package org.bouncycastle.cms.bc; import java.io.InputStream; import org.bouncycastle.asn1.x509.AlgorithmIdentifier; import org.bouncycastle.cms.CMSException; import org.bouncycastle.cms.RecipientOperator; import org.bouncycastle.crypto.BufferedBlockCipher; import org.bouncycastle.crypto.StreamCipher; import org.bouncycastle.crypto.io.CipherInputStream; import org.bouncycastle.crypto.params.KeyParameter; import org.bouncycastle.operator.InputDecryptor; public class BcPasswordEnvelopedRecipient extends BcPasswordRecipient { public BcPasswordEnvelopedRecipient(char[] password) { super(password); } public RecipientOperator getRecipientOperator(AlgorithmIdentifier keyEncryptionAlgorithm, final AlgorithmIdentifier contentEncryptionAlgorithm, byte[] derivedKey, byte[] encryptedContentEncryptionKey) throws CMSException { KeyParameter secretKey = extractSecretKey(keyEncryptionAlgorithm, contentEncryptionAlgorithm, derivedKey, encryptedContentEncryptionKey); final Object dataCipher = EnvelopedDataHelper.createContentCipher(false, secretKey, contentEncryptionAlgorithm); return new RecipientOperator(new InputDecryptor() { public AlgorithmIdentifier getAlgorithmIdentifier() { return contentEncryptionAlgorithm; } public InputStream getInputStream(InputStream dataOut) { if (dataCipher instanceof BufferedBlockCipher) { return new CipherInputStream(dataOut, (BufferedBlockCipher)dataCipher); } else { return new CipherInputStream(dataOut, (StreamCipher)dataCipher); } } }); } }