- java.lang.Object
-
- javax.crypto.Mac
-
- All Implemented Interfaces:
- Cloneable
public class Mac extends Object implements Cloneable
This class provides the functionality of a "Message Authentication Code" (MAC) algorithm.A MAC provides a way to check the integrity of information transmitted over or stored in an unreliable medium, based on a secret key. Typically, message authentication codes are used between two parties that share a secret key in order to validate information transmitted between these parties.
A MAC mechanism that is based on cryptographic hash functions is referred to as HMAC. HMAC can be used with any cryptographic hash function, e.g., SHA256 or SHA384, in combination with a secret shared key. HMAC is specified in RFC 2104.
Every implementation of the Java platform is required to support the following standard
Macalgorithms:- HmacMD5
- HmacSHA1
- HmacSHA256
- Since:
- 1.4
-
-
Constructor Summary
Constructors Modifier Constructor and Description protectedMac(MacSpi macSpi, Provider provider, String algorithm)Creates a MAC object.
-
Method Summary
Methods Modifier and Type Method and Description Objectclone()Returns a clone if the provider implementation is cloneable.byte[]doFinal()Finishes the MAC operation.byte[]doFinal(byte[] input)Processes the given array of bytes and finishes the MAC operation.voiddoFinal(byte[] output, int outOffset)Finishes the MAC operation.StringgetAlgorithm()Returns the algorithm name of thisMacobject.static MacgetInstance(String algorithm)Returns aMacobject that implements the specified MAC algorithm.static MacgetInstance(String algorithm, Provider provider)Returns aMacobject that implements the specified MAC algorithm.static MacgetInstance(String algorithm, String provider)Returns aMacobject that implements the specified MAC algorithm.intgetMacLength()Returns the length of the MAC in bytes.ProvidergetProvider()Returns the provider of thisMacobject.voidinit(Key key)Initializes thisMacobject with the given key.voidinit(Key key, AlgorithmParameterSpec params)Initializes thisMacobject with the given key and algorithm parameters.voidreset()Resets thisMacobject.voidupdate(byte input)Processes the given byte.voidupdate(byte[] input)Processes the given array of bytes.voidupdate(byte[] input, int offset, int len)Processes the firstlenbytes ininput, starting atoffsetinclusive.voidupdate(ByteBuffer input)Processesinput.remaining()bytes in the ByteBufferinput, starting atinput.position().
-
-
-
Method Detail
-
getAlgorithm
public final String getAlgorithm()
Returns the algorithm name of thisMacobject.This is the same name that was specified in one of the
getInstancecalls that created thisMacobject.- Returns:
- the algorithm name of this
Macobject.
-
getInstance
public static final Mac getInstance(String algorithm) throws NoSuchAlgorithmException
Returns aMacobject that implements the specified MAC algorithm.This method traverses the list of registered security Providers, starting with the most preferred Provider. A new Mac object encapsulating the MacSpi implementation from the first Provider that supports the specified algorithm is returned.
Note that the list of registered providers may be retrieved via the
Security.getProviders()method.- Parameters:
algorithm- the standard name of the requested MAC algorithm. See the Mac section in the Java Cryptography Architecture Standard Algorithm Name Documentation for information about standard algorithm names.- Returns:
- the new
Macobject. - Throws:
NoSuchAlgorithmException- if no Provider supports a MacSpi implementation for the specified algorithm.- See Also:
Provider
-
getInstance
public static final Mac getInstance(String algorithm, String provider) throws NoSuchAlgorithmException, NoSuchProviderException
Returns aMacobject that implements the specified MAC algorithm.A new Mac object encapsulating the MacSpi implementation from the specified provider is returned. The specified provider must be registered in the security provider list.
Note that the list of registered providers may be retrieved via the
Security.getProviders()method.- Parameters:
algorithm- the standard name of the requested MAC algorithm. See the Mac section in the Java Cryptography Architecture Standard Algorithm Name Documentation for information about standard algorithm names.provider- the name of the provider.- Returns:
- the new
Macobject. - Throws:
NoSuchAlgorithmException- if a MacSpi implementation for the specified algorithm is not available from the specified provider.NoSuchProviderException- if the specified provider is not registered in the security provider list.IllegalArgumentException- if theprovideris null or empty.- See Also:
Provider
-
getInstance
public static final Mac getInstance(String algorithm, Provider provider) throws NoSuchAlgorithmException
Returns aMacobject that implements the specified MAC algorithm.A new Mac object encapsulating the MacSpi implementation from the specified Provider object is returned. Note that the specified Provider object does not have to be registered in the provider list.
- Parameters:
algorithm- the standard name of the requested MAC algorithm. See the Mac section in the Java Cryptography Architecture Standard Algorithm Name Documentation for information about standard algorithm names.provider- the provider.- Returns:
- the new
Macobject. - Throws:
NoSuchAlgorithmException- if a MacSpi implementation for the specified algorithm is not available from the specified Provider object.IllegalArgumentException- if theprovideris null.- See Also:
Provider
-
getProvider
public final Provider getProvider()
Returns the provider of thisMacobject.- Returns:
- the provider of this
Macobject.
-
getMacLength
public final int getMacLength()
Returns the length of the MAC in bytes.- Returns:
- the MAC length in bytes.
-
init
public final void init(Key key) throws InvalidKeyException
Initializes thisMacobject with the given key.- Parameters:
key- the key.- Throws:
InvalidKeyException- if the given key is inappropriate for initializing this MAC.
-
init
public final void init(Key key, AlgorithmParameterSpec params) throws InvalidKeyException, InvalidAlgorithmParameterException
Initializes thisMacobject with the given key and algorithm parameters.- Parameters:
key- the key.params- the algorithm parameters.- Throws:
InvalidKeyException- if the given key is inappropriate for initializing this MAC.InvalidAlgorithmParameterException- if the given algorithm parameters are inappropriate for this MAC.
-
update
public final void update(byte input) throws IllegalStateExceptionProcesses the given byte.- Parameters:
input- the input byte to be processed.- Throws:
IllegalStateException- if thisMachas not been initialized.
-
update
public final void update(byte[] input) throws IllegalStateExceptionProcesses the given array of bytes.- Parameters:
input- the array of bytes to be processed.- Throws:
IllegalStateException- if thisMachas not been initialized.
-
update
public final void update(byte[] input, int offset, int len) throws IllegalStateExceptionProcesses the firstlenbytes ininput, starting atoffsetinclusive.- Parameters:
input- the input buffer.offset- the offset ininputwhere the input starts.len- the number of bytes to process.- Throws:
IllegalStateException- if thisMachas not been initialized.
-
update
public final void update(ByteBuffer input)
Processesinput.remaining()bytes in the ByteBufferinput, starting atinput.position(). Upon return, the buffer's position will be equal to its limit; its limit will not have changed.- Parameters:
input- the ByteBuffer- Throws:
IllegalStateException- if thisMachas not been initialized.- Since:
- 1.5
-
doFinal
public final byte[] doFinal() throws IllegalStateExceptionFinishes the MAC operation.A call to this method resets this
Macobject to the state it was in when previously initialized via a call toinit(Key)orinit(Key, AlgorithmParameterSpec). That is, the object is reset and available to generate another MAC from the same key, if desired, via new calls toupdateanddoFinal. (In order to reuse thisMacobject with a different key, it must be reinitialized via a call toinit(Key)orinit(Key, AlgorithmParameterSpec).- Returns:
- the MAC result.
- Throws:
IllegalStateException- if thisMachas not been initialized.
-
doFinal
public final void doFinal(byte[] output, int outOffset) throws ShortBufferException, IllegalStateExceptionFinishes the MAC operation.A call to this method resets this
Macobject to the state it was in when previously initialized via a call toinit(Key)orinit(Key, AlgorithmParameterSpec). That is, the object is reset and available to generate another MAC from the same key, if desired, via new calls toupdateanddoFinal. (In order to reuse thisMacobject with a different key, it must be reinitialized via a call toinit(Key)orinit(Key, AlgorithmParameterSpec).The MAC result is stored in
output, starting atoutOffsetinclusive.- Parameters:
output- the buffer where the MAC result is storedoutOffset- the offset inoutputwhere the MAC is stored- Throws:
ShortBufferException- if the given output buffer is too small to hold the resultIllegalStateException- if thisMachas not been initialized.
-
doFinal
public final byte[] doFinal(byte[] input) throws IllegalStateExceptionProcesses the given array of bytes and finishes the MAC operation.A call to this method resets this
Macobject to the state it was in when previously initialized via a call toinit(Key)orinit(Key, AlgorithmParameterSpec). That is, the object is reset and available to generate another MAC from the same key, if desired, via new calls toupdateanddoFinal. (In order to reuse thisMacobject with a different key, it must be reinitialized via a call toinit(Key)orinit(Key, AlgorithmParameterSpec).- Parameters:
input- data in bytes- Returns:
- the MAC result.
- Throws:
IllegalStateException- if thisMachas not been initialized.
-
reset
public final void reset()
Resets thisMacobject.A call to this method resets this
Macobject to the state it was in when previously initialized via a call toinit(Key)orinit(Key, AlgorithmParameterSpec). That is, the object is reset and available to generate another MAC from the same key, if desired, via new calls toupdateanddoFinal. (In order to reuse thisMacobject with a different key, it must be reinitialized via a call toinit(Key)orinit(Key, AlgorithmParameterSpec).
-
clone
public final Object clone() throws CloneNotSupportedException
Returns a clone if the provider implementation is cloneable.- Overrides:
clonein classObject- Returns:
- a clone if the provider implementation is cloneable.
- Throws:
CloneNotSupportedException- if this is called on a delegate that does not supportCloneable.- See Also:
Cloneable
-
-
Document created the 11/06/2005, last modified the 04/03/2020
Source of the printed document:https://www.gaudry.be/en/java-api-rf-javax/crypto/mac.html
The infobrol is a personal site whose content is my sole responsibility. The text is available under CreativeCommons license (BY-NC-SA). More info on the terms of use and the author.
References
These references and links indicate documents consulted during the writing of this page, or which may provide additional information, but the authors of these sources can not be held responsible for the content of this page.
The author of this site is solely responsible for the way in which the various concepts, and the freedoms that are taken with the reference works, are presented here. Remember that you must cross multiple source information to reduce the risk of errors.