Mac
public
class
Mac
extends Object
implements
Cloneable
java.lang.Object | |
↳ | javax.crypto.Mac |
This class provides the functionality of a "Message Authentication Code" (MAC) algorithm.
A MAC provides a way to check the integrity of information transmitted over or stored in an unreliable medium, based on a secret key. Typically, message authentication codes are used between two parties that share a secret key in order to validate information transmitted between these parties.
A MAC mechanism that is based on cryptographic hash functions is referred to as HMAC. HMAC can be used with any cryptographic hash function, e.g., MD5 or SHA-1, in combination with a secret shared key. HMAC is specified in RFC 2104.
Android provides the following Mac
algorithms:
Algorithm | Supported API Levels |
---|---|
AESCMAC | 31+ |
DESMAC | 1-8 |
DESMAC/CFB8 | 1-8 |
DESedeMAC | 1-8 |
DESedeMAC/CFB8 | 1-8 |
DESedeMAC64 | 1-8 |
DESwithISO9797 | 1-8 |
HmacMD5 | 1+ |
HmacSHA1 | 1+ |
HmacSHA224 | 1-8,22+ |
HmacSHA256 | 1+ |
HmacSHA384 | 1+ |
HmacSHA512 | 1+ |
ISO9797ALG3MAC | 1-8 |
PBEwithHmacSHA | 1+ |
PBEwithHmacSHA1 | 1+ |
PBEwithHmacSHA224 | 26-31 |
PBEwithHmacSHA256 | 26-31 |
PBEwithHmacSHA384 | 26-31 |
PBEwithHmacSHA512 | 26-31 |
Summary
Protected constructors | |
---|---|
Mac(MacSpi macSpi, Provider provider, String algorithm)
Creates a MAC object. |
Public methods | |
---|---|
final
Object
|
clone()
Returns a clone if the provider implementation is cloneable. |
final
byte[]
|
doFinal(byte[] input)
Processes the given array of bytes and finishes the MAC operation. |
final
void
|
doFinal(byte[] output, int outOffset)
Finishes the MAC operation. |
final
byte[]
|
doFinal()
Finishes the MAC operation. |
final
String
|
getAlgorithm()
Returns the algorithm name of this |
static
final
Mac
|
getInstance(String algorithm)
Returns a |
static
final
Mac
|
getInstance(String algorithm, String provider)
Returns a |
static
final
Mac
|
getInstance(String algorithm, Provider provider)
Returns a |
final
int
|
getMacLength()
Returns the length of the MAC in bytes. |
final
Provider
|
getProvider()
Returns the provider of this |
final
void
|
init(Key key, AlgorithmParameterSpec params)
Initializes this |
final
void
|
init(Key key)
Initializes this |
final
void
|
reset()
Resets this |
final
void
|
update(byte[] input)
Processes the given array of bytes. |
final
void
|
update(byte[] input, int offset, int len)
Processes the first |
final
void
|
update(ByteBuffer input)
Processes |
final
void
|
update(byte input)
Processes the given byte. |
Inherited methods | |
---|---|
Protected constructors
Mac
protected Mac (MacSpi macSpi, Provider provider, String algorithm)
Creates a MAC object.
Parameters | |
---|---|
macSpi |
MacSpi : the delegate |
provider |
Provider : the provider |
algorithm |
String : the algorithm |
Public methods
clone
public final Object clone ()
Returns a clone if the provider implementation is cloneable.
Returns | |
---|---|
Object |
a clone if the provider implementation is cloneable. |
Throws | |
---|---|
CloneNotSupportedException |
if this is called on a
delegate that does not support Cloneable . |
doFinal
public final byte[] doFinal (byte[] input)
Processes the given array of bytes and finishes the MAC operation.
A call to this method resets this Mac
object to the
state it was in when previously initialized via a call to
init(Key)
or
init(Key, AlgorithmParameterSpec)
.
That is, the object is reset and available to generate another MAC from
the same key, if desired, via new calls to update
and
doFinal
.
(In order to reuse this Mac
object with a different key,
it must be reinitialized via a call to init(Key)
or
init(Key, AlgorithmParameterSpec)
.
Parameters | |
---|---|
input |
byte : data in bytes |
Returns | |
---|---|
byte[] |
the MAC result. |
Throws | |
---|---|
IllegalStateException |
if this Mac has not been
initialized. |
doFinal
public final void doFinal (byte[] output, int outOffset)
Finishes the MAC operation.
A call to this method resets this Mac
object to the
state it was in when previously initialized via a call to
init(Key)
or
init(Key, AlgorithmParameterSpec)
.
That is, the object is reset and available to generate another MAC from
the same key, if desired, via new calls to update
and
doFinal
.
(In order to reuse this Mac
object with a different key,
it must be reinitialized via a call to init(Key)
or
init(Key, AlgorithmParameterSpec)
.
The MAC result is stored in output
, starting at
outOffset
inclusive.
Parameters | |
---|---|
output |
byte : the buffer where the MAC result is stored |
outOffset |
int : the offset in output where the MAC is
stored |
Throws | |
---|---|
ShortBufferException |
if the given output buffer is too small to hold the result |
IllegalStateException |
if this Mac has not been
initialized. |
doFinal
public final byte[] doFinal ()
Finishes the MAC operation.
A call to this method resets this Mac
object to the
state it was in when previously initialized via a call to
init(Key)
or
init(Key, AlgorithmParameterSpec)
.
That is, the object is reset and available to generate another MAC from
the same key, if desired, via new calls to update
and
doFinal
.
(In order to reuse this Mac
object with a different key,
it must be reinitialized via a call to init(Key)
or
init(Key, AlgorithmParameterSpec)
.
Returns | |
---|---|
byte[] |
the MAC result. |
Throws | |
---|---|
IllegalStateException |
if this Mac has not been
initialized. |
getAlgorithm
public final String getAlgorithm ()
Returns the algorithm name of this Mac
object.
This is the same name that was specified in one of the
getInstance
calls that created this
Mac
object.
Returns | |
---|---|
String |
the algorithm name of this Mac object. |
getInstance
public static final Mac getInstance (String algorithm)
Returns a Mac
object that implements the
specified MAC algorithm.
This method traverses the list of registered security Providers, starting with the most preferred Provider. A new Mac object encapsulating the MacSpi implementation from the first Provider that supports the specified algorithm is returned.
Note that the list of registered providers may be retrieved via
the Security.getProviders()
method.
Parameters | |
---|---|
algorithm |
String : the standard name of the requested MAC algorithm.
See the Mac section in the
Java Cryptography Architecture Standard Algorithm Name Documentation
for information about standard algorithm names. |
Returns | |
---|---|
Mac |
the new Mac object. |
Throws | |
---|---|
NoSuchAlgorithmException |
if no Provider supports a MacSpi implementation for the specified algorithm. |
See also:
getInstance
public static final Mac getInstance (String algorithm, String provider)
Returns a Mac
object that implements the
specified MAC algorithm.
A new Mac object encapsulating the MacSpi implementation from the specified provider is returned. The specified provider must be registered in the security provider list.
Note that the list of registered providers may be retrieved via
the Security.getProviders()
method.
Parameters | |
---|---|
algorithm |
String : the standard name of the requested MAC algorithm.
See the Mac section in the
Java Cryptography Architecture Standard Algorithm Name Documentation
for information about standard algorithm names. |
provider |
String : the name of the provider. |
Returns | |
---|---|
Mac |
the new Mac object. |
Throws | |
---|---|
NoSuchAlgorithmException |
if a MacSpi implementation for the specified algorithm is not available from the specified provider. |
NoSuchProviderException |
if the specified provider is not registered in the security provider list. |
IllegalArgumentException |
if the provider
is null or empty. |
See also:
getInstance
public static final Mac getInstance (String algorithm, Provider provider)
Returns a Mac
object that implements the
specified MAC algorithm.
A new Mac object encapsulating the MacSpi implementation from the specified Provider object is returned. Note that the specified Provider object does not have to be registered in the provider list.
Parameters | |
---|---|
algorithm |
String : the standard name of the requested MAC algorithm.
See the Mac section in the
Java Cryptography Architecture Standard Algorithm Name Documentation
for information about standard algorithm names. |
provider |
Provider : the provider. |
Returns | |
---|---|
Mac |
the new Mac object. |
Throws | |
---|---|
NoSuchAlgorithmException |
if a MacSpi implementation for the specified algorithm is not available from the specified Provider object. |
IllegalArgumentException |
if the provider
is null. |
See also:
getMacLength
public final int getMacLength ()
Returns the length of the MAC in bytes.
Returns | |
---|---|
int |
the MAC length in bytes. |
getProvider
public final Provider getProvider ()
Returns the provider of this Mac
object.
Returns | |
---|---|
Provider |
the provider of this Mac object. |
init
public final void init (Key key, AlgorithmParameterSpec params)
Initializes this Mac
object with the given key and
algorithm parameters.
Parameters | |
---|---|
key |
Key : the key. |
params |
AlgorithmParameterSpec : the algorithm parameters. |
Throws | |
---|---|
InvalidKeyException |
if the given key is inappropriate for initializing this MAC. |
InvalidAlgorithmParameterException |
if the given algorithm parameters are inappropriate for this MAC. |
init
public final void init (Key key)
Initializes this Mac
object with the given key.
Parameters | |
---|---|
key |
Key : the key. |
Throws | |
---|---|
InvalidKeyException |
if the given key is inappropriate for initializing this MAC. |
reset
public final void reset ()
Resets this Mac
object.
A call to this method resets this Mac
object to the
state it was in when previously initialized via a call to
init(Key)
or
init(Key, AlgorithmParameterSpec)
.
That is, the object is reset and available to generate another MAC from
the same key, if desired, via new calls to update
and
doFinal
.
(In order to reuse this Mac
object with a different key,
it must be reinitialized via a call to init(Key)
or
init(Key, AlgorithmParameterSpec)
.
update
public final void update (byte[] input)
Processes the given array of bytes.
Parameters | |
---|---|
input |
byte : the array of bytes to be processed. |
Throws | |
---|---|
IllegalStateException |
if this Mac has not been
initialized. |
update
public final void update (byte[] input, int offset, int len)
Processes the first len
bytes in input
,
starting at offset
inclusive.
Parameters | |
---|---|
input |
byte : the input buffer. |
offset |
int : the offset in input where the input starts. |
len |
int : the number of bytes to process. |
Throws | |
---|---|
IllegalStateException |
if this Mac has not been
initialized. |
update
public final void update (ByteBuffer input)
Processes input.remaining()
bytes in the ByteBuffer
input
, starting at input.position()
.
Upon return, the buffer's position will be equal to its limit;
its limit will not have changed.
Parameters | |
---|---|
input |
ByteBuffer : the ByteBuffer |
Throws | |
---|---|
IllegalStateException |
if this Mac has not been
initialized. |
update
public final void update (byte input)
Processes the given byte.
Parameters | |
---|---|
input |
byte : the input byte to be processed. |
Throws | |
---|---|
IllegalStateException |
if this Mac has not been
initialized. |