey(SecretKey masterSecretKey)	Generate a signature key KEY_SIGNATURE_POSSESSION from master secret key KEY_MASTER_SECRET using KDF.
SecretKey	PowerAuthClientKeyFactory.generateServerEncryptedVaultKey(SecretKey masterSecretKey)	Generate a transport key KEY_ENCRYPTED_VAULT from master secret key KEY_MASTER_SECRET using KDF.
SecretKey	PowerAuthClientKeyFactory.generateServerTransportKey(SecretKey masterSecretKey)	Generate a transport key KEY_TRANSPORT from master secret key KEY_MASTER_SECRET using KDF.
List<SecretKey>	PowerAuthClientKeyFactory.keysForSignatureType(PowerAuthSignatureTypes signatureType, SecretKey masterSecretKey)	Generate a list with signature keys for given signature type and master secret

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.client.signature

Methods in io.getlime.security.powerauth.crypto.client.signature that throw CryptoProviderException

Modifier and Type	Method	Description
String	PowerAuthClientSignature.signatureForData(byte[] data, List<SecretKey> signatureKeys, byte[] ctrData, SignatureConfiguration signatureConfiguration)	Compute a PowerAuth signature for given data, signature keys and counter.

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.client.token

Methods in io.getlime.security.powerauth.crypto.client.token that throw CryptoProviderException

Modifier and Type	Method	Description
byte[]	ClientTokenGenerator.computeTokenDigest(byte[] nonce, byte[] timestamp, String version, byte[] tokenSecret)	Compute the digest of provided token information using given token secret.
byte[]	ClientTokenGenerator.generateTokenNonce()	Generate random token nonce, 16 random bytes.

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.client.vault

Methods in io.getlime.security.powerauth.crypto.client.vault that throw CryptoProviderException

Modifier and Type	Method	Description
PrivateKey	PowerAuthClientVault.decryptDevicePrivateKey(byte[] cDevicePrivateKey, SecretKey vaultEncryptionKey)	Decrypts original device private key KEY_DEVICE_PRIVATE using the vault encryption key KEY_ENCRYPTION_VAULT.
SecretKey	PowerAuthClientVault.decryptVaultEncryptionKey(byte[] cVaultEncryptionKey, SecretKey transportKey)	Decrypts the vault encryption key KEY_ENCRYPTION_VAULT using KEY_TRANSPORT.
byte[]	PowerAuthClientVault.encryptDevicePrivateKey(PrivateKey devicePrivateKey, SecretKey vaultEncryptionKey)	Encrypts original device private key KEY_DEVICE_PRIVATE using the vault encryption key KEY_ENCRYPTION_VAULT.

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.lib.api

Methods in io.getlime.security.powerauth.crypto.lib.api that throw CryptoProviderException

Modifier and Type	Method	Description
byte[]	Counter.init()	Initialize counter by generating initial counter data.

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.lib.config

Methods in io.getlime.security.powerauth.crypto.lib.config that throw CryptoProviderException

Modifier and Type	Method	Description
static SignatureConfiguration	SignatureConfiguration.forFormat(PowerAuthSignatureFormat format)	Convert PowerAuth signature format to signature configuration.

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.lib.generator

Methods in io.getlime.security.powerauth.crypto.lib.generator that throw CryptoProviderException

Modifier and Type	Method	Description
SecretKey	KeyGenerator.computeSharedKey(PrivateKey privateKey, PublicKey publicKey)	Computes a pre-shared key for given private key and public key (ECDH).
SecretKey	KeyGenerator.computeSharedKey(PrivateKey privateKey, PublicKey publicKey, boolean keep32b)	Computes a pre-shared key for given private key and public key (ECDH).
RecoveryInfo	IdentifierGenerator.deriveRecoveryCode(SecretKey secretKey, RecoverySeed seed)	Derive recovery code and PUKs for given secret key and seed information.
SecretKey	KeyGenerator.deriveSecretKey(SecretKey secret, byte[] index)	Derive a new secret key KEY_SHARED from a master secret key KEY_MASTER based on following KDF:
SecretKey	KeyGenerator.deriveSecretKeyFromPassword(String password, byte[] salt)	Derive a long AES suitable key from a password and salt.
SecretKey	KeyGenerator.deriveSecretKeyFromPassword(String password, byte[] salt, int iterations)	Derive a long AES suitable key from a password and salt.
SecretKey	KeyGenerator.deriveSecretKeyHmac(SecretKey secret, byte[] index)	Derive a new secret key KEY_SHARED from a master secret key KEY_MASTER based on following KDF:
SecretKey	KeyGenerator.deriveSecretKeyHmacLegacy(SecretKey secret, byte[] index)	Deprecated.
String	IdentifierGenerator.generateActivationCode()	Generate version 3.0 or higher activation code.
KeyPair	KeyGenerator.generateKeyPair()	Generate a new ECDH key pair using P256r1 curve.
byte[]	KeyGenerator.generateRandomBytes(int len)	Generate a new random byte array with given length.
SecretKey	KeyGenerator.generateRandomSecretKey()	Generate a new random symmetric key.
RecoveryInfo	IdentifierGenerator.generateRecoveryCode()	Generate recovery code and PUK.
RecoveryInfo	IdentifierGenerator.generateRecoveryCode(SecretKey secretKey, int pukCount, boolean exportSeed)	Generate recovery code and PUKs for given secret key, return optional seed information.
byte[]	HashBasedCounter.init()	Generate initial counter data.

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.lib.totp

Methods in io.getlime.security.powerauth.crypto.lib.totp that throw CryptoProviderException

Modifier and Type	Method	Description
static byte[]	Totp.generateTotpSha256(byte[] key, Instant instant, int digitsNumber)	Generates a TOTP value for the given set of parameters using HmacSHA256 algorithm.
static byte[]	Totp.generateTotpSha256(byte[] key, Instant instant, Duration stepLength, int digitsNumber)	Generates a TOTP value for the given set of parameters using HmacSHA256 algorithm.
static byte[]	Totp.generateTotpSha512(byte[] key, Instant instant, int digitsNumber)	Generates a TOTP value for the given set of parameters using HmacSHA512 algorithm.
static byte[]	Totp.generateTotpSha512(byte[] key, Instant instant, Duration stepLength, int digitsNumber)	Generates a TOTP value for the given set of parameters using HmacSHA512 algorithm.
static boolean	Totp.validateTotpSha256(byte[] otp, byte[] key, Instant instant, int digitsNumber)	Validate a TOTP value for the given set of parameters using HmacSHA256 algorithm.
static boolean	Totp.validateTotpSha256(byte[] otp, byte[] key, Instant instant, int digitsNumber, int steps, Duration stepLength)	Validate a TOTP value for the given set of parameters using HmacSHA256 algorithm.
static boolean	Totp.validateTotpSha512(byte[] otp, byte[] key, Instant instant, int digitsNumber)	Validate a TOTP value for the given set of parameters using HmacSHA512 algorithm.
static boolean	Totp.validateTotpSha512(byte[] otp, byte[] key, Instant instant, int digitsNumber, int steps, Duration stepLength)	Validate a TOTP value for the given set of parameters using HmacSHA512 algorithm.

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.lib.util

Methods in io.getlime.security.powerauth.crypto.lib.util that throw CryptoProviderException

Modifier and Type	Method	Description
byte[]	HashBasedCounterUtils.calculateHashFromHashBasedCounter(byte[] ctrData, SecretKey transportKey)	Calculate hash from value representing the hash based counter.
static String	ECPublicKeyFingerprint.compute(ECPublicKey devicePublicKey, ECPublicKey serverPublicKey, String activationId, ActivationVersion activationVersion)	Compute activation fingerprint.
byte[]	SignatureUtils.computeECDSASignature(byte[] bytes, PrivateKey masterPrivateKey)	Compute ECDSA signature of given bytes with a private key.
byte[]	SignatureUtils.computeECDSASignature(byte[] bytes, PrivateKey masterPrivateKey, SecureRandom secureRandom)	Compute ECDSA signature of given bytes with a private key, using a provided instance of SecureRandom.
String	SignatureUtils.computePowerAuthSignature(byte[] data, List<SecretKey> signatureKeys, byte[] ctrData, SignatureConfiguration configuration)	Compute PowerAuth signature for given data using a secret signature keys and counter byte array.
byte[]	TokenUtils.computeTokenDigest(byte[] nonce, byte[] timestamp, String version, byte[] tokenSecret)	Compute the digest of provided token information using given token secret.
PrivateKey	KeyConvertor.convertBytesToPrivateKey(byte[] keyBytes)	Convert a byte array to an EC private key by decoding the D number parameter (S in Java Security).
PublicKey	KeyConvertor.convertBytesToPublicKey(byte[] keyBytes)	Converts byte array to an EC public key, by decoding the Q point (W in Java Security).
PublicKey	KeyConvertor.convertPointBytesToPublicKey(byte[] xBytes, byte[] yBytes)	Converts provided byte array representing X coordinate of an EC public key.
byte[]	KeyConvertor.convertPublicKeyToBytes(PublicKey publicKey)	Converts an EC public key to a byte array by encoding Q point parameter (W in Java Security).
byte[]	AESEncryptionUtils.decrypt(byte[] bytes, byte[] iv, SecretKey secret)	Decrypt given data using AES/CBC/PKCS7Padding with given initialization vector and secret key.
byte[]	AESEncryptionUtils.decrypt(byte[] bytes, byte[] iv, SecretKey secret, String transformation)	Decrypt given data using given transformation with given initialization vector and secret key.
byte[]	KeyDerivationUtils.deriveIvForStatusBlobEncryption(byte[] challenge, byte[] nonce, SecretKey transportKey)	Derive Initialization Vector for AES-CBC cipher used for an activation status blob encryption and decryption.
byte[]	AESEncryptionUtils.encrypt(byte[] bytes, byte[] iv, SecretKey secret)	Encrypt given data using AES/CBC/PKCS7Padding with given initialization vector and secret key.
byte[]	AESEncryptionUtils.encrypt(byte[] bytes, byte[] iv, SecretKey secret, String transformation)	Encrypt given data using given transformation with given initialization vector and secret key.
byte[]	TokenUtils.generateTokenNonce()	Generate random token nonce, 16 random bytes.
byte[]	TokenUtils.generateTokenSecret()	Generate random token secret, 16 random bytes.
byte[]	HMACHashUtilities.hash(byte[] key, byte[] data)	Compute a HMAC-SHA256 of given data with provided key bytes
byte[]	HMACHashUtilities.hash(SecretKey hmacKey, byte[] data)	Compute a HMAC-SHA256 of given data with provided key bytes
static String	PasswordHash.hash(byte[] password)	Generate hash in Argon2 Modular Crypt Format for specified password using Argon2i algorithm.
boolean	SignatureUtils.validateECDSASignature(byte[] signedBytes, byte[] signature, PublicKey masterPublicKey)	Validate an ECDSA signature against given data using a public key.
boolean	SignatureUtils.validatePowerAuthSignature(byte[] data, String signature, List<SecretKey> signatureKeys, byte[] ctrData, SignatureConfiguration configuration)	Validate the PowerAuth signature for given data using provided keys.
boolean	TokenUtils.validateTokenDigest(byte[] nonce, byte[] timestamp, String version, byte[] tokenSecret, byte[] tokenDigest)	Validate provided token digest for given input data and provided token secret.
boolean	HashBasedCounterUtils.verifyHashForHashBasedCounter(byte[] receivedCtrDataHash, byte[] expectedCtrData, SecretKey transportKey)	Verify whether client's value of hash based counter is equal to the value received from the server.

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.server.activation

Methods in io.getlime.security.powerauth.crypto.server.activation that throw CryptoProviderException

Modifier and Type	Method	Description
byte[]	PowerAuthServerActivation.calculateHashFromHashBasedCounter(byte[] ctrData, SecretKey transportKey)	Calculate hash from value representing the hash based counter.
String	PowerAuthServerActivation.computeActivationFingerprint(PublicKey devicePublicKey, PublicKey serverPublicKey, String activationId)	Compute a fingerprint for the version 3 activation.
String	PowerAuthServerActivation.computeActivationFingerprint(PublicKey devicePublicKey, PublicKey serverPublicKey, String activationId, ActivationVersion activationVersion)	Compute a fingerprint for the activation.
byte[]	PowerAuthServerActivation.computeServerDataSignature(String activationId, byte[] C_serverPublicKey, PrivateKey masterPrivateKey)	Compute an activation ID and encrypted server public key signature using the Master Private Key.
byte[]	PowerAuthServerActivation.encryptedStatusBlob(ActivationStatusBlobInfo statusBlobInfo, byte[] challenge, byte[] nonce, SecretKey transportKey)	Returns an encrypted status blob as described in PowerAuth Specification.
String	PowerAuthServerActivation.generateActivationCode()	Generate a pseudo-unique activation code.
byte[]	PowerAuthServerActivation.generateActivationNonce()	Generate a new server activation nonce.
byte[]	PowerAuthServerActivation.generateActivationSignature(String activationCode, PrivateKey masterPrivateKey)	Generate signature for the activation code.
KeyPair	PowerAuthServerActivation.generateServerKeyPair()	Generate a server related activation key pair.

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.server.keyfactory

Methods in io.getlime.security.powerauth.crypto.server.keyfactory that throw CryptoProviderException

Modifier and Type	Method	Description
SecretKey	PowerAuthServerKeyFactory.deriveTransportKey(PrivateKey serverPrivateKey, PublicKey devicePublicKey)	Derive transport key KEY_TRANSPORT in two steps: 1.
SecretKey	PowerAuthServerKeyFactory.generateServerEncryptedVaultKey(SecretKey masterSecretKey)	Generate a transport key KEY_ENCRYPTED_VAULT from master secret key KEY_MASTER_SECRET using KDF.
SecretKey	PowerAuthServerKeyFactory.generateServerMasterSecretKey(PrivateKey serverPrivateKey, PublicKey devicePublicKey)	Generate a master secret key KEY_MASTER_SECRET using the server private key KEY_SERVER_PRIVATE and device public key KEY_DEVICE_PUBLIC.
SecretKey	PowerAuthServerKeyFactory.generateServerSignatureBiometryKey(SecretKey masterSecretKey)	Generate a signature key KEY_SIGNATURE_BIOMETRY from master secret key KEY_MASTER_SECRET using KDF.
SecretKey	PowerAuthServerKeyFactory.generateServerSignatureKnowledgeKey(SecretKey masterSecretKey)	Generate a signature key KEY_SIGNATURE_KNOWLEDGE from master secret key KEY_MASTER_SECRET using KDF.
SecretKey	PowerAuthServerKeyFactory.generateServerSignaturePossessionKey(SecretKey masterSecretKey)	Generate a signature key KEY_SIGNATURE_POSSESSION from master secret key KEY_MASTER_SECRET using KDF.
SecretKey	PowerAuthServerKeyFactory.generateServerTransportKey(SecretKey masterSecretKey)	Generate a transport key KEY_TRANSPORT from master secret key KEY_MASTER_SECRET using KDF.
List<SecretKey>	PowerAuthServerKeyFactory.keysForSignatureType(PowerAuthSignatureTypes signatureType, SecretKey masterSecretKey)	Generate a list with signature keys for given signature type and master secret

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.server.signature

Methods in io.getlime.security.powerauth.crypto.server.signature that throw CryptoProviderException

Modifier and Type	Method	Description
boolean	PowerAuthServerSignature.verifySignatureForData(byte[] data, String signature, List<SecretKey> signatureKeys, byte[] ctrData, SignatureConfiguration signatureConfiguration)	Verify a PowerAuth signature against data using signature key list and counter.

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.server.token

Methods in io.getlime.security.powerauth.crypto.server.token that throw CryptoProviderException

Modifier and Type	Method	Description
byte[]	ServerTokenGenerator.generateTokenSecret()	Generate random token secret, 16 random bytes.
boolean	ServerTokenVerifier.validateTokenDigest(byte[] nonce, byte[] timestamp, String version, byte[] tokenSecret, byte[] tokenDigest)	Validate provided token digest for given input data and provided token secret.

Uses of CryptoProviderException in io.getlime.security.powerauth.crypto.server.vault

Methods in io.getlime.security.powerauth.crypto.server.vault that throw CryptoProviderException

Modifier and Type	Method	Description
byte[]	PowerAuthServerVault.encryptVaultEncryptionKey(PrivateKey serverPrivateKey, PublicKey devicePublicKey)	Return encrypted vault encryption key KEY_ENCRYPTION_VAULT using KEY_TRANSPORT.