SymmetricCrypto Class
Properties Methods Events Config Settings Errors
The SymmetricCrypto class provides capabilities of encrypting and decrypting binary data.
Syntax
SymmetricCrypto
Remarks
SymmetricCrypto allows you to encrypt and decrypt uninterpreted binary data with a symmetric block encryption cipher.
SymmetricCrypto is one of the low-level cryptography classes (alongside PublicKeyCrypto and HashFunction) offered by SecureBlackbox. It allows to encrypt pools of binary data with a chosen symmetric encryption cipher. It can be used as a standalone encryption mechanism (for example, for encrypting database data or setting files), or as part of a larger security system (such as PKCS#7 or PGP).
Encryption and decryption with SymmetricCrypto broadly consists of three steps: configuring the encryption parameters, setting up the key material, and actually encrypting or decrypting the data.
Configuring encryption parameters
When preparing SymmetricCrypto for action, you need to fine-tune several cryptographic encryption parameters. Normally these would be given to you by the party that expects you to encrypt or decrypt their data (for example: 'AES128-CBC, with the IV of all zeroes').
As a rule, the following parameters need to be selected/adjusted:
- EncryptionAlgorithm, such as AES128, 3DES, or Blowfish.
- Encryption Mode, such as CBC, CTR, GCM or CCM.
- Block Padding for data lengths that are not multiples of the cipher's block size (none, PKCS5, or ANXI X9.23).
- TagSize (for AEAD algorithms only).
- HashAlgorithm and MACAlgorithm (for algorithms that require them).
Setting up the key material
Symmetric algorithms use short (typically, 16-32 bytes) encryption keys. The exact key length depends on the encryption algorithm used (for example, 16 bytes for AES128). You can use the KeySize property to learn the expected key length for the chosen EncryptionAlgorithm.
In addition to keys, many encryption modes require additional data. These are typically represented by an Initialization Vector (IV) and a Nonce. The IV is a randomized public part of the encryption key, which is used to avoid re-use of the same encryption key for different data. Nonce is similar in meaning to the initialization vector, but applies to the algorithm and not the key.
Any key material that you assign to SymmetricCrypto should be first loaded into the CryptoKeyManager object. Once you have done that, simply assign the key object returned by the CryptoKeyManager to the Key property. Note that while the IV needs to be provided to the CryptoKeyManager, the Nonce needs to be assigned directly to Nonce property of the SymmetricCrypto object.
Note that CryptoKeyManager lets you to form the encryption key in a few ways: by loading it from memory or file, generating a new random key, or deriving it from a password. Use the method that is the most appropriate in your circumstances.
Encrypting and decrypting data
Now that the component has been set up, you can proceed to the actual encryption or decryption operation. There are a few options you can use here:
- Encrypt (or decrypt) a buffer to a buffer using Encrypt (Decrypt).
- Encrypt a file to a file using EncryptFile.
- Encrypt a stream to a stream using EncryptStream.
- Encrypt longer data chunk by chunk using a sequence of EncryptInit, EncryptUpdate, EncryptUpdate, ..., EncryptUpdate, EncryptFinal calls.
If you are using an authenticated encryption algorithm that can take additional associated data (AEAD), you can provide that via the AssociatedData property.
Please find an example of using SymmetricCrypto to encrypt and decrypt a file below:
//encrypting a file
SymmetricCrypto symmetricCrypto = new SymmetricCrypto();
symmetricCrypto.setEncryptionAlgorithm("RC4"); // default AES256
// generating a key from a password
CryptoKeyManager keyManager = new CryptoKeyManager();
keyManager.deriveKey(256, "MyPassword","");
keyManager.getKey().setIV(new byte[16]);
symmetricCrypto.setKey(keyManager.getKey());
// the encoding to apply to the output data, default cetDefault which depends on
// the operation and type of key being used
symmetricCrypto.setOutputEncoding(SymmetricCrypto.cetBinary);
// first parameter is the path of the file you want to encrypt and the second is the path
// of where the encrypted file will be saved
symmetricCrypto.encryptFile("./message.txt","encryptedFile.bin");
// decrypting a file
symmetricCrypto.reset();
symmetricCrypto.setKey(keyManager.getKey());
// first parameter is the path of the file you want to decrypt and the second is the path
// of where the decrypted file will be saved
symmetricCrypto.decryptFile("encryptedFile.bin","decryptedFile.bin");
Property List
The following is the full list of the properties of the class with short descriptions. Click on the links for further details.
AssociatedData | Provides Associated Data for AEAD algorithms. |
BlockSize | The block size of the chosen symmetric cipher. |
EncryptionAlgorithm | The encryption algorithm to use for encrypting the data. |
FIPSMode | Reserved. |
HashAlgorithm | The hash algorithm to use during encryption. |
InputEncoding | The encoding to apply to the input data. |
Key | The key to use for the cryptographic operation. |
KeySize | Returns the cryptographic key size in bytes. |
MACAlgorithm | The (H)MAC algorithm to use during encryption. |
Mode | Specifies the symmetric cipher mode of operation. |
Nonce | Specifies the Nonce value to employ. |
OutputEncoding | The encoding to apply to the output data. |
Padding | The padding type to apply to the encrypted data. |
PayloadSize | Specifies the payload size, in bytes. |
StreamCipher | Returns true if the selected algorithms works as a stream cipher. |
TagSize | Specifies the AEAD tag size, in bytes. |
Method List
The following is the full list of the methods of the class with short descriptions. Click on the links for further details.
Config | Sets or retrieves a configuration setting. |
Decrypt | Decrypts a buffer. |
DecryptFile | Decrypts a file. |
DecryptFinal | Finalization of decryption by blocks. |
DecryptInit | Initializes a per-block decryption process. |
DecryptStream | Decrypts a stream. |
DecryptUpdate | Decrypts the next block of encrypted data. |
DoAction | Performs an additional action. |
Encrypt | Encrypts a buffer. |
EncryptFile | Encrypts a file. |
EncryptFinal | Finalization of encryption by blocks. |
EncryptInit | Initializes a per-block encryption process. |
EncryptStream | Encrypts a stream. |
EncryptUpdate | Encrypts the next block of data. |
Reset | Resets the class settings. |
Event List
The following is the full list of the events fired by the class with short descriptions. Click on the links for further details.
Error | Reports errors during encryption or decryption. |
Notification | This event notifies the application about an underlying control flow event. |
Progress | Reports the data encryption/decryption progress. |
Config Settings
The following is a list of config settings for the class with short descriptions. Click on the links for further details.
Compress | Specifies whether the JSON output should be compressed. |
CTRLittleEndian | Specifies whether the little-endian representation should be employed in CTR mode. |
KeyAlgorithm | Gets or sets a JWE key algorithm. |
TempPath | Path for storing temporary files. |
ASN1UseGlobalTagCache | Controls whether ASN.1 module should use a global object cache. |
AssignSystemSmartCardPins | Specifies whether CSP-level PINs should be assigned to CNG keys. |
CheckKeyIntegrityBeforeUse | Enables or disable private key integrity check before use. |
CookieCaching | Specifies whether a cookie cache should be used for HTTP(S) transports. |
Cookies | Gets or sets local cookies for the class. |
DefDeriveKeyIterations | Specifies the default key derivation algorithm iteration count. |
DNSLocalSuffix | The suffix to assign for TLD names. |
EnableClientSideSSLFFDHE | Enables or disables finite field DHE key exchange support in TLS clients. |
GlobalCookies | Gets or sets global cookies for all the HTTP transports. |
HardwareCryptoUsePolicy | The hardware crypto usage policy. |
HttpUserAgent | Specifies the user agent name to be used by all HTTP clients. |
HttpVersion | The HTTP version to use in any inner HTTP client classes created. |
IgnoreExpiredMSCTLSigningCert | Whether to tolerate the expired Windows Update signing certificate. |
ListDelimiter | The delimiter character for multi-element lists. |
LogDestination | Specifies the debug log destination. |
LogDetails | Specifies the debug log details to dump. |
LogFile | Specifies the debug log filename. |
LogFilters | Specifies the debug log filters. |
LogFlushMode | Specifies the log flush mode. |
LogLevel | Specifies the debug log level. |
LogMaxEventCount | Specifies the maximum number of events to cache before further action is taken. |
LogRotationMode | Specifies the log rotation mode. |
MaxASN1BufferLength | Specifies the maximal allowed length for ASN.1 primitive tag data. |
MaxASN1TreeDepth | Specifies the maximal depth for processed ASN.1 trees. |
OCSPHashAlgorithm | Specifies the hash algorithm to be used to identify certificates in OCSP requests. |
OldClientSideRSAFallback | Specifies whether the SSH client should use a SHA1 fallback. |
PKICache | Specifies which PKI elements (certificates, CRLs, OCSP responses) should be cached. |
PKICachePath | Specifies the file system path where cached PKI data is stored. |
ProductVersion | Returns the version of the SecureBlackbox library. |
ServerSSLDHKeyLength | Sets the size of the TLS DHE key exchange group. |
StaticDNS | Specifies whether static DNS rules should be used. |
StaticIPAddress[domain] | Gets or sets an IP address for the specified domain name. |
StaticIPAddresses | Gets or sets all the static DNS rules. |
Tag | Allows to store any custom data. |
TLSSessionGroup | Specifies the group name of TLS sessions to be used for session resumption. |
TLSSessionLifetime | Specifies lifetime in seconds of the cached TLS session. |
TLSSessionPurgeInterval | Specifies how often the session cache should remove the expired TLS sessions. |
UseCRLObjectCaching | Specifies whether reuse of loaded CRL objects is enabled. |
UseInternalRandom | Switches between SecureBlackbox-own and platform PRNGs. |
UseLegacyAdESValidation | Enables legacy AdES validation mode. |
UseOCSPResponseObjectCaching | Specifies whether reuse of loaded OCSP response objects is enabled. |
UseOwnDNSResolver | Specifies whether the client classes should use own DNS resolver. |
UseSharedSystemStorages | Specifies whether the validation engine should use a global per-process copy of the system certificate stores. |
UseSystemNativeSizeCalculation | An internal CryptoAPI access tweak. |
UseSystemOAEPAndPSS | Enforces or disables the use of system-driven RSA OAEP and PSS computations. |
UseSystemRandom | Enables or disables the use of the OS PRNG. |
XMLRDNDescriptorName[OID] | Defines an OID mapping to descriptor names for the certificate's IssuerRDN or SubjectRDN. |
XMLRDNDescriptorPriority[OID] | Specifies the priority of descriptor names associated with a specific OID. |
XMLRDNDescriptorReverseOrder | Specifies whether to reverse the order of descriptors in RDN. |
XMLRDNDescriptorSeparator | Specifies the separator used between descriptors in RDN. |
AssociatedData Property (SymmetricCrypto Class)
Provides Associated Data for AEAD algorithms.
Syntax
ANSI (Cross Platform) int GetAssociatedData(char* &lpAssociatedData, int &lenAssociatedData);
int SetAssociatedData(const char* lpAssociatedData, int lenAssociatedData); Unicode (Windows) INT GetAssociatedData(LPSTR &lpAssociatedData, INT &lenAssociatedData);
INT SetAssociatedData(LPCSTR lpAssociatedData, INT lenAssociatedData);
int secureblackbox_symmetriccrypto_getassociateddata(void* lpObj, char** lpAssociatedData, int* lenAssociatedData);
int secureblackbox_symmetriccrypto_setassociateddata(void* lpObj, const char* lpAssociatedData, int lenAssociatedData);
QByteArray GetAssociatedData();
int SetAssociatedData(QByteArray qbaAssociatedData);
Remarks
Use this property to set up Associated Data for AEAD encryption algorithms.
This property is not available at design time.
Data Type
Byte Array
BlockSize Property (SymmetricCrypto Class)
The block size of the chosen symmetric cipher.
Syntax
ANSI (Cross Platform) int GetBlockSize(); Unicode (Windows) INT GetBlockSize();
int secureblackbox_symmetriccrypto_getblocksize(void* lpObj);
int GetBlockSize();
Default Value
0
Remarks
This property returns the block size of the chosen symmetric cipher.
Modern symmetric algorithms typically use blocks of 16 bytes. Some older algorithms, such as DES or Blowfish, use 8-byte blocks.
This property is read-only.
Data Type
Integer
EncryptionAlgorithm Property (SymmetricCrypto Class)
The encryption algorithm to use for encrypting the data.
Syntax
ANSI (Cross Platform) char* GetEncryptionAlgorithm();
int SetEncryptionAlgorithm(const char* lpszEncryptionAlgorithm); Unicode (Windows) LPWSTR GetEncryptionAlgorithm();
INT SetEncryptionAlgorithm(LPCWSTR lpszEncryptionAlgorithm);
char* secureblackbox_symmetriccrypto_getencryptionalgorithm(void* lpObj);
int secureblackbox_symmetriccrypto_setencryptionalgorithm(void* lpObj, const char* lpszEncryptionAlgorithm);
QString GetEncryptionAlgorithm();
int SetEncryptionAlgorithm(QString qsEncryptionAlgorithm);
Default Value
"AES256"
Remarks
This property specifies the base symmetric algorithm to use (e.g. AES128). Use it in conjunction with Mode to set up the complete encryption scheme (such as AES128-CBC or AES128-GCM).
SB_SYMMETRIC_ALGORITHM_RC4 | RC4 | |
SB_SYMMETRIC_ALGORITHM_DES | DES | |
SB_SYMMETRIC_ALGORITHM_3DES | 3DES | |
SB_SYMMETRIC_ALGORITHM_RC2 | RC2 | |
SB_SYMMETRIC_ALGORITHM_AES128 | AES128 | |
SB_SYMMETRIC_ALGORITHM_AES192 | AES192 | |
SB_SYMMETRIC_ALGORITHM_AES256 | AES256 | |
SB_SYMMETRIC_ALGORITHM_IDENTITY | Identity | |
SB_SYMMETRIC_ALGORITHM_BLOWFISH | Blowfish | |
SB_SYMMETRIC_ALGORITHM_CAST128 | CAST128 | |
SB_SYMMETRIC_ALGORITHM_IDEA | IDEA | |
SB_SYMMETRIC_ALGORITHM_TWOFISH | Twofish | |
SB_SYMMETRIC_ALGORITHM_TWOFISH128 | Twofish128 | |
SB_SYMMETRIC_ALGORITHM_TWOFISH192 | Twofish192 | |
SB_SYMMETRIC_ALGORITHM_TWOFISH256 | Twofish256 | |
SB_SYMMETRIC_ALGORITHM_CAMELLIA | Camellia | |
SB_SYMMETRIC_ALGORITHM_CAMELLIA128 | Camellia128 | |
SB_SYMMETRIC_ALGORITHM_CAMELLIA192 | Camellia192 | |
SB_SYMMETRIC_ALGORITHM_CAMELLIA256 | Camellia256 | |
SB_SYMMETRIC_ALGORITHM_SERPENT | Serpent | |
SB_SYMMETRIC_ALGORITHM_SERPENT128 | Serpent128 | |
SB_SYMMETRIC_ALGORITHM_SERPENT192 | Serpent192 | |
SB_SYMMETRIC_ALGORITHM_SERPENT256 | Serpent256 | |
SB_SYMMETRIC_ALGORITHM_SEED | SEED | |
SB_SYMMETRIC_ALGORITHM_RABBIT | Rabbit | |
SB_SYMMETRIC_ALGORITHM_SYMMETRIC | Generic | |
SB_SYMMETRIC_ALGORITHM_GOST_28147_1989 | GOST-28147-1989 | |
SB_SYMMETRIC_ALGORITHM_CHACHA20 | ChaCha20 |
Data Type
String
FIPSMode Property (SymmetricCrypto Class)
Reserved.
Syntax
ANSI (Cross Platform) int GetFIPSMode();
int SetFIPSMode(int bFIPSMode); Unicode (Windows) BOOL GetFIPSMode();
INT SetFIPSMode(BOOL bFIPSMode);
int secureblackbox_symmetriccrypto_getfipsmode(void* lpObj);
int secureblackbox_symmetriccrypto_setfipsmode(void* lpObj, int bFIPSMode);
bool GetFIPSMode();
int SetFIPSMode(bool bFIPSMode);
Default Value
FALSE
Remarks
This property is reserved for future use.
Data Type
Boolean
HashAlgorithm Property (SymmetricCrypto Class)
The hash algorithm to use during encryption.
Syntax
ANSI (Cross Platform) char* GetHashAlgorithm();
int SetHashAlgorithm(const char* lpszHashAlgorithm); Unicode (Windows) LPWSTR GetHashAlgorithm();
INT SetHashAlgorithm(LPCWSTR lpszHashAlgorithm);
char* secureblackbox_symmetriccrypto_gethashalgorithm(void* lpObj);
int secureblackbox_symmetriccrypto_sethashalgorithm(void* lpObj, const char* lpszHashAlgorithm);
QString GetHashAlgorithm();
int SetHashAlgorithm(QString qsHashAlgorithm);
Default Value
"SHA256"
Remarks
Use this property to provide the hash algorithm to be used with the encryption operation. This only applies to certain encryption algorithms/modes.
SB_HASH_ALGORITHM_SHA1 | SHA1 | |
SB_HASH_ALGORITHM_SHA224 | SHA224 | |
SB_HASH_ALGORITHM_SHA256 | SHA256 | |
SB_HASH_ALGORITHM_SHA384 | SHA384 | |
SB_HASH_ALGORITHM_SHA512 | SHA512 | |
SB_HASH_ALGORITHM_MD2 | MD2 | |
SB_HASH_ALGORITHM_MD4 | MD4 | |
SB_HASH_ALGORITHM_MD5 | MD5 | |
SB_HASH_ALGORITHM_RIPEMD160 | RIPEMD160 | |
SB_HASH_ALGORITHM_CRC32 | CRC32 | |
SB_HASH_ALGORITHM_SSL3 | SSL3 | |
SB_HASH_ALGORITHM_GOST_R3411_1994 | GOST1994 | |
SB_HASH_ALGORITHM_WHIRLPOOL | WHIRLPOOL | |
SB_HASH_ALGORITHM_POLY1305 | POLY1305 | |
SB_HASH_ALGORITHM_SHA3_224 | SHA3_224 | |
SB_HASH_ALGORITHM_SHA3_256 | SHA3_256 | |
SB_HASH_ALGORITHM_SHA3_384 | SHA3_384 | |
SB_HASH_ALGORITHM_SHA3_512 | SHA3_512 | |
SB_HASH_ALGORITHM_BLAKE2S_128 | BLAKE2S_128 | |
SB_HASH_ALGORITHM_BLAKE2S_160 | BLAKE2S_160 | |
SB_HASH_ALGORITHM_BLAKE2S_224 | BLAKE2S_224 | |
SB_HASH_ALGORITHM_BLAKE2S_256 | BLAKE2S_256 | |
SB_HASH_ALGORITHM_BLAKE2B_160 | BLAKE2B_160 | |
SB_HASH_ALGORITHM_BLAKE2B_256 | BLAKE2B_256 | |
SB_HASH_ALGORITHM_BLAKE2B_384 | BLAKE2B_384 | |
SB_HASH_ALGORITHM_BLAKE2B_512 | BLAKE2B_512 | |
SB_HASH_ALGORITHM_SHAKE_128 | SHAKE_128 | |
SB_HASH_ALGORITHM_SHAKE_256 | SHAKE_256 | |
SB_HASH_ALGORITHM_SHAKE_128_LEN | SHAKE_128_LEN | |
SB_HASH_ALGORITHM_SHAKE_256_LEN | SHAKE_256_LEN |
Data Type
String
InputEncoding Property (SymmetricCrypto Class)
The encoding to apply to the input data.
Syntax
ANSI (Cross Platform) int GetInputEncoding();
int SetInputEncoding(int iInputEncoding); Unicode (Windows) INT GetInputEncoding();
INT SetInputEncoding(INT iInputEncoding);
Possible Values
CET_DEFAULT(0),
CET_BINARY(1),
CET_BASE_64(2),
CET_COMPACT(3),
CET_JSON(4)
int secureblackbox_symmetriccrypto_getinputencoding(void* lpObj);
int secureblackbox_symmetriccrypto_setinputencoding(void* lpObj, int iInputEncoding);
int GetInputEncoding();
int SetInputEncoding(int iInputEncoding);
Default Value
0
Remarks
cetDefault | 0 | The default encoding type in current circumstances. This depends on the operation and the type of the key being used. |
cetBinary | 1 | Raw binary encoding (no encoding) |
cetBase64 | 2 | Base64 encoding (armouring) |
cetCompact | 3 | JSON compact encoding |
cetJSON | 4 | JSON standard encoding |
Data Type
Integer
Key Property (SymmetricCrypto Class)
The key to use for the cryptographic operation.
Syntax
SecureBlackboxCryptoKey* GetKey(); int SetKey(SecureBlackboxCryptoKey* val);
int64 secureblackbox_symmetriccrypto_getkeyhandle(void* lpObj);
int secureblackbox_symmetriccrypto_setkeyhandle(void* lpObj, int64 lKeyHandle);
int secureblackbox_symmetriccrypto_getkeykey(void* lpObj, char** lpKeyKey, int* lenKeyKey);
qint64 GetKeyHandle();
int SetKeyHandle(qint64 lKeyHandle); QByteArray GetKeyKey();
Remarks
Use this property to provide the symmetric key to use for the cryptographic operation. Remember that this key should be of appropriate type and length, and any required additional settings (such as IV or Nonce) should be adjusted where appropriate.
This property is not available at design time.
Data Type
KeySize Property (SymmetricCrypto Class)
Returns the cryptographic key size in bytes.
Syntax
ANSI (Cross Platform) int GetKeySize(); Unicode (Windows) INT GetKeySize();
int secureblackbox_symmetriccrypto_getkeysize(void* lpObj);
int GetKeySize();
Default Value
0
Remarks
Use this property to read the cryptographic key size. For the majority of the symmetric algorithms this is hard-coded in the algorithm itself (such as 16 bytes for AES128), but may be variable for certain exceptions, such as Blowfish or RC4.
This property is read-only.
Data Type
Integer
MACAlgorithm Property (SymmetricCrypto Class)
The (H)MAC algorithm to use during encryption.
Syntax
ANSI (Cross Platform) char* GetMACAlgorithm();
int SetMACAlgorithm(const char* lpszMACAlgorithm); Unicode (Windows) LPWSTR GetMACAlgorithm();
INT SetMACAlgorithm(LPCWSTR lpszMACAlgorithm);
char* secureblackbox_symmetriccrypto_getmacalgorithm(void* lpObj);
int secureblackbox_symmetriccrypto_setmacalgorithm(void* lpObj, const char* lpszMACAlgorithm);
QString GetMACAlgorithm();
int SetMACAlgorithm(QString qsMACAlgorithm);
Default Value
""
Remarks
Use this property to configure the HMAC algorithm to use with the encryption operation. This only applies to a small subset of algorithms/modes.
SB_MAC_ALGORITHM_HMAC_SHA1 | SHA1 | |
SB_MAC_ALGORITHM_HMAC_SHA256 | SHA256 | |
SB_MAC_ALGORITHM_HMAC_SHA512 | SHA512 |
Data Type
String
Mode Property (SymmetricCrypto Class)
Specifies the symmetric cipher mode of operation.
Syntax
ANSI (Cross Platform) int GetMode();
int SetMode(int iMode); Unicode (Windows) INT GetMode();
INT SetMode(INT iMode);
Possible Values
SCM_DEFAULT(0),
SCM_ECB(1),
SCM_CBC(2),
SCM_CTR(3),
SCM_CFB8(4),
SCM_GCM(5),
SCM_CCM(6),
SCM_POLY_1305(7),
SCM_OCB(8)
int secureblackbox_symmetriccrypto_getmode(void* lpObj);
int secureblackbox_symmetriccrypto_setmode(void* lpObj, int iMode);
int GetMode();
int SetMode(int iMode);
Default Value
0
Remarks
Use this property to specify the mode of operation as required by your environment. The default setting is CBC.
scmDefault | 0 | The default mode in current circumstances. |
scmECB | 1 | ECB (electronic code book) mode. This is insecure, unless you know how to use it right. |
scmCBC | 2 | CBC (cipher block chaining mode) |
scmCTR | 3 | Counter mode |
scmCFB8 | 4 | Cipher feedback mode |
scmGCM | 5 | Galois counter mode |
scmCCM | 6 | CCM mode |
scmPoly1305 | 7 | Poly1305 mode (only to be used with ChaCha20 algorithm) |
scmOCB | 8 | OCB mode |
Data Type
Integer
Nonce Property (SymmetricCrypto Class)
Specifies the Nonce value to employ.
Syntax
ANSI (Cross Platform) int GetNonce(char* &lpNonce, int &lenNonce);
int SetNonce(const char* lpNonce, int lenNonce); Unicode (Windows) INT GetNonce(LPSTR &lpNonce, INT &lenNonce);
INT SetNonce(LPCSTR lpNonce, INT lenNonce);
int secureblackbox_symmetriccrypto_getnonce(void* lpObj, char** lpNonce, int* lenNonce);
int secureblackbox_symmetriccrypto_setnonce(void* lpObj, const char* lpNonce, int lenNonce);
QByteArray GetNonce();
int SetNonce(QByteArray qbaNonce);
Remarks
Use this property to specify the Nonce value for the symmetric operation. Not every algorithm or mode uses nonce.
This property is not available at design time.
Data Type
Byte Array
OutputEncoding Property (SymmetricCrypto Class)
The encoding to apply to the output data.
Syntax
ANSI (Cross Platform) int GetOutputEncoding();
int SetOutputEncoding(int iOutputEncoding); Unicode (Windows) INT GetOutputEncoding();
INT SetOutputEncoding(INT iOutputEncoding);
Possible Values
CET_DEFAULT(0),
CET_BINARY(1),
CET_BASE_64(2),
CET_COMPACT(3),
CET_JSON(4)
int secureblackbox_symmetriccrypto_getoutputencoding(void* lpObj);
int secureblackbox_symmetriccrypto_setoutputencoding(void* lpObj, int iOutputEncoding);
int GetOutputEncoding();
int SetOutputEncoding(int iOutputEncoding);
Default Value
0
Remarks
cetDefault | 0 | The default encoding type in current circumstances. This depends on the operation and the type of the key being used. |
cetBinary | 1 | Raw binary encoding (no encoding) |
cetBase64 | 2 | Base64 encoding (armouring) |
cetCompact | 3 | JSON compact encoding |
cetJSON | 4 | JSON standard encoding |
Data Type
Integer
Padding Property (SymmetricCrypto Class)
The padding type to apply to the encrypted data.
Syntax
ANSI (Cross Platform) int GetPadding();
int SetPadding(int iPadding); Unicode (Windows) INT GetPadding();
INT SetPadding(INT iPadding);
Possible Values
SCP_NONE(0),
SCP_PKCS5(1),
SCP_ANSIX923(2)
int secureblackbox_symmetriccrypto_getpadding(void* lpObj);
int secureblackbox_symmetriccrypto_setpadding(void* lpObj, int iPadding);
int GetPadding();
int SetPadding(int iPadding);
Default Value
1
Remarks
Use this property to specify the padding type to use with the encrypted data. A padding type commonly used in modern security environments is PKCS#5.
scpNone | 0 | No padding. You might need to adjust the length of the input data to align it by the encryption block boundary. |
scpPKCS5 | 1 | Standard PKCS5 (sometimes also referred to as PKCS7) padding |
scpANSIX923 | 2 | ANSI X.923 padding |
Data Type
Integer
PayloadSize Property (SymmetricCrypto Class)
Specifies the payload size, in bytes.
Syntax
ANSI (Cross Platform) int GetPayloadSize();
int SetPayloadSize(int iPayloadSize); Unicode (Windows) INT GetPayloadSize();
INT SetPayloadSize(INT iPayloadSize);
int secureblackbox_symmetriccrypto_getpayloadsize(void* lpObj);
int secureblackbox_symmetriccrypto_setpayloadsize(void* lpObj, int iPayloadSize);
int GetPayloadSize();
int SetPayloadSize(int iPayloadSize);
Default Value
0
Remarks
Use this property to specify the size of the input data in bytes. This is only used by a subset of algorithms/modes, such as CCM.
Data Type
Integer
StreamCipher Property (SymmetricCrypto Class)
Returns true if the selected algorithms works as a stream cipher.
Syntax
ANSI (Cross Platform) int GetStreamCipher(); Unicode (Windows) BOOL GetStreamCipher();
int secureblackbox_symmetriccrypto_getstreamcipher(void* lpObj);
bool GetStreamCipher();
Default Value
FALSE
Remarks
This property returns true if the selected algorithm processes data as a stream (byte-by-byte), rather than block-by-block. This affects the need to use a proper padding settings.
This property is read-only and not available at design time.
Data Type
Boolean
TagSize Property (SymmetricCrypto Class)
Specifies the AEAD tag size, in bytes.
Syntax
ANSI (Cross Platform) int GetTagSize();
int SetTagSize(int iTagSize); Unicode (Windows) INT GetTagSize();
INT SetTagSize(INT iTagSize);
int secureblackbox_symmetriccrypto_gettagsize(void* lpObj);
int secureblackbox_symmetriccrypto_settagsize(void* lpObj, int iTagSize);
int GetTagSize();
int SetTagSize(int iTagSize);
Default Value
16
Remarks
Use this property to specify/customize the tag size for AEAD encryption.
Data Type
Integer
Config Method (SymmetricCrypto Class)
Sets or retrieves a configuration setting.
Syntax
ANSI (Cross Platform) char* Config(const char* lpszConfigurationString); Unicode (Windows) LPWSTR Config(LPCWSTR lpszConfigurationString);
char* secureblackbox_symmetriccrypto_config(void* lpObj, const char* lpszConfigurationString);
QString Config(const QString& qsConfigurationString);
Remarks
Config is a generic method available in every class. It is used to set and retrieve configuration settings for the class.
These settings are similar in functionality to properties, but they are rarely used. In order to avoid "polluting" the property namespace of the class, access to these internal properties is provided through the Config method.
To set a configuration setting named PROPERTY, you must call Config("PROPERTY=VALUE"), where VALUE is the value of the setting expressed as a string. For boolean values, use the strings "True", "False", "0", "1", "Yes", or "No" (case does not matter).
To read (query) the value of a configuration setting, you must call Config("PROPERTY"). The value will be returned as a string.
Error Handling (C++)
This method returns a String value; after it returns, call the GetLastErrorCode() method to obtain its result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message.
Decrypt Method (SymmetricCrypto Class)
Decrypts a buffer.
Syntax
ANSI (Cross Platform) char* Decrypt(const char* lpBuffer, int lenBuffer, int *lpSize = NULL); Unicode (Windows) LPSTR Decrypt(LPCSTR lpBuffer, INT lenBuffer, LPINT lpSize = NULL);
char* secureblackbox_symmetriccrypto_decrypt(void* lpObj, const char* lpBuffer, int lenBuffer, int *lpSize);
QByteArray Decrypt(QByteArray qbaBuffer);
Remarks
Use this method to decrypt a byte array and get the encrypted message in another byte array.
Specify the decryption key in Key property.
Error Handling (C++)
This method returns a Byte Array value (with length lpSize); after it returns, call the GetLastErrorCode() method to obtain its result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message.
DecryptFile Method (SymmetricCrypto Class)
Decrypts a file.
Syntax
ANSI (Cross Platform) int DecryptFile(const char* lpszSourceFile, const char* lpszDestFile); Unicode (Windows) INT DecryptFile(LPCWSTR lpszSourceFile, LPCWSTR lpszDestFile);
int secureblackbox_symmetriccrypto_decryptfile(void* lpObj, const char* lpszSourceFile, const char* lpszDestFile);
int DecryptFile(const QString& qsSourceFile, const QString& qsDestFile);
Remarks
Use this method to decrypt an encrypted file and save the decrypted data to another file.
Specify the decryption key in Key property before calling this method.
Error Handling (C++)
This method returns a result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message. (Note: This method's result code can also be obtained by calling the GetLastErrorCode() method after it returns.)
DecryptFinal Method (SymmetricCrypto Class)
Finalization of decryption by blocks.
Syntax
ANSI (Cross Platform) char* DecryptFinal(int *lpSize = NULL); Unicode (Windows) LPSTR DecryptFinal(LPINT lpSize = NULL);
char* secureblackbox_symmetriccrypto_decryptfinal(void* lpObjint *lpSize);
QByteArray DecryptFinal();
Remarks
Use this method to finalize of decryption by blocks.
Specify decryption key in Key property.
Error Handling (C++)
This method returns a Byte Array value (with length lpSize); after it returns, call the GetLastErrorCode() method to obtain its result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message.
DecryptInit Method (SymmetricCrypto Class)
Initializes a per-block decryption process.
Syntax
ANSI (Cross Platform) int DecryptInit(); Unicode (Windows) INT DecryptInit();
int secureblackbox_symmetriccrypto_decryptinit(void* lpObj);
int DecryptInit();
Remarks
Use this method to start a block-by-block decryption process.
Specify the decryption key in Key property before starting the decryption.
Error Handling (C++)
This method returns a result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message. (Note: This method's result code can also be obtained by calling the GetLastErrorCode() method after it returns.)
DecryptStream Method (SymmetricCrypto Class)
Decrypts a stream.
Syntax
ANSI (Cross Platform) int DecryptStream(SecureBlackboxStream* sSourceStream, SecureBlackboxStream* sDestStream); Unicode (Windows) INT DecryptStream(SecureBlackboxStream* sSourceStream, SecureBlackboxStream* sDestStream);
int secureblackbox_symmetriccrypto_decryptstream(void* lpObj, SecureBlackboxStream* sSourceStream, SecureBlackboxStream* sDestStream);
int DecryptStream(SecureBlackboxStream* sSourceStream, SecureBlackboxStream* sDestStream);
Remarks
Use this method to decrypt a stream and save the decrypted message to another stream.
Specify the decryption key in Key property before commencing the decryption.
Error Handling (C++)
This method returns a result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message. (Note: This method's result code can also be obtained by calling the GetLastErrorCode() method after it returns.)
DecryptUpdate Method (SymmetricCrypto Class)
Decrypts the next block of encrypted data.
Syntax
ANSI (Cross Platform) char* DecryptUpdate(const char* lpBuffer, int lenBuffer, int *lpSize = NULL); Unicode (Windows) LPSTR DecryptUpdate(LPCSTR lpBuffer, INT lenBuffer, LPINT lpSize = NULL);
char* secureblackbox_symmetriccrypto_decryptupdate(void* lpObj, const char* lpBuffer, int lenBuffer, int *lpSize);
QByteArray DecryptUpdate(QByteArray qbaBuffer);
Remarks
When using block-by-block decryption, pass every subsequent block of the encrypted message to this method until the entire message is processed. For each encrypted block the method returns a piece of decrypted data.
Please note that in general case there is no direct correspondence between the data actually contained in the encrypted block with the output of this method. The component may choose to cache a piece of the provided buffer internally if it doesn't constitute a full block of encrypted data.
Remember to call DecryptInit before calling this method to prepare the control for the decryption process.
Error Handling (C++)
This method returns a Byte Array value (with length lpSize); after it returns, call the GetLastErrorCode() method to obtain its result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message.
DoAction Method (SymmetricCrypto Class)
Performs an additional action.
Syntax
ANSI (Cross Platform) char* DoAction(const char* lpszActionID, const char* lpszActionParams); Unicode (Windows) LPWSTR DoAction(LPCWSTR lpszActionID, LPCWSTR lpszActionParams);
char* secureblackbox_symmetriccrypto_doaction(void* lpObj, const char* lpszActionID, const char* lpszActionParams);
QString DoAction(const QString& qsActionID, const QString& qsActionParams);
Remarks
DoAction is a generic method available in every class. It is used to perform an additional action introduced after the product major release. The list of actions is not fixed, and may be flexibly extended over time.
The unique identifier (case insensitive) of the action is provided in the ActionID parameter.
ActionParams contains the value of a single parameter, or a list of multiple parameters for the action in the form of PARAM1=VALUE1;PARAM2=VALUE2;....
Common ActionIDs:
Action | Parameters | Returned value | Description |
ResetTrustedListCache | none | none | Clears the cached list of trusted lists. |
ResetCertificateCache | none | none | Clears the cached certificates. |
ResetCRLCache | none | none | Clears the cached CRLs. |
ResetOCSPResponseCache | none | none | Clears the cached OCSP responses. |
Error Handling (C++)
This method returns a String value; after it returns, call the GetLastErrorCode() method to obtain its result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message.
Encrypt Method (SymmetricCrypto Class)
Encrypts a buffer.
Syntax
ANSI (Cross Platform) char* Encrypt(const char* lpBuffer, int lenBuffer, int *lpSize = NULL); Unicode (Windows) LPSTR Encrypt(LPCSTR lpBuffer, INT lenBuffer, LPINT lpSize = NULL);
char* secureblackbox_symmetriccrypto_encrypt(void* lpObj, const char* lpBuffer, int lenBuffer, int *lpSize);
QByteArray Encrypt(QByteArray qbaBuffer);
Remarks
Use this method to encrypt a byte array and get the protected message in another byte array.
Specify the encryption key in Key property before calling this method.
This is a one-off encryption method. Don't use it with granular per-block methods (EncryptInit, EncryptUpdate, EncryptFinal).
Error Handling (C++)
This method returns a Byte Array value (with length lpSize); after it returns, call the GetLastErrorCode() method to obtain its result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message.
EncryptFile Method (SymmetricCrypto Class)
Encrypts a file.
Syntax
ANSI (Cross Platform) int EncryptFile(const char* lpszSourceFile, const char* lpszDestFile); Unicode (Windows) INT EncryptFile(LPCWSTR lpszSourceFile, LPCWSTR lpszDestFile);
int secureblackbox_symmetriccrypto_encryptfile(void* lpObj, const char* lpszSourceFile, const char* lpszDestFile);
int EncryptFile(const QString& qsSourceFile, const QString& qsDestFile);
Remarks
Use this method to encrypt a file and save the protected message in another file.
Specify the encryption key in Key property before commencing encryption.
Error Handling (C++)
This method returns a result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message. (Note: This method's result code can also be obtained by calling the GetLastErrorCode() method after it returns.)
EncryptFinal Method (SymmetricCrypto Class)
Finalization of encryption by blocks.
Syntax
ANSI (Cross Platform) char* EncryptFinal(int *lpSize = NULL); Unicode (Windows) LPSTR EncryptFinal(LPINT lpSize = NULL);
char* secureblackbox_symmetriccrypto_encryptfinal(void* lpObjint *lpSize);
QByteArray EncryptFinal();
Remarks
Use this method to finalize of encryption by blocks.
Specify encryption key in Key property.
Error Handling (C++)
This method returns a Byte Array value (with length lpSize); after it returns, call the GetLastErrorCode() method to obtain its result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message.
EncryptInit Method (SymmetricCrypto Class)
Initializes a per-block encryption process.
Syntax
ANSI (Cross Platform) int EncryptInit(); Unicode (Windows) INT EncryptInit();
int secureblackbox_symmetriccrypto_encryptinit(void* lpObj);
int EncryptInit();
Remarks
Use this method to initialize a block-by-block encryption process. Follow it with calls to EncryptUpdate (as many as needed), and complete the encryption with an EncryptFinal call.
Specify the encryption key in Key property before calling this method.
Error Handling (C++)
This method returns a result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message. (Note: This method's result code can also be obtained by calling the GetLastErrorCode() method after it returns.)
EncryptStream Method (SymmetricCrypto Class)
Encrypts a stream.
Syntax
ANSI (Cross Platform) int EncryptStream(SecureBlackboxStream* sSourceStream, SecureBlackboxStream* sDestStream); Unicode (Windows) INT EncryptStream(SecureBlackboxStream* sSourceStream, SecureBlackboxStream* sDestStream);
int secureblackbox_symmetriccrypto_encryptstream(void* lpObj, SecureBlackboxStream* sSourceStream, SecureBlackboxStream* sDestStream);
int EncryptStream(SecureBlackboxStream* sSourceStream, SecureBlackboxStream* sDestStream);
Remarks
Use this method to encrypt a stream and save the protected message into another stream.
Specify the encryption key in the Key property before calling this method.
This is a one-off encryption method. Don't use it together with granular per-block encryption methods such as EncryptInit, EncryptUpdate, and EncryptFinal.
Error Handling (C++)
This method returns a result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message. (Note: This method's result code can also be obtained by calling the GetLastErrorCode() method after it returns.)
EncryptUpdate Method (SymmetricCrypto Class)
Encrypts the next block of data.
Syntax
ANSI (Cross Platform) char* EncryptUpdate(const char* lpBuffer, int lenBuffer, int *lpSize = NULL); Unicode (Windows) LPSTR EncryptUpdate(LPCSTR lpBuffer, INT lenBuffer, LPINT lpSize = NULL);
char* secureblackbox_symmetriccrypto_encryptupdate(void* lpObj, const char* lpBuffer, int lenBuffer, int *lpSize);
QByteArray EncryptUpdate(QByteArray qbaBuffer);
Remarks
Use this method to encrypt the next block of data contained in Buffer.
Call this method after calling EncryptInit for as many times as needed, until the whole volume of data is processed. Having done that, call EncryptFinal to complete the encryption and get the terminating encrypted trailer.
Error Handling (C++)
This method returns a Byte Array value (with length lpSize); after it returns, call the GetLastErrorCode() method to obtain its result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message.
Reset Method (SymmetricCrypto Class)
Resets the class settings.
Syntax
ANSI (Cross Platform) int Reset(); Unicode (Windows) INT Reset();
int secureblackbox_symmetriccrypto_reset(void* lpObj);
int Reset();
Remarks
Reset is a generic method available in every class.
Error Handling (C++)
This method returns a result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message. (Note: This method's result code can also be obtained by calling the GetLastErrorCode() method after it returns.)
Error Event (SymmetricCrypto Class)
Reports errors during encryption or decryption.
Syntax
ANSI (Cross Platform) virtual int FireError(SymmetricCryptoErrorEventParams *e);
typedef struct {
int ErrorCode;
const char *Description; int reserved; } SymmetricCryptoErrorEventParams;
Unicode (Windows) virtual INT FireError(SymmetricCryptoErrorEventParams *e);
typedef struct {
INT ErrorCode;
LPCWSTR Description; INT reserved; } SymmetricCryptoErrorEventParams;
#define EID_SYMMETRICCRYPTO_ERROR 1 virtual INT SECUREBLACKBOX_CALL FireError(INT &iErrorCode, LPSTR &lpszDescription);
class SymmetricCryptoErrorEventParams { public: int ErrorCode(); const QString &Description(); int EventRetVal(); void SetEventRetVal(int iRetVal); };
// To handle, connect one or more slots to this signal. void Error(SymmetricCryptoErrorEventParams *e);
// Or, subclass SymmetricCrypto and override this emitter function. virtual int FireError(SymmetricCryptoErrorEventParams *e) {...}
Remarks
class fires this event in case of exceptional conditions during a cryptographic operation.
ErrorCode contains an error code and Description contains a textual description of the error.
Notification Event (SymmetricCrypto Class)
This event notifies the application about an underlying control flow event.
Syntax
ANSI (Cross Platform) virtual int FireNotification(SymmetricCryptoNotificationEventParams *e);
typedef struct {
const char *EventID;
const char *EventParam; int reserved; } SymmetricCryptoNotificationEventParams;
Unicode (Windows) virtual INT FireNotification(SymmetricCryptoNotificationEventParams *e);
typedef struct {
LPCWSTR EventID;
LPCWSTR EventParam; INT reserved; } SymmetricCryptoNotificationEventParams;
#define EID_SYMMETRICCRYPTO_NOTIFICATION 2 virtual INT SECUREBLACKBOX_CALL FireNotification(LPSTR &lpszEventID, LPSTR &lpszEventParam);
class SymmetricCryptoNotificationEventParams { public: const QString &EventID(); const QString &EventParam(); int EventRetVal(); void SetEventRetVal(int iRetVal); };
// To handle, connect one or more slots to this signal. void Notification(SymmetricCryptoNotificationEventParams *e);
// Or, subclass SymmetricCrypto and override this emitter function. virtual int FireNotification(SymmetricCryptoNotificationEventParams *e) {...}
Remarks
The class fires this event to let the application know about some event, occurrence, or milestone in the class. For example, it may fire to report completion of the document processing. The list of events being reported is not fixed, and may be flexibly extended over time.
The unique identifier of the event is provided in the EventID parameter. EventParam contains any parameters accompanying the occurrence. Depending on the type of the class, the exact action it is performing, or the document being processed, one or both may be omitted.
Progress Event (SymmetricCrypto Class)
Reports the data encryption/decryption progress.
Syntax
ANSI (Cross Platform) virtual int FireProgress(SymmetricCryptoProgressEventParams *e);
typedef struct {
int64 Total;
int64 Current;
int Cancel; int reserved; } SymmetricCryptoProgressEventParams;
Unicode (Windows) virtual INT FireProgress(SymmetricCryptoProgressEventParams *e);
typedef struct {
LONG64 Total;
LONG64 Current;
BOOL Cancel; INT reserved; } SymmetricCryptoProgressEventParams;
#define EID_SYMMETRICCRYPTO_PROGRESS 3 virtual INT SECUREBLACKBOX_CALL FireProgress(LONG64 &lTotal, LONG64 &lCurrent, BOOL &bCancel);
class SymmetricCryptoProgressEventParams { public: qint64 Total(); qint64 Current(); bool Cancel(); void SetCancel(bool bCancel); int EventRetVal(); void SetEventRetVal(int iRetVal); };
// To handle, connect one or more slots to this signal. void Progress(SymmetricCryptoProgressEventParams *e);
// Or, subclass SymmetricCrypto and override this emitter function. virtual int FireProgress(SymmetricCryptoProgressEventParams *e) {...}
Remarks
This event fires periodically during a file encrypt/decrypt operation to report its progress.
Use the Cancel parameter to terminate the encryption/decryption if needed.
CryptoKey Type
This container represents a cryptographic key.
Syntax
SecureBlackboxCryptoKey (declared in secureblackbox.h)
Remarks
This type is a universal placeholder for cryptographic keys.
Fields
Algorithm
char*
Default Value: ""
The algorithm of the cryptographic key. A cryptokey object may hold either symmetric, MAC, or public key. Public key algorithms: RSA, ECDSA, Elgamal, DH.
SB_SYMMETRIC_ALGORITHM_RC4 | RC4 | |
SB_SYMMETRIC_ALGORITHM_DES | DES | |
SB_SYMMETRIC_ALGORITHM_3DES | 3DES | |
SB_SYMMETRIC_ALGORITHM_RC2 | RC2 | |
SB_SYMMETRIC_ALGORITHM_AES128 | AES128 | |
SB_SYMMETRIC_ALGORITHM_AES192 | AES192 | |
SB_SYMMETRIC_ALGORITHM_AES256 | AES256 | |
SB_SYMMETRIC_ALGORITHM_IDENTITY | Identity | |
SB_SYMMETRIC_ALGORITHM_BLOWFISH | Blowfish | |
SB_SYMMETRIC_ALGORITHM_CAST128 | CAST128 | |
SB_SYMMETRIC_ALGORITHM_IDEA | IDEA | |
SB_SYMMETRIC_ALGORITHM_TWOFISH | Twofish | |
SB_SYMMETRIC_ALGORITHM_TWOFISH128 | Twofish128 | |
SB_SYMMETRIC_ALGORITHM_TWOFISH192 | Twofish192 | |
SB_SYMMETRIC_ALGORITHM_TWOFISH256 | Twofish256 | |
SB_SYMMETRIC_ALGORITHM_CAMELLIA | Camellia | |
SB_SYMMETRIC_ALGORITHM_CAMELLIA128 | Camellia128 | |
SB_SYMMETRIC_ALGORITHM_CAMELLIA192 | Camellia192 | |
SB_SYMMETRIC_ALGORITHM_CAMELLIA256 | Camellia256 | |
SB_SYMMETRIC_ALGORITHM_SERPENT | Serpent | |
SB_SYMMETRIC_ALGORITHM_SERPENT128 | Serpent128 | |
SB_SYMMETRIC_ALGORITHM_SERPENT192 | Serpent192 | |
SB_SYMMETRIC_ALGORITHM_SERPENT256 | Serpent256 | |
SB_SYMMETRIC_ALGORITHM_SEED | SEED | |
SB_SYMMETRIC_ALGORITHM_RABBIT | Rabbit | |
SB_SYMMETRIC_ALGORITHM_SYMMETRIC | Generic | |
SB_SYMMETRIC_ALGORITHM_GOST_28147_1989 | GOST-28147-1989 | |
SB_SYMMETRIC_ALGORITHM_CHACHA20 | ChaCha20 |
SB_HASH_ALGORITHM_SHA1 | SHA1 | |
SB_HASH_ALGORITHM_SHA224 | SHA224 | |
SB_HASH_ALGORITHM_SHA256 | SHA256 | |
SB_HASH_ALGORITHM_SHA384 | SHA384 | |
SB_HASH_ALGORITHM_SHA512 | SHA512 | |
SB_HASH_ALGORITHM_MD2 | MD2 | |
SB_HASH_ALGORITHM_MD4 | MD4 | |
SB_HASH_ALGORITHM_MD5 | MD5 | |
SB_HASH_ALGORITHM_RIPEMD160 | RIPEMD160 | |
SB_HASH_ALGORITHM_CRC32 | CRC32 | |
SB_HASH_ALGORITHM_SSL3 | SSL3 | |
SB_HASH_ALGORITHM_GOST_R3411_1994 | GOST1994 | |
SB_HASH_ALGORITHM_WHIRLPOOL | WHIRLPOOL | |
SB_HASH_ALGORITHM_POLY1305 | POLY1305 | |
SB_HASH_ALGORITHM_SHA3_224 | SHA3_224 | |
SB_HASH_ALGORITHM_SHA3_256 | SHA3_256 | |
SB_HASH_ALGORITHM_SHA3_384 | SHA3_384 | |
SB_HASH_ALGORITHM_SHA3_512 | SHA3_512 | |
SB_HASH_ALGORITHM_BLAKE2S_128 | BLAKE2S_128 | |
SB_HASH_ALGORITHM_BLAKE2S_160 | BLAKE2S_160 | |
SB_HASH_ALGORITHM_BLAKE2S_224 | BLAKE2S_224 | |
SB_HASH_ALGORITHM_BLAKE2S_256 | BLAKE2S_256 | |
SB_HASH_ALGORITHM_BLAKE2B_160 | BLAKE2B_160 | |
SB_HASH_ALGORITHM_BLAKE2B_256 | BLAKE2B_256 | |
SB_HASH_ALGORITHM_BLAKE2B_384 | BLAKE2B_384 | |
SB_HASH_ALGORITHM_BLAKE2B_512 | BLAKE2B_512 | |
SB_HASH_ALGORITHM_SHAKE_128 | SHAKE_128 | |
SB_HASH_ALGORITHM_SHAKE_256 | SHAKE_256 | |
SB_HASH_ALGORITHM_SHAKE_128_LEN | SHAKE_128_LEN | |
SB_HASH_ALGORITHM_SHAKE_256_LEN | SHAKE_256_LEN |
Bits
int (read-only)
Default Value: 0
The length of the key in bits.
Curve
char*
Default Value: ""
This property specifies the name of the curve the EC key is built on.
Exportable
int (read-only)
Default Value: FALSE
Returns True if the key is exportable (can be serialized into an array of bytes), and False otherwise.
Fingerprint
char* (read-only)
Default Value: ""
Contains the fingerprint (a hash imprint) of this key.
Handle
int64
Default Value: 0
Allows to get or set a 'handle', a unique identifier of the underlying property object. Use this property to assign objects of the same type in a quicker manner, without copying them fieldwise.
When you pass a handle of one object to another, the source object is copied to the destination rather than assigned. It is safe to get rid of the original object
after such operation.
pdfSigner.setSigningCertHandle(certMgr.getCertHandle());
ID
char*
Default Value:
Provides access to a storage-specific key identifier. Key identifiers are used by cryptographic providers to refer to a particular key and/or distinguish between different keys. They are typically unique within a storage, but there is no guarantee that a particular cryptoprovider will conform to that (or will assign any key IDs at all).
IV
char*
Default Value:
The initialization vector (IV) of a symmetric key. This is normally a public part of a symmetric key, the idea of which is to introduce randomness to the encrypted data and/or serve as a first block in chaining ciphers.
Key
char* (read-only)
Default Value:
The byte array representation of the key. This may not be available for non-Exportable keys.
Nonce
char*
Default Value:
A nonce value associated with a key. It is similar to IV, but its only purpose is to introduce randomness.
Private
int (read-only)
Default Value: FALSE
Returns True if the object hosts a private key, and False otherwise.
Public
int (read-only)
Default Value: FALSE
Returns True if the object hosts a public key, and False otherwise.
Subject
char*
Default Value:
Returns the key subject. This is a cryptoprovider-dependent value, which normally aims to provide some user-friendly insight into the key owner.
Symmetric
int (read-only)
Default Value: FALSE
Returns True if the object contains a symmetric key, and False otherwise.
Valid
int (read-only)
Default Value: FALSE
Returns True if this key is valid. The term Valid highly depends on the kind of the key being stored. A symmetric key is considered valid if its length fits the algorithm being set. The validity of an RSA key also ensures that the RSA key elements (primes, exponents, and modulus) are consistent.
Constructors
CryptoKey()
Creates an empty crypto key object.
SecureBlackboxStream Type
Syntax
SecureBlackboxStream (declared in secureblackbox.h)
Remarks
The SymmetricCrypto class includes one or more API members that take a stream object as a parameter. To use such API members, create a concrete class that implements the SecureBlackboxStream interface and pass the SymmetricCrypto class an instance of that concrete class.
When implementing the SecureBlackboxStream interface's properties and methods, they must behave as described below. If the concrete class's implementation does not behave as expected, undefined behavior may occur.
Properties | |
CanRead |
Whether the stream supports reading.
bool CanRead() { return true; } |
CanSeek |
Whether the stream supports seeking.
bool CanSeek() { return true; } |
CanWrite |
Whether the stream supports writing.
bool CanWrite() { return true; } |
Length |
Gets the length of the stream, in bytes.
int64 GetLength() = 0; |
Methods | |
Close |
Closes the stream, releasing all resources currently allocated for it.
void Close() {} This method is called automatically when a SecureBlackboxStream object is deleted. |
Flush |
Forces all data held by the stream's buffers to be written out to storage.
int Flush() { return 0; } Must return 0 if flushing is successful; or -1 if an error occurs or the stream is closed. If the stream does not support writing, this method must do nothing and return 0. |
Read |
Reads a sequence of bytes from the stream and advances the current position within the stream by the number of bytes read.
int Read(void* buffer, int count) = 0; Buffer specifies the buffer to populate with data from the stream. Count specifies the number of bytes that should be read from the stream. Must return the total number of bytes read into Buffer; this may be less than Count if that many bytes are not currently available, or 0 if the end of the stream has been reached. Must return -1 if an error occurs, if reading is not supported, or if the stream is closed. |
Seek |
Sets the current position within the stream based on a particular point of origin.
int64 Seek(int64 offset, int seekOrigin) = 0; Offset specifies the offset in the stream to seek to, relative to SeekOrigin. Valid values for SeekOrigin are:
Must return the new position within the stream; or -1 if an error occurs, if seeking is not supported, or if the stream is closed (however, see note below). If -1 is returned, the current position within the stream must remain unchanged. Note: If the stream is not closed, it must always be possible to call this method with an Offset of 0 and a SeekOrigin of 1 to obtain the current position within the stream, even if seeking is not otherwise supported. |
Write |
Writes a sequence of bytes to the stream and advances the current position within the stream by the number of bytes written.
int Write(const void* buffer, int count) = 0; Buffer specifies the buffer with data to write to the stream. Count specifies the number of bytes that should be written to the stream. Must return the total number of bytes written to the stream; this may be less than Count if that many bytes could not be written. Must return -1 if an error occurs, if writing is not supported, or if the stream is closed. |
Config Settings (SymmetricCrypto Class)
The class accepts one or more of the following configuration settings. Configuration settings are similar in functionality to properties, but they are rarely used. In order to avoid "polluting" the property namespace of the class, access to these internal properties is provided through the Config method.SymmetricCrypto Config Settings
- dir ("direct")
- RSA1_5
- RSA-OAEP
- RSA-OAEP-256
- A128KW
- A192KW
- A256KW
- ECDH-ES
- ECDH-ES+A128KW
- ECDH-ES+A192KW
- ECDH-ES+A256KW
- A128GCMKW
- A192GCMKW
- A256GCMKW
- PBES2-HS256+A128KW
- PBES2-HS384+A192KW
- PBES2-HS512+A256KW
Base Config Settings
You can switch this property off to improve performance if your project only uses known, good private keys.
Supported values are:
off | No caching (default) | |
local | Local caching | |
global | Global caching |
This setting only applies to sessions negotiated with TLS version 1.3.
Supported values are:
file | File | |
console | Console | |
systemlog | System Log (supported for Android only) | |
debugger | Debugger (supported for VCL for Windows and .Net) |
Supported values are:
time | Current time | |
level | Level | |
package | Package name | |
module | Module name | |
class | Class name | |
method | Method name | |
threadid | Thread Id | |
contenttype | Content type | |
content | Content | |
all | All details |
Supported filter names are:
exclude-package | Exclude a package specified in the value | |
exclude-module | Exclude a module specified in the value | |
exclude-class | Exclude a class specified in the value | |
exclude-method | Exclude a method specified in the value | |
include-package | Include a package specified in the value | |
include-module | Include a module specified in the value | |
include-class | Include a class specified in the value | |
include-method | Include a method specified in the value |
none | No flush (caching only) | |
immediate | Immediate flush (real-time logging) | |
maxcount | Flush cached entries upon reaching LogMaxEventCount entries in the cache. |
Supported values are:
none | None (by default) | |
fatal | Severe errors that cause premature termination. | |
error | Other runtime errors or unexpected conditions. | |
warning | Use of deprecated APIs, poor use of API, 'almost' errors, other runtime situations that are undesirable or unexpected, but not necessarily "wrong". | |
info | Interesting runtime events (startup/shutdown). | |
debug | Detailed information on flow of through the system. | |
trace | More detailed information. |
The default value of this setting is 100.
none | No rotation | |
deleteolder | Delete older entries from the cache upon reaching LogMaxEventCount | |
keepolder | Keep older entries in the cache upon reaching LogMaxEventCount (newer entries are discarded) |
Supported Values:
certificate | Enables caching of certificates. |
crl | Enables caching of Certificate Revocation Lists (CRLs). |
ocsp | Enables caching of OCSP (Online Certificate Status Protocol) responses. |
Example (default value):
PKICache=certificate,crl,ocsp
In this example, the component caches certificates, CRLs, and OCSP responses.
The default value is an empty string - no cached PKI data is stored on disk.
Example:
PKICachePath=C:\Temp\cache
In this example, the cached PKI data is stored in the C:\Temp\cache directory.
Supported values are:
none | No static DNS rules (default) | |
local | Local static DNS rules | |
global | Global static DNS rules |
This setting only applies to certificates originating from a Windows system store.
The property accepts comma-separated values where the first descriptor name is used when the OID is mapped, and subsequent values act as aliases for parsing.
Syntax:
Config("XMLRDNDescriptorName[OID]=PrimaryName,Alias1,Alias2");
Where:
OID: The Object Identifier from the certificate's IssuerRDN or SubjectRDN that you want to map.
PrimaryName: The main descriptor name used in the XML signature when the OID is encountered.
Alias1, Alias2, ...: Optional alternative names recognized during parsing.
Usage Examples:
Map OID 2.5.4.5 to SERIALNUMBER:
Config("XMLRDNDescriptorName[2.5.4.5]=SERIALNUMBER");
Map OID 1.2.840.113549.1.9.1 to E, with aliases EMAIL and EMAILADDRESS:
Config("XMLRDNDescriptorName[1.2.840.113549.1.9.1]=E,EMAIL,EMAILADDRESS");
Trappable Errors (SymmetricCrypto Class)
Error Handling (C++)
Call the GetLastErrorCode() method to obtain the last called method's result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. Known error codes are listed below. If an error occurs, the GetLastError() method can be called to retrieve the associated error message.
SymmetricCrypto Errors
1048577 | Invalid parameter (SB_ERROR_INVALID_PARAMETER) |
1048578 | Invalid configuration (SB_ERROR_INVALID_SETUP) |
1048579 | Invalid state (SB_ERROR_INVALID_STATE) |
1048580 | Invalid value (SB_ERROR_INVALID_VALUE) |
1048581 | Private key not found (SB_ERROR_NO_PRIVATE_KEY) |
1048582 | Cancelled by the user (SB_ERROR_CANCELLED_BY_USER) |
1048583 | The file was not found (SB_ERROR_NO_SUCH_FILE) |
1048584 | Unsupported feature or operation (SB_ERROR_UNSUPPORTED_FEATURE) |
1048585 | General error (SB_ERROR_GENERAL_ERROR) |