/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.apache.camel.model.dataformat; import java.security.Key; import java.security.spec.AlgorithmParameterSpec; import javax.xml.bind.annotation.XmlAccessType; import javax.xml.bind.annotation.XmlAccessorType; import javax.xml.bind.annotation.XmlAttribute; import javax.xml.bind.annotation.XmlRootElement; import org.apache.camel.CamelContext; import org.apache.camel.model.DataFormatDefinition; import org.apache.camel.spi.DataFormat; import org.apache.camel.spi.Metadata; import org.apache.camel.spi.RouteContext; import org.apache.camel.util.CamelContextHelper; import org.apache.camel.util.ObjectHelper; /** * Crypto data format * * @version */ @Metadata(firstVersion = "2.3.0", label = "dataformat,transformation,security", title = "Crypto (Java Cryptographic Extension)") @XmlRootElement(name = "crypto") @XmlAccessorType(XmlAccessType.FIELD) public class CryptoDataFormat extends DataFormatDefinition { @XmlAttribute @Metadata(defaultValue = "DES/CBC/PKCS5Padding") private String algorithm; @XmlAttribute private String cryptoProvider; @XmlAttribute private String keyRef; @XmlAttribute private String initVectorRef; @XmlAttribute private String algorithmParameterRef; @XmlAttribute private Integer buffersize; @XmlAttribute @Metadata(defaultValue = "HmacSHA1") private String macAlgorithm = "HmacSHA1"; @XmlAttribute private Boolean shouldAppendHMAC; @XmlAttribute private Boolean inline; public CryptoDataFormat() { super("crypto"); } @Override protected DataFormat createDataFormat(RouteContext routeContext) { DataFormat cryptoFormat = super.createDataFormat(routeContext); if (ObjectHelper.isNotEmpty(keyRef)) { Key key = CamelContextHelper.mandatoryLookup(routeContext.getCamelContext(), keyRef, Key.class); setProperty(routeContext.getCamelContext(), cryptoFormat, "key", key); } if (ObjectHelper.isNotEmpty(algorithmParameterRef)) { AlgorithmParameterSpec spec = CamelContextHelper.mandatoryLookup(routeContext.getCamelContext(), algorithmParameterRef, AlgorithmParameterSpec.class); setProperty(routeContext.getCamelContext(), cryptoFormat, "AlgorithmParameterSpec", spec); } if (ObjectHelper.isNotEmpty(initVectorRef)) { byte[] iv = CamelContextHelper.mandatoryLookup(routeContext.getCamelContext(), initVectorRef, byte[].class); setProperty(routeContext.getCamelContext(), cryptoFormat, "InitializationVector", iv); } return cryptoFormat; } @Override protected void configureDataFormat(DataFormat dataFormat, CamelContext camelContext) { Boolean answer = ObjectHelper.toBoolean(shouldAppendHMAC); if (answer != null && !answer) { setProperty(camelContext, dataFormat, "shouldAppendHMAC", Boolean.FALSE); } else { setProperty(camelContext, dataFormat, "shouldAppendHMAC", Boolean.TRUE); } answer = ObjectHelper.toBoolean(inline); if (answer != null && answer) { setProperty(camelContext, dataFormat, "shouldInlineInitializationVector", Boolean.TRUE); } else { setProperty(camelContext, dataFormat, "shouldInlineInitializationVector", Boolean.FALSE); } if (algorithm != null) { setProperty(camelContext, dataFormat, "algorithm", algorithm); } if (cryptoProvider != null) { setProperty(camelContext, dataFormat, "cryptoProvider", cryptoProvider); } if (macAlgorithm != null) { setProperty(camelContext, dataFormat, "macAlgorithm", macAlgorithm); } if (buffersize != null) { setProperty(camelContext, dataFormat, "buffersize", buffersize); } } public String getAlgorithm() { return algorithm; } /** * The JCE algorithm name indicating the cryptographic algorithm that will be used. * <p/> * Is by default DES/CBC/PKCS5Padding. */ public void setAlgorithm(String algorithm) { this.algorithm = algorithm; } public String getCryptoProvider() { return cryptoProvider; } /** * The name of the JCE Security Provider that should be used. */ public void setCryptoProvider(String cryptoProvider) { this.cryptoProvider = cryptoProvider; } public String getKeyRef() { return keyRef; } /** * Refers to the secret key to lookup from the register to use. */ public void setKeyRef(String keyRef) { this.keyRef = keyRef; } public String getInitVectorRef() { return initVectorRef; } /** * Refers to a byte array containing the Initialization Vector that will be used to initialize the Cipher. */ public void setInitVectorRef(String initVectorRef) { this.initVectorRef = initVectorRef; } public String getAlgorithmParameterRef() { return algorithmParameterRef; } /** * A JCE AlgorithmParameterSpec used to initialize the Cipher. * <p/> * Will lookup the type using the given name as a {@link java.security.spec.AlgorithmParameterSpec} type. */ public void setAlgorithmParameterRef(String algorithmParameterRef) { this.algorithmParameterRef = algorithmParameterRef; } public Integer getBuffersize() { return buffersize; } /** * The size of the buffer used in the signature process. */ public void setBuffersize(Integer buffersize) { this.buffersize = buffersize; } public String getMacAlgorithm() { return macAlgorithm; } /** * The JCE algorithm name indicating the Message Authentication algorithm. */ public void setMacAlgorithm(String macAlgorithm) { this.macAlgorithm = macAlgorithm; } public Boolean getShouldAppendHMAC() { return shouldAppendHMAC; } /** * Flag indicating that a Message Authentication Code should be calculated and appended to the encrypted data. */ public void setShouldAppendHMAC(Boolean shouldAppendHMAC) { this.shouldAppendHMAC = shouldAppendHMAC; } public Boolean getInline() { return inline; } /** * Flag indicating that the configured IV should be inlined into the encrypted data stream. * <p/> * Is by default false. */ public void setInline(Boolean inline) { this.inline = inline; } }