com.entrust.toolkit.security.crypto.cipher

Class Cast3Cipher

java.lang.Object

javax.crypto.CipherSpi

com.entrust.toolkit.security.crypto.cipher.SymmetricBlockCipher

com.entrust.toolkit.security.crypto.cipher.Cast3Cipher

public final class Cast3Cipher
extends SymmetricBlockCipher

An implementation of the CAST3 symmetric block cipher.

CAST3 is a symmetric block cipher that can process data blocks of 64 bits, with cipher keys of lengths 40, 48, 56, and 64 bits.

An instance of this algorithm can be obtained using the Java Cryptography Architecture (JCA), by requesting a 'CAST3' cipher from the Entrust cryptographic service provider. This can be done using either of the following calls:

Cipher.getInstance("CAST3", "Entrust");
Cipher.getInstance("CAST3/<mode>/<padding>", "Entrust");

A default block mode (mechanism) and padding mechanism are automatically used when either block mechanism or padding mechanism are not specified in the Cipher.getInstance() call. For a description of Entrust's symmetric block cipher architecture, including supported block mechanisms, padding mechanisms, and their default values, please refer to SymmetricBlockCipher.

This cipher implementation only accepts keys in 'RAW' format (software keys). A CAST3 key can be generated using the CAST3 key generation algorithm (KeyGenerator.getInstance("CAST3, "Entrust") ) or manually created using an appropriate Key implementation ( javax.crypto.spec.SecretKeySpec).

This cipher implementation only requires parameters when operated in a mode that requires an initialization vector (IV). In this case, the only algorithm parameters in transparent representation that are accepted are javax.crypto.spec.IvParameterSpec and Cast3ParameterSpec. Algorithm parameters in opaque representation are also accepted ( AlgorithmParameters.getInstance("CAST3, "Entrust"), AlgorithmParameters.getInstance("IV, "Entrust") ), but these will need to be initialized with a transparent representation before they can be used by the cipher.

This class SHOULD NOT be used directly; it should only be used through the JCA/JCE.

Warning:

CAST3 provides a maximum of 64-bits of security; NIST recommends a minimum of 112-bits of security be used beyond 2010. This algorithm should be used for interoperability purposes only.

FIPS 140-2:

This class is part of the Toolkit's FIPS 140-2 cryptographic module and contains APIs that are considered part of the logical interface to the Toolkit's FIPS 140-2 cryptographic module; refer to the API documentation for further details

See:

US Patent 5,825,887

Since:

7.0

See Also:

Cast3KeyGenerator

Constructor Summary

Constructors

Constructor and Description
Cast3Cipher() The constructor; creates a new instance of the CAST3 symmetric cipher algorithm.

Method Summary

Methods inherited from class com.entrust.toolkit.security.crypto.cipher.SymmetricBlockCipher

engineDoFinal, engineDoFinal, engineGetBlockSize, engineGetIV, engineGetKeySize, engineGetOutputSize, engineGetParameters, engineInit, engineInit, engineInit, engineSetMode, engineSetPadding, engineUnwrap, engineUpdate, engineUpdate, engineUpdateAAD, engineWrap

Methods inherited from class javax.crypto.CipherSpi

engineDoFinal, engineUpdate, engineUpdateAAD

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Cast3Cipher

public Cast3Cipher()

The constructor; creates a new instance of the CAST3 symmetric cipher algorithm.

Applications should never use this constructor, instead the symmetric cipher algorithm should be requested from the appropriate JCA/JCE cryptographic service provider as follows: Cipher.getInstance("CAST3", "Entrust").

FIPS 140-2:

FIPS Service: Modify Object

This API is part of the logical interface to the Toolkit's FIPS 140-2 cryptographic module; use of this API causes the caller to assume the FIPS 140-2 user role and accesses the following FIPS 140-2 logical interfaces:

• control input interface (API call)
• status output interface (exceptions)