ElGamalAESEngine (Javadocs [I2P+ 2.13.0+]

java.lang.Object
- net.i2p.router.crypto.ElGamalAESEngine

```
public final class ElGamalAESEngine
extends Object
```
Handles the actual ElGamal+AES encryption and decryption scenarios using the supplied keys and data. No, this does not extend AESEngine or CryptixAESEngine.

Field Summary
Fields
Modifier and Type Field and Description
static int MAX_TAGS_RECEIVED
enforced since release 0.6

Fields
Modifier and Type	Field and Description
`static int`	`MAX_TAGS_RECEIVED` enforced since release 0.6

Constructor Summary
Constructors
Constructor and Description
ElGamalAESEngine(I2PAppContext ctx)
Creates engine with given context and initializes crypto frequency stats.

Constructors
Constructor and Description
`ElGamalAESEngine(I2PAppContext ctx)` Creates engine with given context and initializes crypto frequency stats.

Method Summary

All Methods Instance Methods Concrete Methods
Modifier and Type	Method and Description
`byte[]`	`decrypt(byte[] data, PrivateKey targetPrivateKey, SessionKeyManager keyManager)` Decrypt the message using the given private key and using tags from the specified key manager.
`(package private) byte[]`	`decryptAESBlock(byte[] encrypted, int offset, int encryptedLen, SessionKey key, byte[] iv, byte[] sentTag, Set<SessionTag> foundTags, SessionKey foundKey)` Decrypt the AES data with the session key and IV.
`byte[]`	`decryptFast(byte[] data, PrivateKey targetPrivateKey, SessionKeyManager keyManager)` Tags only.
`byte[]`	`decryptSlow(byte[] data, PrivateKey targetPrivateKey, SessionKeyManager keyManager)` Full ElG only.
`byte[]`	`encrypt(byte[] data, PublicKey target, SessionKey key, Set<SessionTag> tagsForDelivery, SessionTag currentTag, long paddedSize)` Encrypt the data to the target using the given key and deliver the specified tags No new session key This is the one called from GarlicMessageBuilder and is the primary entry point.
`byte[]`	`encrypt(byte[] data, PublicKey target, SessionKey key, Set<SessionTag> tagsForDelivery, SessionTag currentTag, SessionKey newKey, long paddedSize)` Encrypt the unencrypted data to the target.
`(package private) byte[]`	`encryptAESBlock(byte[] data, SessionKey key, byte[] iv, Set<SessionTag> tagsForDelivery, SessionKey newKey, long paddedSize)` For both scenarios, this method encrypts the AES area using the given key, iv and making sure the resulting data is at least as long as the paddedSize and also mod 16 bytes.

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

- Field Detail
  - MAX_TAGS_RECEIVED
```
public static final int MAX_TAGS_RECEIVED
```
    enforced since release 0.6
    See Also:
    Constant Field Values
- Constructor Detail
  - ElGamalAESEngine
```
public ElGamalAESEngine(I2PAppContext ctx)
```
    Creates engine with given context and initializes crypto frequency stats.
- Method Detail
  - decrypt
```
public byte[] decrypt(byte[] data,
                      PrivateKey targetPrivateKey,
                      SessionKeyManager keyManager)
               throws DataFormatException
```
    Decrypt the message using the given private key and using tags from the specified key manager. This works according to the ElGamal+AES algorithm in the data structure spec. Warning - use the correct SessionKeyManager. Clients should instantiate their own. Clients using I2PAppContext.sessionKeyManager() may be correlated with the router, unless you are careful to use different keys.
    Returns:
    decrypted data or null on failure
    Throws:
    DataFormatException
  - decryptAESBlock
```
byte[] decryptAESBlock(byte[] encrypted,
                       int offset,
                       int encryptedLen,
                       SessionKey key,
                       byte[] iv,
                       byte[] sentTag,
                       Set<SessionTag> foundTags,
                       SessionKey foundKey)
```
    Decrypt the AES data with the session key and IV. The result should be:
```
  - 2 byte integer specifying the # of session tags
  - that many 32 byte session tags
  - 4 byte integer specifying data.length
  - SHA256 of data
  - 1 byte flag that, if == 1, is followed by a new SessionKey
  - data
  - random bytes, padding the total size to greater than paddedSize with a mod 16 = 0
 
```
    If anything doesn't match up in decryption, return null. Otherwise, return the decrypted data and update the session as necessary. If the sentTag is not null, consume it, but if it is null, record the keys, etc as part of a new session.
    Parameters:
    foundTags - set which is filled with any sessionTags found during decryption
    foundKey - out parameter. Data must be unset when called; may be filled with a new sessionKey found during decryption
    Returns:
    decrypted data or null on failure
  - decryptFast
```
public byte[] decryptFast(byte[] data,
                          PrivateKey targetPrivateKey,
                          SessionKeyManager keyManager)
                   throws DataFormatException
```
    Tags only. For MuxedEngine use only.
    Returns:
    decrypted data or null on failure
    Throws:
    DataFormatException
  - decryptSlow
```
public byte[] decryptSlow(byte[] data,
                          PrivateKey targetPrivateKey,
                          SessionKeyManager keyManager)
                   throws DataFormatException
```
    Full ElG only. For MuxedEngine use only.
    Returns:
    decrypted data or null on failure
    Throws:
    DataFormatException
  - encrypt
```
public byte[] encrypt(byte[] data,
                      PublicKey target,
                      SessionKey key,
                      Set<SessionTag> tagsForDelivery,
                      SessionTag currentTag,
                      long paddedSize)
```
    Encrypt the data to the target using the given key and deliver the specified tags No new session key This is the one called from GarlicMessageBuilder and is the primary entry point. Re: padded size: The AES block adds at least 39 bytes of overhead to the data, and that is included in the minimum size calculation. In the router, we always use garlic messages. A garlic message with a single clove and zero data is about 84 bytes, so that's 123 bytes minimum. So any paddingSize <= 128 is a no-op as every message will be at least 128 bytes (Streaming, if used, adds more overhead). Outside the router, with a client using its own message format, the minimum size is 48, so any paddingSize <= 48 is a no-op. Not included in the minimum is a 32-byte session tag for an existing session, or a 514-byte ElGamal block and several 32-byte session tags for a new session. So the returned encrypted data will be at least 32 bytes larger than paddedSize.
    Parameters:
    target - public key to which the data should be encrypted, must be ELGAMAL_2048. May be null if key and currentTag are non-null.
    key - session key to use during encryption
    tagsForDelivery - session tags to be associated with the key or null; 200 max enforced at receiver
    currentTag - sessionTag to use, or null if it should use ElG (i.e. new session)
    paddedSize - minimum size in bytes of the body after padding it (if less than the body's real size, no bytes are appended but the body is not truncated)
    Throws:
    IllegalArgumentException - on bad target EncType
  - encrypt
```
public byte[] encrypt(byte[] data,
                      PublicKey target,
                      SessionKey key,
                      Set<SessionTag> tagsForDelivery,
                      SessionTag currentTag,
                      SessionKey newKey,
                      long paddedSize)
```
    Encrypt the unencrypted data to the target. The total size returned will be no less than the paddedSize parameter, but may be more. This method uses the ElGamal+AES algorithm in the data structure spec.
    Parameters:
    target - public key to which the data should be encrypted, must be ELGAMAL_2048. May be null if key and currentTag are non-null.
    key - session key to use during encryption
    tagsForDelivery - session tags to be associated with the key (or newKey if specified), or null; 200 max enforced at receiver
    currentTag - sessionTag to use, or null if it should use ElG (i.e. new session)
    newKey - key to be delivered to the target, with which the tagsForDelivery should be associated, or null
    paddedSize - minimum size in bytes of the body after padding it (if less than the body's real size, no bytes are appended but the body is not truncated)
    Throws:
    IllegalArgumentException - on bad target EncType Unused externally, only called by below (i.e. newKey is always null)
  - encryptAESBlock
```
final byte[] encryptAESBlock(byte[] data,
                             SessionKey key,
                             byte[] iv,
                             Set<SessionTag> tagsForDelivery,
                             SessionKey newKey,
                             long paddedSize)
```
    For both scenarios, this method encrypts the AES area using the given key, iv and making sure the resulting data is at least as long as the paddedSize and also mod 16 bytes. The contents of the encrypted data is:
```
  - 2 byte integer specifying the # of session tags
  - that many 32 byte session tags
  - 4 byte integer specifying data.length
  - SHA256 of data
  - 1 byte flag that, if == 1, is followed by a new SessionKey
  - data
  - random bytes, padding the total size to greater than paddedSize with a mod 16 = 0
 
```
    Note: package private for ElGamalTest.testAES()
    Parameters:
    tagsForDelivery - session tags to be associated with the key or null; 200 max enforced at receiver

Class ElGamalAESEngine

Field Summary

Constructor Summary

Method Summary

Methods inherited from class java.lang.Object

Field Detail

MAX_TAGS_RECEIVED

Constructor Detail

ElGamalAESEngine

Method Detail

decrypt

decryptAESBlock

decryptFast

decryptSlow

encrypt

encrypt

encryptAESBlock