com.entrust.toolkit.security.crypto.cipher

Class DesCipher

java.lang.Object

javax.crypto.CipherSpi

com.entrust.toolkit.security.crypto.cipher.SymmetricBlockCipher

com.entrust.toolkit.security.crypto.cipher.DesCipher

public final class DesCipher
extends SymmetricBlockCipher

An implementation of the DES symmetric block cipher.

DES is a symmetric block cipher that can process data blocks of 64 bits, with cipher keys of length 64 bits (56 security bits, 8 parity bits).

An instance of this algorithm can be obtained using the Java Cryptography Architecture (JCA), by requesting a 'DES' cipher from the Entrust cryptographic service provider. This can be done using either of the following calls:

Cipher.getInstance("DES", "Entrust");
Cipher.getInstance("DES/<mode>/<padding>", "Entrust");

A default block mode (mechanism) and padding mechanism are automatically used when either block mechanism or padding mechanism are not specified in the Cipher.getInstance() call. For a description of Entrust's symmetric block cipher architecture, including supported block mechanisms, padding mechanisms, and their default values, please refer to SymmetricBlockCipher.

This cipher implementation only accepts keys in 'RAW' format (software keys). A DES key can be generated using the DES key generation algorithm (KeyGenerator.getInstance("DES, "Entrust") ) or manually created using an appropriate Key implementation ( javax.crypto.spec.SecretKeySpec).

This cipher implementation only requires parameters when operated in a mode that requires an initialization vector (IV). In this case, the only algorithm parameters in transparent representation that are accepted are javax.crypto.spec.IvParameterSpec. Algorithm parameters in opaque representation are also accepted (AlgorithmParameters.getInstance("DES, "Entrust") ), but these will need to be initialized with a transparent representation before they can be used by the cipher.

This class SHOULD NOT be used directly; it should only be used through the JCA/JCE.

Warning:

On July 27 2004, NIST announced that the strength of the DES algorithm is no longer sufficient to adequately protect Federal government information. As a result, NIST has proposed withdrawing FIPS 46-3, which specifies DES, and two related standards. Please refer to the excerpt from the Federal Register / Vol. 69, No. 142 / Monday, July 26, 2004 / Notice: Announcing Proposed Withdrawal of Federal Information Processing Standard (FIPS) for the Data Encryption Standard (DES) and Request for Comments.

Future use of DES by Federal agencies is to be permitted only as a component function of the Triple Data Encryption Algorithm ( TDEA)(NIST Special Publication 800-67). TDEA may be used for the protection of Federal information (except keying option 3 (1-key Triple-DES)); however, NIST encourages agencies to implement the faster and stronger algorithm specified by FIPS 197, Advanced Encryption Standard ( AES) instead.

FIPS 140-2:

This class is part of the Toolkit's FIPS 140-2 cryptographic module and contains APIs that are considered part of the logical interface to the Toolkit's FIPS 140-2 cryptographic module; refer to the API documentation for further details

Since:

7.1

See Also:

FIPS 46-3, Data Encryption Standard (DES)

Constructor Summary

Constructors

Constructor and Description
DesCipher() The constructor; creates a new instance of the AES symmetric cipher algorithm.

Method Summary

Methods inherited from class com.entrust.toolkit.security.crypto.cipher.SymmetricBlockCipher

engineDoFinal, engineDoFinal, engineGetBlockSize, engineGetIV, engineGetKeySize, engineGetOutputSize, engineGetParameters, engineInit, engineInit, engineInit, engineSetMode, engineSetPadding, engineUnwrap, engineUpdate, engineUpdate, engineUpdateAAD, engineWrap

Methods inherited from class javax.crypto.CipherSpi

engineDoFinal, engineUpdate, engineUpdateAAD

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DesCipher

public DesCipher()

The constructor; creates a new instance of the AES symmetric cipher algorithm.

Applications should never use this constructor, instead the symmetric cipher algorithm should be requested from the appropriate JCA/JCE cryptographic service provider as follows: Cipher.getInstance("DES", "Entrust").

FIPS 140-2:

FIPS Service: Modify Object

This API is part of the logical interface to the Toolkit's FIPS 140-2 cryptographic module; use of this API causes the caller to assume the FIPS 140-2 user role and accesses the following FIPS 140-2 logical interfaces:

• control input interface (API call)
• status output interface (exceptions)