Example usage for javax.security.sasl SaslClient unwrap

Introduction

In this page you can find the example usage for javax.security.sasl SaslClient unwrap.

Prototype

public abstract byte[] unwrap(byte[] incoming, int offset, int len) throws SaslException;

Source Link

Document

Unwraps a byte array received from the server.

Usage

From source file:org.apache.hadoop.hbase.io.asyncfs.FanOutOneBlockAsyncDFSOutputSaslHelper.java

private static CipherOptionHelper createCipherHelper27(Class<?> cipherOptionClass)
        throws ClassNotFoundException, NoSuchMethodException {
    @SuppressWarnings("rawtypes")
    Class<? extends Enum> cipherSuiteClass = Class.forName("org.apache.hadoop.crypto.CipherSuite")
            .asSubclass(Enum.class);
    @SuppressWarnings("unchecked")
    final Enum<?> aesCipherSuite = Enum.valueOf(cipherSuiteClass, "AES_CTR_NOPADDING");
    final Constructor<?> cipherOptionConstructor = cipherOptionClass.getConstructor(cipherSuiteClass);
    final Constructor<?> cipherOptionWithKeyAndIvConstructor = cipherOptionClass
            .getConstructor(cipherSuiteClass, byte[].class, byte[].class, byte[].class, byte[].class);

    final Method getCipherSuiteMethod = cipherOptionClass.getMethod("getCipherSuite");
    final Method getInKeyMethod = cipherOptionClass.getMethod("getInKey");
    final Method getInIvMethod = cipherOptionClass.getMethod("getInIv");
    final Method getOutKeyMethod = cipherOptionClass.getMethod("getOutKey");
    final Method getOutIvMethod = cipherOptionClass.getMethod("getOutIv");

    Class<?> pbHelperClass;
    try {//from  w ww .jav a 2  s .  co  m
        pbHelperClass = Class.forName("org.apache.hadoop.hdfs.protocolPB.PBHelperClient");
    } catch (ClassNotFoundException e) {
        LOG.debug("No PBHelperClient class found, should be hadoop 2.7-", e);
        pbHelperClass = org.apache.hadoop.hdfs.protocolPB.PBHelper.class;
    }
    final Method convertCipherOptionsMethod = pbHelperClass.getMethod("convertCipherOptions", List.class);
    final Method convertCipherOptionProtosMethod = pbHelperClass.getMethod("convertCipherOptionProtos",
            List.class);
    final Method addAllCipherOptionMethod = DataTransferEncryptorMessageProto.Builder.class
            .getMethod("addAllCipherOption", Iterable.class);
    final Method getCipherOptionListMethod = DataTransferEncryptorMessageProto.class
            .getMethod("getCipherOptionList");
    return new CipherOptionHelper() {

        @Override
        public byte[] getOutKey(Object cipherOption) {
            try {
                return (byte[]) getOutKeyMethod.invoke(cipherOption);
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }

        @Override
        public byte[] getOutIv(Object cipherOption) {
            try {
                return (byte[]) getOutIvMethod.invoke(cipherOption);
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }

        @Override
        public byte[] getInKey(Object cipherOption) {
            try {
                return (byte[]) getInKeyMethod.invoke(cipherOption);
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }

        @Override
        public byte[] getInIv(Object cipherOption) {
            try {
                return (byte[]) getInIvMethod.invoke(cipherOption);
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }

        @Override
        public Object getCipherSuite(Object cipherOption) {
            try {
                return getCipherSuiteMethod.invoke(cipherOption);
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }

        @Override
        public List<Object> getCipherOptions(Configuration conf) throws IOException {
            // Negotiate cipher suites if configured. Currently, the only supported
            // cipher suite is AES/CTR/NoPadding, but the protocol allows multiple
            // values for future expansion.
            String cipherSuites = conf.get(DFS_ENCRYPT_DATA_TRANSFER_CIPHER_SUITES_KEY);
            if (cipherSuites == null || cipherSuites.isEmpty()) {
                return null;
            }
            if (!cipherSuites.equals(AES_CTR_NOPADDING)) {
                throw new IOException(String.format("Invalid cipher suite, %s=%s",
                        DFS_ENCRYPT_DATA_TRANSFER_CIPHER_SUITES_KEY, cipherSuites));
            }
            Object option;
            try {
                option = cipherOptionConstructor.newInstance(aesCipherSuite);
            } catch (InstantiationException | IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
            List<Object> cipherOptions = Lists.newArrayListWithCapacity(1);
            cipherOptions.add(option);
            return cipherOptions;
        }

        private Object unwrap(Object option, SaslClient saslClient) throws IOException {
            byte[] inKey = getInKey(option);
            if (inKey != null) {
                inKey = saslClient.unwrap(inKey, 0, inKey.length);
            }
            byte[] outKey = getOutKey(option);
            if (outKey != null) {
                outKey = saslClient.unwrap(outKey, 0, outKey.length);
            }
            try {
                return cipherOptionWithKeyAndIvConstructor.newInstance(getCipherSuite(option), inKey,
                        getInIv(option), outKey, getOutIv(option));
            } catch (InstantiationException | IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }

        @SuppressWarnings("unchecked")
        @Override
        public Object getCipherOption(DataTransferEncryptorMessageProto proto, boolean isNegotiatedQopPrivacy,
                SaslClient saslClient) throws IOException {
            List<Object> cipherOptions;
            try {
                cipherOptions = (List<Object>) convertCipherOptionProtosMethod.invoke(null,
                        getCipherOptionListMethod.invoke(proto));
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
            if (cipherOptions == null || cipherOptions.isEmpty()) {
                return null;
            }
            Object cipherOption = cipherOptions.get(0);
            return isNegotiatedQopPrivacy ? unwrap(cipherOption, saslClient) : cipherOption;
        }

        @Override
        public void addCipherOptions(Builder builder, List<Object> cipherOptions) {
            try {
                addAllCipherOptionMethod.invoke(builder,
                        convertCipherOptionsMethod.invoke(null, cipherOptions));
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }
    };
}

---

From source file:org.apache.hadoop.hbase.util.FanOutOneBlockAsyncDFSOutputSaslHelper.java

private static CipherHelper createCipherHelper27(Class<?> cipherOptionClass)
        throws ClassNotFoundException, NoSuchMethodException {
    @SuppressWarnings("rawtypes")
    Class<? extends Enum> cipherSuiteClass = Class.forName("org.apache.hadoop.crypto.CipherSuite")
            .asSubclass(Enum.class);
    @SuppressWarnings("unchecked")
    final Enum<?> aesCipherSuite = Enum.valueOf(cipherSuiteClass, "AES_CTR_NOPADDING");
    final Constructor<?> cipherOptionConstructor = cipherOptionClass.getConstructor(cipherSuiteClass);
    final Constructor<?> cipherOptionWithKeyAndIvConstructor = cipherOptionClass
            .getConstructor(cipherSuiteClass, byte[].class, byte[].class, byte[].class, byte[].class);

    final Method getCipherSuiteMethod = cipherOptionClass.getMethod("getCipherSuite");
    final Method getInKeyMethod = cipherOptionClass.getMethod("getInKey");
    final Method getInIvMethod = cipherOptionClass.getMethod("getInIv");
    final Method getOutKeyMethod = cipherOptionClass.getMethod("getOutKey");
    final Method getOutIvMethod = cipherOptionClass.getMethod("getOutIv");

    final Method convertCipherOptionsMethod = PBHelper.class.getMethod("convertCipherOptions", List.class);
    final Method convertCipherOptionProtosMethod = PBHelper.class.getMethod("convertCipherOptionProtos",
            List.class);
    final Method addAllCipherOptionMethod = DataTransferEncryptorMessageProto.Builder.class
            .getMethod("addAllCipherOption", Iterable.class);
    final Method getCipherOptionListMethod = DataTransferEncryptorMessageProto.class
            .getMethod("getCipherOptionList");
    return new CipherHelper() {

        @Override// w ww . ja  v a2 s  .  c o  m
        public byte[] getOutKey(Object cipherOption) {
            try {
                return (byte[]) getOutKeyMethod.invoke(cipherOption);
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }

        @Override
        public byte[] getOutIv(Object cipherOption) {
            try {
                return (byte[]) getOutIvMethod.invoke(cipherOption);
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }

        @Override
        public byte[] getInKey(Object cipherOption) {
            try {
                return (byte[]) getInKeyMethod.invoke(cipherOption);
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }

        @Override
        public byte[] getInIv(Object cipherOption) {
            try {
                return (byte[]) getInIvMethod.invoke(cipherOption);
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }

        @Override
        public Object getCipherSuite(Object cipherOption) {
            try {
                return getCipherSuiteMethod.invoke(cipherOption);
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }

        @Override
        public List<Object> getCipherOptions(Configuration conf) throws IOException {
            // Negotiate cipher suites if configured. Currently, the only supported
            // cipher suite is AES/CTR/NoPadding, but the protocol allows multiple
            // values for future expansion.
            String cipherSuites = conf.get(DFS_ENCRYPT_DATA_TRANSFER_CIPHER_SUITES_KEY);
            if (cipherSuites == null || cipherSuites.isEmpty()) {
                return null;
            }
            if (!cipherSuites.equals(AES_CTR_NOPADDING)) {
                throw new IOException(String.format("Invalid cipher suite, %s=%s",
                        DFS_ENCRYPT_DATA_TRANSFER_CIPHER_SUITES_KEY, cipherSuites));
            }
            Object option;
            try {
                option = cipherOptionConstructor.newInstance(aesCipherSuite);
            } catch (InstantiationException | IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
            List<Object> cipherOptions = Lists.newArrayListWithCapacity(1);
            cipherOptions.add(option);
            return cipherOptions;
        }

        private Object unwrap(Object option, SaslClient saslClient) throws IOException {
            byte[] inKey = getInKey(option);
            if (inKey != null) {
                inKey = saslClient.unwrap(inKey, 0, inKey.length);
            }
            byte[] outKey = getOutKey(option);
            if (outKey != null) {
                outKey = saslClient.unwrap(outKey, 0, outKey.length);
            }
            try {
                return cipherOptionWithKeyAndIvConstructor.newInstance(getCipherSuite(option), inKey,
                        getInIv(option), outKey, getOutIv(option));
            } catch (InstantiationException | IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }

        @SuppressWarnings("unchecked")
        @Override
        public Object getCipherOption(DataTransferEncryptorMessageProto proto, boolean isNegotiatedQopPrivacy,
                SaslClient saslClient) throws IOException {
            List<Object> cipherOptions;
            try {
                cipherOptions = (List<Object>) convertCipherOptionProtosMethod.invoke(null,
                        getCipherOptionListMethod.invoke(proto));
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
            if (cipherOptions == null || cipherOptions.isEmpty()) {
                return null;
            }
            Object cipherOption = cipherOptions.get(0);
            return isNegotiatedQopPrivacy ? unwrap(cipherOption, saslClient) : cipherOption;
        }

        @Override
        public void addCipherOptions(Builder builder, List<Object> cipherOptions) {
            try {
                addAllCipherOptionMethod.invoke(builder,
                        convertCipherOptionsMethod.invoke(null, cipherOptions));
            } catch (IllegalAccessException | InvocationTargetException e) {
                throw new RuntimeException(e);
            }
        }
    };
}

---