jDoc

[nikiroo-utils.git] / src / be / nikiroo / utils / CryptUtils.java

diff --git a/src/be/nikiroo/utils/CryptUtils.java b/src/be/nikiroo/utils/CryptUtils.java
index ba9e7002adacabefa1bf9397934e9637bf73ffe8..55737c30d5d28a983a9141c001d9c29cad657ca0 100644 (file)
--- a/src/be/nikiroo/utils/CryptUtils.java
+++ b/src/be/nikiroo/utils/CryptUtils.java
@@ -11,7 +11,6 @@ import javax.crypto.Cipher;
 import javax.crypto.CipherInputStream;
 import javax.crypto.CipherOutputStream;
 import javax.crypto.IllegalBlockSizeException;
-import javax.crypto.SecretKey;
 import javax.crypto.spec.IvParameterSpec;
 import javax.crypto.spec.SecretKeySpec;
 import javax.net.ssl.SSLException;
@@ -22,17 +21,15 @@ import be.nikiroo.utils.streams.Base64OutputStream;
 /**
  * Small utility class to do AES encryption/decryption.
  * <p>
- * For the moment, it is multi-thread compatible, but beware:
+ * It is multi-thread compatible, but beware:
  * <ul>
  * <li>The encrypt/decrypt calls are serialized</li>
- * <li>The streams are independent and thus parallel</li>
+ * <li>The streams are independent (and thus parallel)</li>
  * </ul>
  * <p>
- * Do not assume it is actually secure, it is actually not.
- * <p>
- * It just here to offer a more-or-less protected exchange of data because
- * anonymous and self-signed certificates backed SSL is against Google wishes
- * (so, don't even try, they own Internet).
+ * Do not assume it is secure; it just here to offer a more-or-less protected
+ * exchange of data because anonymous and self-signed certificates backed SSL is
+ * against Google wishes, and I need Android support.
  * 
  * @author niki
  */
@@ -41,7 +38,7 @@ public class CryptUtils {
 
        private Cipher ecipher;
        private Cipher dcipher;
-       private SecretKey key;
+       private byte[] bytes32;
 
        /**
         * Small and lazy-easy way to initialize a 128 bits key with
@@ -215,9 +212,9 @@ public class CryptUtils {
                                                        + " bytes");
                }
 
-               key = new SecretKeySpec(bytes32, "AES");
-               ecipher = newCipher(Cipher.ENCRYPT_MODE);
-               dcipher = newCipher(Cipher.DECRYPT_MODE);
+               this.bytes32 = bytes32;
+               this.ecipher = newCipher(Cipher.ENCRYPT_MODE);
+               this.dcipher = newCipher(Cipher.DECRYPT_MODE);
        }
 
        /**
@@ -232,10 +229,14 @@ public class CryptUtils {
         */
        private Cipher newCipher(int mode) {
                try {
-                       byte[] iv = { 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 };
+                       // bytes32 = 32 bytes, 32 > 16
+                       byte[] iv = new byte[16];
+                       for (int i = 0; i < iv.length; i++) {
+                               iv[i] = bytes32[i];
+                       }
                        IvParameterSpec ivspec = new IvParameterSpec(iv);
                        Cipher cipher = Cipher.getInstance(AES_NAME);
-                       cipher.init(mode, key, ivspec);
+                       cipher.init(mode, new SecretKeySpec(bytes32, "AES"), ivspec);
                        return cipher;
                } catch (Exception e) {
                        e.printStackTrace();