Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • algorithm - specifies the symmetric block cipher used to encrypt the data. The value is an XML Encryption algorithm URI. This property may not be null. If not specified by the caller, an internal default will be used.
  • encryptionCredential - specifies the symmetric encryption key that will be used to encrypt the data, in the form of a org.opensaml.xml.security.credential.Credential, containing a javax.crypto.SecretKey. It may be null, in which case a random data encryption key will be automatically generated and supplied via a minimal Credential instance.
  • keyInfoGenerator - specifies an instance of org.opensaml.xml.security.keyinfo.KeyInfoGenerator which will be used to generate a KeyInfo element from the encryption Credential, which in turn will be included in the resultant EncryptedData. It may be null, in which case no KeyInfo will generated or included in the EncryptedData.

...

  • algorithm - specifies the key transport algorithm used to encrypt the data encryption key. The value is an XML Encryption algorithm URI. This property may not be null. There is no default, and it is the responsibility of the caller to ensure that the algorithm specified is consistent with the key encryption key specified in the encryptionCredential property.
  • encryptionCredential - specifies the key encryption key that will be used to encrypt the data encryption key, in the form of a org.opensaml.xml.security.credential.Credential, containing either a java.security.PublicKey (for asymmetric key transport) or javax.crypto.SecretKey (for symmetric key wrap). This property may not be null, and it is the responsibility of the caller to ensure that the key encryption key specified is consistent with the algorithm specified in the algorithm property.
  • keyInfoGenerator - specifies an instance of org.opensaml.xml.security.keyinfo.KeyInfoGenerator which will be used to generate a KeyInfo element from the key encryption Credential, which in turn will included in the resultant EncryptedKey. It may be null, in which case no KeyInfo will generated or included in the EncryptedKey.
  • recipient - specifies the value of the recipient attribute that will be set on the resultant EncryptedKey element. It may be null, in which case no recipient attribute will be included.

...