Package org.signal.libsignal.protocol

Class SessionCipher

java.lang.Object

org.signal.libsignal.protocol.SessionCipher

public class SessionCipher
extends java.lang.Object

The main entry point for Signal Protocol encrypt/decrypt operations. Once a session has been established with SessionBuilder, this class can be used for all encrypt/decrypt operations within that session. This class is not thread-safe.

Constructor Summary

Constructors

Constructor	Description
SessionCipher(SessionStore sessionStore, PreKeyStore preKeyStore, SignedPreKeyStore signedPreKeyStore, IdentityKeyStore identityKeyStore, SignalProtocolAddress remoteAddress)	Construct a SessionCipher for encrypt/decrypt operations on a session.
SessionCipher(SignalProtocolStore store, SignalProtocolAddress remoteAddress)

Method Summary

Modifier and Type	Method	Description
byte[]	decrypt(PreKeySignalMessage ciphertext)	Decrypt a message.
byte[]	decrypt(SignalMessage ciphertext)	Decrypt a message.
CiphertextMessage	encrypt(byte[] paddedMessage)	Encrypt a message.
int	getRemoteRegistrationId()
int	getSessionVersion()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SessionCipher

public SessionCipher(SessionStore sessionStore,
                     PreKeyStore preKeyStore,
                     SignedPreKeyStore signedPreKeyStore,
                     IdentityKeyStore identityKeyStore,
                     SignalProtocolAddress remoteAddress)

Construct a SessionCipher for encrypt/decrypt operations on a session. In order to use SessionCipher, a session must have already been created and stored using SessionBuilder.

Parameters:

sessionStore - The SessionStore that contains a session for this recipient.

remoteAddress - The remote address that messages will be encrypted to or decrypted from.

SessionCipher

public SessionCipher(SignalProtocolStore store,
                     SignalProtocolAddress remoteAddress)

Method Detail

encrypt

public CiphertextMessage encrypt(byte[] paddedMessage)
                          throws UntrustedIdentityException

Encrypt a message.

Parameters:

paddedMessage - The plaintext message bytes, optionally padded to a constant multiple.

Returns:

A ciphertext message encrypted to the recipient+device tuple.

Throws:

UntrustedIdentityException

decrypt

public byte[] decrypt(PreKeySignalMessage ciphertext)
               throws DuplicateMessageException,
                      InvalidMessageException,
                      InvalidKeyIdException,
                      InvalidKeyException,
                      UntrustedIdentityException

Decrypt a message.

Parameters:

ciphertext - The PreKeySignalMessage to decrypt.

Returns:

The plaintext.

Throws:

InvalidMessageException - if the input is not valid ciphertext.

DuplicateMessageException - if the input is a message that has already been received.

InvalidKeyIdException - when there is no local PreKeyRecord that corresponds to the PreKey ID in the message.

InvalidKeyException - when the message is formatted incorrectly.

UntrustedIdentityException - when the IdentityKey of the sender is untrusted.

decrypt

public byte[] decrypt(SignalMessage ciphertext)
               throws InvalidMessageException,
                      InvalidVersionException,
                      DuplicateMessageException,
                      NoSessionException,
                      UntrustedIdentityException

Decrypt a message.

Parameters:

ciphertext - The SignalMessage to decrypt.

Returns:

The plaintext.

Throws:

InvalidMessageException - if the input is not valid ciphertext.

InvalidVersionException - if the message version does not match the session version.

DuplicateMessageException - if the input is a message that has already been received.

NoSessionException - if there is no established session for this contact.

UntrustedIdentityException

getRemoteRegistrationId

public int getRemoteRegistrationId()

getSessionVersion

public int getSessionVersion()