app/ltechnologies.onionphone.pgpshield.crypto/CryptoOperations

CryptoOperations

@Singleton

class CryptoOperations @Inject constructor

Singleton coordinator that delegates to individual engine helpers.

Each public function corresponds to one OpenPGP/S-MIME primitive and simply builds the matching engine request. Callers pass raw byte/char material; zeroing of passphrase buffers remains the responsibility of the caller.

Constructors

CryptoOperations

@Inject

constructor()

Properties

smartCardPort

val smartCardPort: SmartCardPort

Functions

addSubkey

fun addSubkey(secretArmored: ByteArray, passphrase: CharArray, subkeyType: SubkeyType, rsaBits: Int = 3072): ByteArray

Adds a subkey of subkeyType to an existing secret key ring.

addUserId

fun addUserId(secretArmored: ByteArray, passphrase: CharArray, userId: String): ByteArray

Adds a new userId identity to the secret key ring.

certifyKey

fun certifyKey(certifierSecretArmored: ByteArray, certifierPassphrase: CharArray, targetPublicArmored: ByteArray, userId: String): CertifyKeyResult

Certifies (signs) userId on targetPublicArmored using the certifier's secret key, establishing a trust signature.

changePassphrase

fun changePassphrase(secretArmored: ByteArray, oldPassphrase: CharArray, newPassphrase: CharArray): ByteArray

Re-encrypts the secret key ring, replacing oldPassphrase with newPassphrase.

decrypt

fun decrypt(ciphertext: ByteArray, secretArmored: ByteArray, passphrase: CharArray): DecryptResult

Decrypts ciphertext using the given secret key ring and passphrase.

decryptTar

fun decryptTar(ciphertext: ByteArray, secretArmored: ByteArray, passphrase: CharArray): List<NamedFile>

Decrypts a GnuPG encrypted tar back into its constituent NamedFiles.

encrypt

fun encrypt(plaintext: ByteArray, recipientPublicArmored: List<ByteArray>, asciiArmor: Boolean = true, fileName: String = "_CONSOLE"): EncryptResult

Encrypts plaintext to one or more recipients.

encryptTar

fun encryptTar(files: List<NamedFile>, recipientPublicArmored: List<ByteArray>, asciiArmor: Boolean = true): EncryptResult

Encrypts a set of files into a single GnuPG-compatible encrypted tar.

generateKey

fun generateKey(userId: String, passphrase: CharArray, algorithmType: KeyAlgorithmType = KeyAlgorithmType.RSA, rsaBits: Int = 3072): GeneratedKeyRing

Generates a new secret/public key ring for userId.

generateRevocationCert

fun generateRevocationCert(secretArmored: ByteArray, passphrase: CharArray, reasonText: String = ""): ByteArray

Produces a revocation certificate for the secret key, with optional reasonText.

sign

fun sign(data: ByteArray, secretArmored: ByteArray, passphrase: CharArray, detachedBinary: Boolean = false): SignResult

Signs data with the given secret key.

smimeDecrypt

fun smimeDecrypt(ciphertext: ByteArray): ByteArray

Decrypts ciphertext using the S/MIME engine.

smimeEncrypt

fun smimeEncrypt(plaintext: ByteArray): ByteArray

Encrypts plaintext using the S/MIME engine.

symmetricDecrypt

fun symmetricDecrypt(ciphertext: ByteArray, password: CharArray): ByteArray

Password-based (symmetric) decryption of ciphertext.

symmetricEncrypt

fun symmetricEncrypt(plaintext: ByteArray, password: CharArray): ByteArray

Password-based (symmetric) encryption of plaintext.

verify

fun verify(signedData: ByteArray, publicArmored: List<ByteArray>, message: ByteArray? = null, binaryDocument: Boolean = false): VerifyResult

Verifies a signature against candidate public keys.