import com.dyadicsec.advapi.SDEKey;

import com.dyadicsec.advapi.SDESessionKey;

import com.unbound.provider.UBCryptoProvider;

import java.io.IOException;

import java.security.*;

import java.security.cert.CertificateException;

import java.util.UUID;

/**

*

* This sample contains 2 basic SDE operations :

* + string order preserving encryption.

* + credit card type preserving encryption.

*

*/

public class Main {

public static void main(String[] args) throws NoSuchProviderException, KeyStoreException, CertificateException, NoSuchAlgorithmException, IOException {

if (args.length < 2) {

System.out.println("Invalid args, should be : <partition> <key_name> [user] [password]");

System.exit(1);

}

String partition = args[0];

String keyName = args[1];

String user = "user"; //optional. default is "user"

if (args.length > 2) user = args[2];

String pwd = null; //optional. default is blank

if (args.length > 3) pwd = args[3];

System.out.println(String.format("Partition : %s", partition));

System.out.println(String.format("Key Name : %s", keyName));

System.out.println(String.format("User : %s", user));

Provider provider = new UBCryptoProvider();

Security.addProvider(provider);

KeyStore keyStore = KeyStore.getInstance("PKCS11", "UNBOUND");

String auth = String.format("{\"username\":\"%s\", \"password\":\"%s\"}", user, pwd);

keyStore.load(null, auth.toCharArray());

// find key by name and partition

SDEKey sdeKey = SDEKey.findKey(partition, keyName);

if (sdeKey == null) {

System.out.println(String.format("Key not found, You can create it using 'ucl generate -t PRF --name %s -p %s'",

keyName

, partition));

System.exit(1);

} else {

System.out.println("Key successfully loaded");

}

encryptOrderPreserving(sdeKey);

encryptTypePreserving(sdeKey);

}

/**

* generate SDE session key

*

* @param sdeKey

* @param purpose

* @return

*/

private static SDESessionKey generateSessionKey(SDEKey sdeKey, int purpose) {

String tweak = UUID.randomUUID().toString();

return sdeKey.generateSessionKey(purpose, tweak);

}

/**

* encrypt string order preserving

*

* @param sdeKey

*/

private static void encryptOrderPreserving(SDEKey sdeKey) {

System.out.println("Encrypt String Order Preserving");

SDESessionKey sdeSessionKey = generateSessionKey(sdeKey, SDEKey.PURPOSE_OP_ENC);

String str1 = UUID.randomUUID().toString();

String str2 = UUID.randomUUID().toString();

String encStr1 = sdeSessionKey.encryptOrderPreserving(str1, 36);

String encStr2 = sdeSessionKey.encryptOrderPreserving(str2, 36);

String decStr1 = sdeSessionKey.decryptOrderPreserving(encStr1);

String decStr2 = sdeSessionKey.decryptOrderPreserving(encStr2);

System.out.println(String.format(" Validating order : %s",

str1.compareTo(str2) * encStr1.compareTo(encStr2) >= 0 ? "OK" : "FAILED"));

System.out.println(String.format(" Validating correctness : %s",

str1.equals(decStr1) && str2.compareTo(decStr2) >= 0 ? "OK" : "FAILED"));

}

/**

* encrypt credit card type preserving

*

* @param sdeKey

*/

private static void encryptTypePreserving(SDEKey sdeKey) {

System.out.println("Encrypt Credit Card Type Preserving");

SDESessionKey sdeSessionKey = generateSessionKey(sdeKey, SDEKey.PURPOSE_CREDIT_CARD_ENC);

String creditCard = "378282246310005";

String encCreditCard = sdeSessionKey.encryptCreditCard(creditCard);

String decCreditCard = sdeSessionKey.decryptCreditCard(encCreditCard);

System.out.println(String.format(" Original Credit Card : %s", creditCard));

System.out.println(String.format(" Encrypted Credit Card : %s", encCreditCard));

System.out.println(String.format(" Validating correctness : %s",

creditCard.equals(decCreditCard) ? "OK" : "FAILED"));

}

}