#include <PayloadConfidentialBlock.h>

Inheritance diagram for dtn::security::PayloadConfidentialBlock:

Collaboration diagram for dtn::security::PayloadConfidentialBlock:

Classes
class	Factory
Public Member Functions
virtual	~PayloadConfidentialBlock ()
Static Public Member Functions
static void	encrypt (dtn::data::Bundle &bundle, const dtn::security::SecurityKey &long_key, const dtn::data::EID &source)
static void	decrypt (dtn::data::Bundle &bundle, const dtn::security::SecurityKey &long_key)
Static Public Attributes
static const char	BLOCK_TYPE = SecurityBlock::PAYLOAD_CONFIDENTIAL_BLOCK
Protected Member Functions
	PayloadConfidentialBlock ()
Static Protected Member Functions
static bool	decryptPayload (dtn::data::Bundle &bundle, const unsigned char ephemeral_key[ibrcommon::AES128Stream::key_size_in_bytes], const u_int32_t salt)
Friends
class	dtn::data::Bundle

Detailed Description

The PayloadConfidentialBlock encrypts the payload, PayloadConfidentialBlocks, which are already there and PayloadIntegrityBlocks, which are already there. Payload Confidential or Integrity Blocks are encrypted because they can contain e.g. signatures which make guessing the plaintext easier. You can instantiate a factory, which will take care of everything. The factory can be given a rsa key and the corresponding node. You may wish to add more keys using addDestination(), so one or more nodes are able to recover the payload. For each destination a PayloadConfidentialBlock is placed in the bundle, when calling encrypt(). Be sure, that no other PayloadConfidentialBlocks or PayloadIntegrityBlocks are inside this bundle if using encryption with more than one key.

Definition at line 25 of file PayloadConfidentialBlock.h.

Constructor & Destructor Documentation

dtn::security::PayloadConfidentialBlock::~PayloadConfidentialBlock ( ) [virtual]

does nothing

Definition at line 32 of file PayloadConfidentialBlock.cpp.

dtn::security::PayloadConfidentialBlock::PayloadConfidentialBlock ( ) [protected]

Creates an empty PayloadConfidentialBlock. With ciphersuite_id set to PCB_RSA_AES128_PAYLOAD_PIB_PCB

Definition at line 27 of file PayloadConfidentialBlock.cpp.

Referenced by dtn::security::PayloadConfidentialBlock::Factory::create().

Member Function Documentation

void dtn::security::PayloadConfidentialBlock::decrypt	(	dtn::data::Bundle &	bundle,
		const dtn::security::SecurityKey &	long_key
	)		`[static]`

Decrypts the Payload inside this Bundle. All correlated Blocks, which are found, will be decrypted, too, placed at the position, where their PayloadConfidentialBlock was, which contained them. After a matching PayloadConfidentialBlock with key information is searched by looking after the security destination. If the payload has been decrypted successfully, the correlated blocks will be decrypted. If one block fails to decrypt, it will be deleted.

Parameters:

bundle the bundle with the to be decrypted payload

Returns:: true if decryption has been successfull, false otherwise

Definition at line 124 of file PayloadConfidentialBlock.cpp.

Referenced by dtn::security::SecurityManager::decrypt(), and decryptPayload().

Here is the call graph for this function:

bool dtn::security::PayloadConfidentialBlock::decryptPayload	(	dtn::data::Bundle &	bundle,
		const unsigned char	ephemeral_key[ibrcommon::AES128Stream::key_size_in_bytes],
		const u_int32_t	salt
	)		`[static, protected]`

Decrypts the payload using the ephemeral_key and salt.

Parameters:

bundle	the payload containing bundle
ephemeral_key	the AES key
salt	the salt

Returns:: true if tag verification succeeded, false otherwise

Definition at line 236 of file PayloadConfidentialBlock.cpp.

References dtn::security::SecurityBlock::_ciphersuite_params, dtn::security::SecurityBlock::_security_result, ibrcommon::CipherStream::CIPHER_DECRYPT, decrypt(), dtn::security::SecurityBlock::TLVList::get(), dtn::data::Bundle::getBlock(), IBRCOMMON_LOGGER, IBRCOMMON_LOGGER_ENDL, dtn::security::SecurityBlock::initialization_vector, ibrcommon::BLOB::Reference::iostream(), ibrcommon::AES128Stream::iv_len, dtn::security::SecurityBlock::PCB_integrity_check_value, ibrcommon::AES128Stream::tag_len, and ibrcommon::AES128Stream::verify().

Referenced by decrypt().

Here is the call graph for this function:

void dtn::security::PayloadConfidentialBlock::encrypt	(	dtn::data::Bundle &	bundle,
		const dtn::security::SecurityKey &	long_key,
		const dtn::data::EID &	source
	)		`[static]`

Encrypts the Payload inside this Bundle. If PIBs or PCBs are found, they will be encrypted, too, with a correlator set. The encrypted blocks will be each placed inside a PayloadConfidentialBlock, which will be inserted at the same place, except for the payload, which be encrypted in place.

Parameters:

bundle the bundle with the to be encrypted payload

Definition at line 36 of file PayloadConfidentialBlock.cpp.