Package org.bouncycastle.operator

Basic operator definitions for doing encryption, signing, and digest operations.

Interface Summary

Interface	Description
AADProcessor	Base interface for extra methods required for handling associated data in AEAD ciphers.
AlgorithmNameFinder	General finder for converting OIDs and AlgorithmIdentifiers into strings.
ContentSigner	General interface for an operator that is able to create a signature from a stream of output.
ContentVerifier	General interface for an operator that is able to verify a signature based on data in a stream of output.
ContentVerifierProvider	General interface for providers of ContentVerifier objects.
DigestAlgorithmIdentifierFinder
DigestCalculator	General interface for an operator that is able to calculate a digest from a stream of output.
DigestCalculatorProvider	The base interface for a provider of DigestCalculator implementations.
ExtendedContentSigner	A Content Signer which also provides details of the digest algorithm used internally.
FixedLengthContentSigner	Extension of ContentSigner for signers whose signature encoding has a fixed, predictable length — RSA (PKCS#1 v1.5 and PSS: the modulus size), Ed25519/Ed448 and ML-DSA qualify; DER-encoded ECDSA/DSA do not (the INTEGER components vary in length).
InputAEADDecryptor	Base interface for an input consuming AEAD Decryptor supporting associated text.
InputDecryptor	General interface for an operator that is able to produce an InputStream that will decrypt a stream of encrypted data.
InputDecryptorProvider
InputExpander	General interface for an operator that is able to produce an InputStream that will produce uncompressed data.
InputExpanderProvider
KemEncapsulationLengthProvider
KeyUnwrapper
KeyWrapper
KnownLengthOutputEncryptor	Extension of OutputEncryptor for encryptors that can predict the exact ciphertext length produced for a given plaintext length.
MacAlgorithmIdentifierFinder
MacCalculator	General interface for a key initialized operator that is able to calculate a MAC from a stream of output.
MacCalculatorProvider
OutputAEADEncryptor
OutputCompressor	General interface for an operator that is able to produce an OutputStream that will output compressed data.
OutputEncryptor	General interface for an operator that is able to produce an OutputStream that will output encrypted data.
PBEMacCalculatorProvider
RawContentVerifier	Interface for ContentVerifiers that also support raw signatures that can be verified using the digest of the calculated data.
SecretKeySizeProvider
SignatureAlgorithmIdentifierFinder

Class Summary

Class	Description
AsymmetricKeyUnwrapper
AsymmetricKeyWrapper
BufferingContentSigner	A class that explicitly buffers the data to be signed, sending it in one block when ready for signing.
DefaultAlgorithmNameFinder
DefaultDigestAlgorithmIdentifierFinder	Default implementation of DigestAlgorithmIdentifierFinder, returning the AlgorithmIdentifier that names a digest in the contexts where this finder is used by CMS / S/MIME / PKIX operator builders.
DefaultKemEncapsulationLengthProvider	Look up provider for encapsulation lengths produced be KEM algorithms
DefaultMacAlgorithmIdentifierFinder
DefaultSecretKeySizeProvider
DefaultSignatureAlgorithmIdentifierFinder	Default implementation of SignatureAlgorithmIdentifierFinder, returning the AlgorithmIdentifier (algorithm OID plus any algorithm-specific parameters) used to name a signature scheme in X.509 certificates, CMS SignedData, OCSP responses and related PKIX structures.
DefaultSignatureNameFinder	Class for return signature names from OIDs or AlgorithmIdentifiers
GenericKey
MacCaptureStream	A generic class for capturing the mac data at the end of a encrypted data stream.
NoSignatureContentSigner	ContentSigner for "Unsigned X.509 Certificates"
OidCatalogue	Catalogue of content-encryption algorithm OIDs used where code only needs to identify the parameter form or block size family for an algorithm.
SymmetricKeyUnwrapper
SymmetricKeyWrapper

Exception Summary

Exception	Description
OperatorCreationException	Thrown by an operator builder when it cannot produce the requested operator.
OperatorException	Base checked exception for failures originating in the org.bouncycastle.operator abstraction layer — the bridge between BC's JCA-free high-level packages (org.bouncycastle.cms, org.bouncycastle.cert, org.bouncycastle.pkcs, etc.) and their underlying JCA / lightweight implementations (org.bouncycastle.operator.jcajce / org.bouncycastle.operator.bc).
OperatorStreamException	Thrown from inside an operator's streaming method when an underlying cryptographic failure occurs and the surrounding signature only permits an IOException.
RuntimeOperatorException	Unchecked variant of OperatorException used when an operator method has no throws clause to declare a checked exception on.