All Classes and Interfaces
Class
Description
An abstract OutputProcessor class for reusabilty
Processor for decryption of EncryptedData XML structures
The DecryptionThread handles encrypted XML-Parts
An abstract class representing a SignatureMethod.
Processor buffers encrypted XMLEvents and forwards them when final is called
Processor to encrypt XML structures
An abstract InputProcessor class for reusabilty
Abstract class for SecurityHeaderHandlers with parse LOGic for the xml structures
An abstract OutputProcessor class for reusabilty
Converts
Strings into Nodes and visa versa.A Key Agreement algorithm provides for the derivation of a shared secret key
based on a shared secret computed from certain types of compatible public
keys from both the sender and the recipient.
The implementation of the AgreementMethod interface.
<p>Java class for AgreementMethodType complex type</p>.
The Algorithm class which stores the Algorithm URI as a string.
<p>Java class for AlgorithmIdentifierType complex type</p>.
<p>Java class for AlgorithmType complex type</p>.
XMLSignatureInput Data wrapper.
This is a wrapper/glue class which invokes the Apache XML-Security
Transform.
Compares two attributes based on the C14n specification.
Deprecated.
This Exception is thrown if decoding of Base64 data fails.
Temporary swapped static functions from the normalizer Section
Class CanonicalizationException
<p>Java class for CanonicalizationMethodType complex type</p>.
Implements Canonical
XML Version 1.0, a W3C Recommendation from 15 March 2001.
Implements " Exclusive XML
Canonicalization, Version 1.0 "
Class Canonicalizer20010315ExclWithComments
Abstract base class for canonicalization algorithms.
Serializes the physical representation of the subtree.
Base class which all Canonicalization algorithms extend.
<p>Java class for CharTwoFieldParamsType complex type</p>.
CipherData provides encrypted data.<p>Java class for CipherDataType complex type</p>.
CipherReference identifies a source which, when processed,
yields the encrypted octet sequence.<p>Java class for CipherReferenceType complex type</p>.
CipherValue is the wrapper for cipher text.<p>Java class for CipherValueType complex type</p>.
This class is extremely useful for loading resources and classes in a fault
tolerant manner that works across different applications servers.
Two comparable types are compared by their name.
Key DerivationAlgorithm implementation, defined in Section 5.8.1 of NIST SP 800-56A [SP800-56A], and is equivalent
to the KDF3 function defined in ANSI X9.44-2007 [ANSI-X9-44-2007] when the contents of the OtherInfo parameter
is structured as in NIST SP 800-56A.
Class ConcatKDFParams is used to specify parameters for the
ConcatKDF key derivation algorithm.
The ConcatKDF key derivation algorithm parameters builder.
Class ConcatKDFParamsImpl is an DOM representation of the ConcatKDFParams.
<p>Java class for ConcatKDFParamsType complex type</p>.
Configuration Properties
<p>Java class for ConfigurationType complex type</p>.
Provides all constants and some translation functions for i18n.
<p>Java class for CurveType complex type</p>.
Provides the means to navigate through a DER-encoded byte array, to help
in decoding the contents.
This Exception is thrown if decoding of ASN.1 (DER) data fails.
Provides content model support for the
dsig11:DEREncodedKeyvalue element.KeyResolverSpi implementation which resolves public keys from a
dsig11:DEREncodedKeyValue element.<p>Java class for DEREncodedKeyValueType complex type</p>.
The DerivationAlgorithm is the base interface for all key derivation algorithms
implementation.
<p>Java class for DerivedKeyType complex type</p>.
This class has been modified slightly to use java.security.MessageDigest
objects as input, rather than
org.apache.xml.security.algorithms.MessageDigestAlgorithm objects.
<p>Java class for DigestMethodType complex type</p>.
A Streaming based message-digest implementation
This class holds per document, context informations
A concrete DocumentContext Implementation
Converts
Strings into Nodes and visa versa.DOM-based implementation of Base64 Encoding Transform.
DOM-based abstract implementation of CanonicalizationMethod.
DOM-based implementation of CanonicalizationMethod for Canonical XML 1.1
(with or without comments).
DOM-based implementation of CanonicalizationMethod for Canonical XML
(with or without comments).
A DOM-based representation of the XML
CryptoBinary simple type
as defined in the W3C specification for XML-Signature Syntax and Processing.DOM-based abstract implementation of DigestMethod.
DOM-based implementation of Enveloped Signature Transform.
DOM-based implementation of CanonicalizationMethod for Exclusive
Canonical XML algorithm (with or without comments).
DOM-based implementation of HMAC SignatureMethod.
DOM-based implementation of KeyInfo.
DOM-based implementation of KeyInfoFactory.
DOM-based implementation of KeyName.
DOM-based implementation of KeyValue.
DOM-based implementation of Manifest.
This class adapts the
Node namespace/prefix lookup API to that of NamespaceContext.DOM-based implementation of PGPData.
DOM-based implementation of Reference.
DOM-based implementation of RetrievalMethod.
DOM-based abstract implementation of SignatureMethod for RSA-PSS.
DOM-based abstract implementation of SignatureMethod.
Abstract class to support signature algorithms that sign and verify
signatures in the IEEE P1363 format.
DOM-based implementation of SignatureProperties.
DOM-based implementation of SignatureProperty.
DOM-based implementation of SignedInfo.
DOM-based abstract implementation of XMLStructure.
This is a subtype of NodeSetData that represents a dereferenced
same-document URI as the root of a subdocument.
This is an Iterator that contains a backing node-set that is
not populated until the caller first attempts to advance the iterator.
DOM-based abstract implementation of Transform.
DOM-based implementation of URIDereferencer.
Useful static DOM utility methods.
DOM-based implementation of X509Data.
DOM-based implementation of X509IssuerSerial.
DOM-based implementation of XMLObject.
DOM-based implementation of XMLSignature.
DOM-based implementation of XMLSignatureFactory.
DOM-based implementation of XPath Filter 2.0 Transform.
DOM-based implementation of XPath Filtering Transform.
DOM-based implementation of XSLT Transform.
<p>Java class for DSAKeyValueType complex type</p>.
<p>Java class for ECKeyValueType complex type</p>.
<p>Java class for ECParametersType complex type</p>.
<p>Java class for ECValidationDataType complex type</p>.
This is the base class to all Objects which have a direct 1:1 mapping to an
Element in a particular namespace.
The
EncryptedData element is the core element in the syntax.<p>Java class for EncryptedDataType complex type</p>.
The
EncryptedKey element is used to transport encryption keys
from the originator to a known recipient(s).The
EncryptedKeyResolver is not a generic resolver.<p>Java class for EncryptedKeyType complex type</p>.
<p>Java class for EncryptedType complex type</p>.
EncryptedType is the abstract type from which
EncryptedData and
EncryptedKey are derived.Class Encryption11ElementProxy
Class EncryptionElementProxy
EncryptionMethod describes the encryption algorithm applied to
the cipher data.<p>Java class for EncryptionMethodType complex type</p>.
EncryptionPartDef holds information about parts to be encrypt
EncryptionProperties can hold additional information concerning
the generation of the EncryptedData or
EncryptedKey.<p>Java class for EncryptionPropertiesType complex type</p>.
Additional information items concerning the generation of the
EncryptedData or EncryptedKey can be placed in an
EncryptionProperty element (e.g., date/time stamp or the serial
number of cryptographic hardware used during encryption).<p>Java class for EncryptionPropertyType complex type</p>.
<p>Java class for FieldIDType complex type</p>.
Processor which outputs the XMLEvents to an outputStream
This Processor can be extended to allow to write to a StAX writer instead of directly to an output stream
<p>Java class for HandlerType complex type</p>.
The implementation of the HMAC-based Extract-and-Expand Key Derivation Function (HKDF)
as defined in RFC 5869.
Class HKDFParams (HKDF parameter) is used to specify
parameters for the HMAC-based Extract-and-Expand Key Derivation Function.
This class is used to create HKDF configuration parameters
HKDFParams.Class HKDFParamsImpl is an DOM representation of the HKDF Parameters.
<p>Java class for HKDFParamsType complex type</p>.
The Internationalization (I18N) pack.
Deprecated.
This
ErrorHandler does absolutely nothing but LOG
the events.The document security context
Concrete security context implementation
This class represents the different token types which can occur in WS-Security
Inbound Streaming-XML-Security
An instance of this class can be retrieved over the XMLSec class
<p>Java class for Include complex type</p>.
<p>Java class for InclusiveNamespaces complex type</p>.
This Object serves as Content for the ds:Transforms for exclusive
Canonicalization.
This class does the configuration of the library.
Class to load the algorithms-mappings from a configuration file.
<p>Java class for inOutAttrType</p>.
This is the Interface which every InputProcessor must implement.
The InputProcessorChain manages the InputProcessors and controls the XMLEvent flow
Implementation of a InputProcessorChain
Class IntegrityHmacMD5
Class IntegrityHmacRIPEMD160
Class IntegrityHmacSHA1
Class IntegrityHmacSHA224
Class IntegrityHmacSHA256
Class IntegrityHmacSHA384
Class IntegrityHmacSHA512
Raised when the computed hash value doesn't match the given DigestValue.
Raised if testing the signature value over DigestValue fails because of invalid signature.
IV splitting from the first few bytes in the stream.
A collection of different, general-purpose methods for JAVA-specific things
Mapping between JCE id and xmlsec uri's for algorithms
<p>Java class for JCEAlgorithmMappingsType complex type</p>.
This class maps algorithm identifier URIs to JAVA JCE class names.
Represents the Algorithm xml element
An implementation for XPath evaluation that uses the JDK API.
A Factory to return a JDKXPathAPI instance.
Marker interface for all KDFParams implementations.
This class is used to pass parameters to the KeyAgreement algorithm.
This enum defines the actor type of the KeyAgreement algorithm.
The key derivation is to generate new cryptographic key material from existing
key material such as the shared secret and any other (private or public)
information.
Class KeyDerivationMethodImpl is an DOM implementation of the KeyDerivationMethod.
<p>Java class for KeyDerivationMethodType complex type</p>.
Abstract key derivation class contains the basic parameters used for the key derivation.
This class stand for KeyInfo Element that may contain keys, names,
certificates and other public key management information,
such as in-band key distribution or key agreement data.
Empty interface just to identify Elements that can be children of ds:KeyInfo.
This class is the extension of the
KeyInfo class.Provides content model support for the
dsig11:KeyInfoReference element.KeyResolverSpi implementation which resolves public keys, private keys, secret keys, and X.509 certificates from a
dsig11:KeyInfoReference element.<p>Java class for KeyInfoReferenceType complex type</p>.
<p>Java class for KeyInfoType complex type</p>.
KeyResolver is factory class for subclass of KeyResolverSpi that
represent child element of KeyInfo.
Iterate over the KeyResolverSpi instances
This class is an abstract class to resolve a Key of some kind given a KeyInfo element.
Makes the Certificates from a JAVA
KeyStore object available to the
StorageResolver.Class KeyStoreIterator
A set of utility methods to handle keys.
Enumeration of Supported key algorithm types.
Enumeration of specific key types.
The KeyValue element contains a single public key that may be useful in
validating the signature.
<p>Java class for KeyValueType complex type</p>.
Derived from Apache sources and changed to use Mac objects instead of
org.apache.xml.security.algorithms.SignatureAlgorithm objects.
Handles
<ds:Manifest> elements.<p>Java class for ManifestType complex type</p>.
<p>Java class for MaskGenerationFunctionType complex type</p>.
Digest Message wrapper and selector class.
<p>Java class for MGFType complex type</p>.
Thrown by
SignedInfo.verify() when
testing the signature fails because of uninitialized
References.<p>Java class for NamedCurveType complex type</p>.
The internal structure of NameSpaceSymbTable.
A stack based Symbol Table.
An interface to tell to the c14n if a node is included or not in the output
Handles
<ds:Object> elements
Object Element supply facility which can contain any kind data
$todo$ if we remove children, the boolean values are not updatedThis object contains factory methods for each
Java content interface and Java element interface
generated in the org.apache.xml.security.binding.excc14n package.
This object contains factory methods for each
Java content interface and Java element interface
generated in the org.apache.xml.security.binding.xmldsig package.
This object contains factory methods for each
Java content interface and Java element interface
generated in the org.apache.xml.security.binding.xmldsig11 package.
This object contains factory methods for each
Java content interface and Java element interface
generated in the org.apache.xml.security.binding.xmldsigmore package.
This object contains factory methods for each
Java content interface and Java element interface
generated in the org.apache.xml.security.binding.xmlenc package.
This object contains factory methods for each
Java content interface and Java element interface
generated in the org.apache.xml.security.binding.xmlenc11 package.
This object contains factory methods for each
Java content interface and Java element interface
generated in the org.apache.xml.security.binding.xop package.
This object contains factory methods for each
Java content interface and Java element interface
generated in the org.apache.xml.security.configuration package.
<p>Java class for ObjectType complex type</p>.
The OriginatorKeyInfo element is used in the
ds:KeyInfo with AgreementMethod elements.The document security context
Concrete security context implementation
Outbound Streaming-XML-Security
An instance of this class can be retrieved over the XMLSec class
This is the Interface which every OutputProcessor must implement.
The OutputProcessorChain manages the OutputProcessors and controls the XMLEvent flow
Implementation of a OutputProcessorChain
<p>Java class for PBKDF2ParameterType complex type</p>.
<p>Java class for anonymous complex type</p>.
$todo$ Implement
<p>Java class for PGPDataType complex type</p>.
<p>Java class for PnBFieldParamsType complex type</p>.
<p>Java class for PRFAlgorithmIdentifierType complex type</p>.
<p>Java class for PrimeFieldParamsType complex type</p>.
Resolves a PrivateKey within a KeyStore based on the KeyInfo hints.
Basic interface for Output- and Input-Processor chains
<p>Java class for PropertiesType complex type</p>.
<p>Java class for PropertyType complex type</p>.
The RecipientKeyInfo element is used in the
ds:KeyInfo with AgreementMethod elements.A wrapper for a pointer from a key value of an
EncryptedKey to
items encrypted by that key value (EncryptedData or
EncryptedKey elements).Handles
<ds:Reference> elements.An abstract representation of the result of dereferencing a ds:Reference URI.
<p>Java class for anonymous complex type</p>.
ReferenceList is an element that contains pointers from a key
value of an EncryptedKey to items encrypted by that key value
(EncryptedData or EncryptedKey elements).An abstract representation of a
ReferenceData type containing a node-set.Raised if verifying a
Reference fails
because of an uninitialized XMLSignatureInputA representation of a
ReferenceData type containing an OctetStream.A representation of a
ReferenceNodeSetData type containing a node-set.This is an Iterator that contains a backing node-set that is
not populated until the caller first attempts to advance the iterator.
<p>Java class for ReferenceType complex type</p>.
<p>Java class for ReferenceType complex type</p>.
A OutputStream which allows to replace another chained output-stream
A simple ResourceResolver for HTTP requests.
Resolver for local filesystem resources.
This resolver is used for resolving same-document URIs like URI="" of URI="#id".
Resolver for external http[s] resources.
A simple ResourceResolver for requests into the local filesystem.
Resolver for references in the same document.
<p>Java class for ResolverType complex type</p>.
Resolver for xpointer references in the same document.
Handles barename XPointer Reference URIs.
During reference validation, we have to retrieve resources from somewhere.
This Exception is thrown if something related to the
ResourceResolver goes wrong.During reference validation, we have to retrieve resources from somewhere.
<p>Java class for ResourceResolversType complex type</p>.
The RetrievalMethodResolver can retrieve public keys and certificates from
other locations.
<p>Java class for RetrievalMethodType complex type</p>.
<p>Java class for RSAKeyValueType complex type</p>.
<p>Java class for RSAPSSParamsType complex type</p>.
Resolves a SecretKey within a KeyStore based on the KeyName.
Class to describe which and how an element must be secured
Security-header handler mapper
<p>Java class for SecurityHeaderHandlersType complex type</p>.
External view to a SecurityToken
Factory to create SecurityToken Objects from keys in XML
Factory to create SecurityToken Objects from keys in XML
A SecurityTokenProvider is a object which provides a Token for cryptographic operations
Converts
Strings into Nodes and visa versa.Class SignatureElementProxy
Allows selection of digital signature's algorithm, private keys, other
security parameters, and algorithm's ID.
Class SignatureRSAMD5
Class SignatureRSARIPEMD160
Class SignatureRSASHA1
Class SignatureRSASHA1MGF1
Class SignatureRSASHA224
Class SignatureRSASHA224MGF1
Class SignatureRSASHA256
Class SignatureRSASHA256MGF1
Class SignatureRSA3_SHA224MGF1
Class SignatureRSA3_SHA256MGF1
Class SignatureRSA3_SHA384MGF1
Class SignatureRSASHA3_512MGF1
Class SignatureRSASHA384
Class SignatureRSASHA384MGF1
Class SignatureRSASHA512
Class SignatureRSASHA512MGF1
Class SignatureECDSARIPEMD160
Class SignatureECDSASHA1
Class SignatureECDSASHA224
Class SignatureECDSASHA256
Class SignatureECDSASHA3-224
Class SignatureECDSASHA3-256
Class SignatureECDSASHA3-384
Class SignatureECDSASHA3-512
Class SignatureECDSASHA384
Class SignatureECDSASHA512
Class SignatureEd25519
Class SignatureEd448
Class SignatureElementProxy
<p>Java class for SignatureMethodType complex type</p>.
SignaturePartDef holds information about parts to be signed
Handles
<ds:SignatureProperties> elements
This Element holds SignatureProperty properties that contain additional information items
concerning the generation of the signature.<p>Java class for SignaturePropertiesType complex type</p>.
Handles
<ds:SignatureProperty> elements
Additional information item concerning the generation of the signature(s) can
be placed in this Element<p>Java class for SignaturePropertyType complex type</p>.
<p>Java class for SignatureType complex type</p>.
<p>Java class for SignatureValueType complex type</p>.
Handles
<ds:SignedInfo> elements
This SignedInfo element includes the canonicalization algorithm,
a signature algorithm, and one or more references.<p>Java class for SignedInfoType complex type</p>.
Derived from Apache sources and changed to use java.security.Signature
objects as input instead of
org.apache.xml.security.algorithms.SignatureAlgorithm objects.
Class InternalIterator
Resolves a single Key based on the KeyName.
$todo$ implement
<p>Java class for SPKIDataType complex type</p>.
This class collects customized resolvers for Certificates.
Class StorageResolverIterator
This iterates over all the Certificates found in all the resolvers.
<p>Java class for TnBFieldParamsType complex type</p>.
Implements the behaviour of the
ds:Transform element.<p>Java class for TransformAlgorithmsType complex type</p>.
<p>Java class for TransformAlgorithmType complex type</p>.
Implements the
http://www.w3.org/2000/09/xmldsig#base64 decoding
transform.Implements the
http://www.w3.org/TR/2001/REC-xml-c14n-20010315
transform.Implements the
http://www.w3.org/2006/12/xml-c14n11
(C14N 1.1) transform.Implements the
http://www.w3.org/2006/12/xml-c14n-11#WithComments
(C14N 1.1 With Comments) transform.Class TransformC14NExclusive
Implements the
http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments
transform.Implements the
http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments
transform.Implements the
http://www.w3.org/2000/09/xmldsig#enveloped-signature
transform.Mapping between JCE id and xmlsec uri's for algorithms
A container for
ds:Transforms.Holder of the
Transform steps to
be performed on the data.Converts
Strings into Nodes and visa versa.Base class which all Transform algorithms extend.
<p>Java class for TransformsType complex type</p>.
<p>Java class for TransformsType complex type</p>.
<p>Java class for TransformType complex type</p>.
Class TransformXPath
Implements the
http://www.w3.org/TR/1999/REC-xpath-19991116
transform.Implements the XML Signature XPath Filter v2.0
Class TransformXSLT
Implements the
http://www.w3.org/TR/1999/REC-xslt-19991116
transform.Trimms the start and the end of a stream
Unchecked Exception to mark uncaught-exceptions in threads
A specialized
InputStream for reading the contents of a byte array.A simple Unsynced ByteArrayOutputStream
Miscellaneous static utility methods for use in JSR 105 RI.
Holds the result of a Reference validation.
Resolves Certificates which are directly contained inside a
ds:X509Certificate Element.<p>Java class for X509DataType complex type</p>.
KeyResolverSpi implementation which resolves public keys and X.509 certificates from a
dsig11:X509Digest element.<p>Java class for X509DigestType complex type</p>.
<p>Java class for X509IssuerSerialType complex type</p>.
Absolutely primitive XInclude#xpointer scheme handling
An XmlAttrStack that is shared between the Canonical XML 1.0 and 1.1 implementations.
XMLCipher encrypts and decrypts the contents of
Documents, Elements and Element
contents.XMLCipherInput is used to wrap input passed into the
XMLCipher encryption operations.Constants
Processor for decryption of EncryptedData XML structures
Defines the XMLDSigRI provider.
An input handler for the EncryptedKey XML Structure
Processor to encrypt XML structures
The XMLEventReaderInputProcessor reads requested XMLEvents from the original XMLEventReader
and returns them to the requester
A interface to allow pluggable ways of parsing an InputStream into a DOM Document.
A default implementation of XMLParser that uses two pools of DocumentBuilders.
This is the central class of the streaming XML-security framework.
Class to let XML-Attributes be comparable how it is requested by C14N
Class to let XML-Namespaces be comparable how it is requested by C14N
Exception when configuration errors are detected
XMLSecurityConstants for global use
The mother of all Exceptions in this bundle.
Processor for XML Security.
Temporary processor to replay the buffered events
Main configuration class to supply keys etc.
A custom implementation of a XMLStreamReader to get back from the XMLEventReader world
to XMLStreamReader
Custom XMLStreamWriter to map XMLStreamWriter method calls into XMLEvent's
Handles
<ds:Signature> elements.The XMLSignature Input as a byte array containing a collection of nodes
or a subnode excluding or not comments and excluding or not other nodes.
The XMLSignature Input as a precomputed digest.
An EndingOutputProcessor for XML Signature.
All XML Signature related exceptions inherit herefrom.
The XMLSignature Input
Class XMLSignatureInputDebugger
An input handler for XML Signature.
The XMLSignature Input wrapping a
NodeAn OutputProcessor for XML Signature.
A processor to verify XML Signature references.
The XMLSignature Input as an input stream containing a collection of nodes
or a subnode excluding or not comments and excluding or not other nodes.
DOM and XML accessibility and comfort functions.
Just used for tagging contents that are allowed inside a ds:X509Data Element.
Provides content model support for the
dsig11:X509Digest element.Handles SubjectKeyIdentifier (SKI) for X.509v3.
Implements the parameters for the XPath Filter v2.0.
An interface to abstract XPath evaluation
This Object serves both as namespace prefix resolver and as container for
the
ds:XPath Element.A Factory to return an XPathAPI instance.