Package org.apache.poi.poifs.crypt
Class Decryptor
java.lang.Object
org.apache.poi.poifs.crypt.Decryptor
- All Implemented Interfaces:
Cloneable
- Direct Known Subclasses:
AgileDecryptor,BinaryRC4Decryptor,CryptoAPIDecryptor,StandardDecryptor,XORDecryptor
-
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final Stringstatic final Stringprotected EncryptionInfo -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionclone()protected intgetDataStream(InputStream stream, int size, int initialPos) Wraps a stream for decryptionabstract InputStreamReturn a stream with decrypted data.static DecryptorgetInstance(EncryptionInfo info) byte[]byte[]protected intabstract longReturns the length of the encrypted data that can be safely read withgetDataStream(org.apache.poi.poifs.filesystem.DirectoryNode).byte[]initCipherForBlock(Cipher cipher, int block) Initializes a cipher object for a given block index for encryptionvoidsetChunkSize(int chunkSize) Sets the chunk size of the data stream.voidsetEncryptionInfo(EncryptionInfo encryptionInfo) protected voidsetIntegrityHmacKey(byte[] integrityHmacKey) protected voidsetIntegrityHmacValue(byte[] integrityHmacValue) protected voidsetSecretKey(SecretKey secretKey) protected voidsetVerifier(byte[] verifier) abstract booleanverifyPassword(String password)
-
Field Details
-
DEFAULT_PASSWORD
- See Also:
-
DEFAULT_POIFS_ENTRY
- See Also:
-
encryptionInfo
-
-
Constructor Details
-
Decryptor
protected Decryptor()
-
-
Method Details
-
getDataStream
public abstract InputStream getDataStream(DirectoryNode dir) throws IOException, GeneralSecurityException Return a stream with decrypted data.Use
getLength()to get the size of that data that can be safely read from the stream. Just reading to the end of the input stream is not sufficient because there are normally padding bytes that must be discarded- Parameters:
dir- the node to read from- Returns:
- decrypted stream
- Throws:
IOExceptionGeneralSecurityException
-
getDataStream
public InputStream getDataStream(InputStream stream, int size, int initialPos) throws IOException, GeneralSecurityException Wraps a stream for decryptionAs we are handling streams and don't know the total length beforehand, it's the callers duty to care for the length of the entries.
- Parameters:
stream- the stream to be wrappedinitialPos- initial/current byte position within the stream- Returns:
- decrypted stream
- Throws:
IOExceptionGeneralSecurityException
-
setChunkSize
public void setChunkSize(int chunkSize) Sets the chunk size of the data stream. Needs to be set before the data stream is requested. When not set, the implementation uses method specific default values- Parameters:
chunkSize- the chunk size, i.e. the block size with the same encryption key
-
initCipherForBlock
Initializes a cipher object for a given block index for encryption- Parameters:
cipher- may be null, otherwise the given instance is reset to the new block indexblock- the block index, e.g. the persist/slide id (hslf)- Returns:
- a new cipher object, if cipher was null, otherwise the reinitialized cipher
- Throws:
GeneralSecurityException- if the cipher can't be initialized
-
verifyPassword
- Throws:
GeneralSecurityException
-
getLength
public abstract long getLength()Returns the length of the encrypted data that can be safely read withgetDataStream(org.apache.poi.poifs.filesystem.DirectoryNode). Just reading to the end of the input stream is not sufficient because there are normally padding bytes that must be discardedThe length variable is initialized in
getDataStream(org.apache.poi.poifs.filesystem.DirectoryNode), an attempt to call getLength() prior to getDataStream() will result in IllegalStateException.- Returns:
- length of the encrypted data
- Throws:
IllegalStateException- ifgetDataStream(org.apache.poi.poifs.filesystem.DirectoryNode)was not called
-
getInstance
-
getDataStream
- Throws:
IOExceptionGeneralSecurityException
-
getVerifier
public byte[] getVerifier() -
getSecretKey
-
getIntegrityHmacKey
public byte[] getIntegrityHmacKey() -
getIntegrityHmacValue
public byte[] getIntegrityHmacValue() -
setSecretKey
-
setVerifier
protected void setVerifier(byte[] verifier) -
setIntegrityHmacKey
protected void setIntegrityHmacKey(byte[] integrityHmacKey) -
setIntegrityHmacValue
protected void setIntegrityHmacValue(byte[] integrityHmacValue) -
getBlockSizeInBytes
protected int getBlockSizeInBytes() -
getKeySizeInBytes
protected int getKeySizeInBytes() -
getEncryptionInfo
-
setEncryptionInfo
-
clone
- Overrides:
clonein classObject- Throws:
CloneNotSupportedException
-