程序包 java.security

接口 AlgorithmConstraints

public interface AlgorithmConstraints

This interface specifies constraints for cryptographic algorithms, keys (key sizes), and other algorithm parameters.

AlgorithmConstraints objects are immutable. An implementation of this interface should not provide methods that can change the state of an instance once it has been created.

Note that AlgorithmConstraints can be used to represent the restrictions described by the security properties jdk.certpath.disabledAlgorithms and jdk.tls.disabledAlgorithms, or could be used by a concrete PKIXCertPathChecker to check whether a specified certificate in the certification path contains the required algorithm constraints.

从以下版本开始:

1.7

另请参阅:

SSLParameters.getAlgorithmConstraints(), SSLParameters.setAlgorithmConstraints(AlgorithmConstraints)

方法概要

限定符和类型	方法	说明
boolean	permits(Set<CryptoPrimitive> primitives, String algorithm, AlgorithmParameters parameters)	Determines whether an algorithm is granted permission for the specified cryptographic primitives.
boolean	permits(Set<CryptoPrimitive> primitives, String algorithm, Key key, AlgorithmParameters parameters)	Determines whether an algorithm and the corresponding key are granted permission for the specified cryptographic primitives.
boolean	permits(Set<CryptoPrimitive> primitives, Key key)	Determines whether a key is granted permission for the specified cryptographic primitives.

方法详细资料

permits

boolean permits(Set<CryptoPrimitive> primitives,
                String algorithm,
                AlgorithmParameters parameters)

Determines whether an algorithm is granted permission for the specified cryptographic primitives.

参数:

primitives - a set of cryptographic primitives

algorithm - the algorithm name

parameters - the algorithm parameters, or null if no additional parameters

返回:

true if the algorithm is permitted and can be used for all of the specified cryptographic primitives

抛出:

IllegalArgumentException - if primitives or algorithm is null or empty

permits

boolean permits(Set<CryptoPrimitive> primitives,
                Key key)

Determines whether a key is granted permission for the specified cryptographic primitives.

This method is usually used to check key size and key usage.

参数:

primitives - a set of cryptographic primitives

key - the key

返回:

true if the key can be used for all of the specified cryptographic primitives

抛出:

IllegalArgumentException - if primitives is null or empty, or the key is null

permits

boolean permits(Set<CryptoPrimitive> primitives,
                String algorithm,
                Key key,
                AlgorithmParameters parameters)

Determines whether an algorithm and the corresponding key are granted permission for the specified cryptographic primitives.

参数:

primitives - a set of cryptographic primitives

algorithm - the algorithm name

key - the key

parameters - the algorithm parameters, or null if no additional parameters

返回:

true if the key and the algorithm can be used for all of the specified cryptographic primitives

抛出:

IllegalArgumentException - if primitives or algorithm is null or empty, or the key is null