Class: Sandal::Enc::Alg::RSA_OAEP

Inherits:
Object
  • Object
show all
Defined in:
lib/sandal/enc/alg/rsa_oaep.rb

Overview

The RSAES with OAEP key encryption mechanism.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(key) ⇒ RSA_OAEP

Creates a new instance.

encryption (public) or decryption (private). If the value is a String then it will be passed to the constructor of the RSA class. This must be at least 2048 bits to be compliant with the JWA specification.



19
20
21
22
23
 
# File 'lib/sandal/enc/alg/rsa_oaep.rb', line 19

def initialize(key)
  @name = 'RSA-OAEP'
  @key = key.is_a?(String) ? OpenSSL::PKey::RSA.new(key) : key
  @padding = OpenSSL::PKey::RSA::PKCS1_OAEP_PADDING
end

Instance Attribute Details

#name ⇒ String (readonly) 



11
12
13
 
# File 'lib/sandal/enc/alg/rsa_oaep.rb', line 11

def name
  @name
end

Instance Method Details

#decrypt_cmk(encrypted_cmk) ⇒ String

Decrypts the content master key.

Raises:



38
39
40
41
42
 
# File 'lib/sandal/enc/alg/rsa_oaep.rb', line 38

def decrypt_cmk(encrypted_cmk)
  @key.private_decrypt(encrypted_cmk, @padding)
rescue
  raise Sandal::TokenError, 'Cannot decrypt content master key.'
end

#encrypt_cmk(cmk) ⇒ String

Encrypts the content master key.



29
30
31
 
# File 'lib/sandal/enc/alg/rsa_oaep.rb', line 29

def encrypt_cmk(cmk)
  @key.public_encrypt(cmk, @padding)
end