DefaultCipherProvider.java

/*
 * Copyright (c) 2016, Inversoft Inc., All Rights Reserved
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
 * either express or implied. See the License for the specific
 * language governing permissions and limitations under the License.
 */
package org.primeframework.mvc.security;

import javax.crypto.Cipher;
import javax.crypto.NoSuchPaddingException;
import java.security.InvalidAlgorithmParameterException;
import java.security.InvalidKeyException;
import java.security.Key;
import java.security.NoSuchAlgorithmException;
import java.security.spec.AlgorithmParameterSpec;

import org.primeframework.mvc.config.MVCConfiguration;

import com.google.inject.Inject;

/**
 * Default implementation that generates a new key on startup. This will render all existing Saved Requests useless.
 *
 * @author Brian Pontarelli
 */
public class DefaultCipherProvider implements CipherProvider {
  private final AlgorithmParameterSpec iv;

  private final Key key;

  @Inject
  public DefaultCipherProvider(MVCConfiguration configuration) throws NoSuchAlgorithmException {
    this.iv = configuration.cookieEncryptionIV();
    this.key = configuration.cookieEncryptionKey();
  }

  @Override
  public Cipher getDecryptor() throws NoSuchPaddingException, NoSuchAlgorithmException, InvalidAlgorithmParameterException, InvalidKeyException {
    Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
    cipher.init(Cipher.DECRYPT_MODE, key, iv);
    return cipher;
  }

  @Override
  public Cipher getEncryptor() throws NoSuchPaddingException, NoSuchAlgorithmException, InvalidAlgorithmParameterException, InvalidKeyException {
    Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
    cipher.init(Cipher.ENCRYPT_MODE, key, iv);
    return cipher;
  }
}