std.lib.security
->key
added in 3.0
(->key k)idempotent function converting input into a key
(-> {:type “AES”, :mode :secret, :format “RAW”, :encoded “euHlt5sHWhRpbKZHjrwrrQ==”} (->key) (->key)) => java.security.Key
cipher
added in 3.0
(cipher)(cipher name)(cipher name provider)lists or returns available Cipher implementations
(cipher) => (“AES” “AESWrap” “AESWrap_128” …)
(cipher “AES”) => javax.crypto.Cipher
decrypt
added in 3.0
(decrypt bytes key)(decrypt bytes key {:keys [algorithm params random iv], :as opts})decrypts a byte array using a key
(-> (decrypt (encode/from-hex “30491ab4427e45909f3d2f5d600b0f93”) {:type “AES”, :mode :secret, :format “RAW”, :encoded “euHlt5sHWhRpbKZHjrwrrQ==”}) (String.)) => “hello world”
digest
added in 3.0
(digest)(digest bytes algo)(digest bytes algo {:keys [provider], :as opts})creates a digest out of a byte array
(digest) => (contains “MD2” “MD5” “SHA-224” “SHA-256” “SHA-384” “SHA-512” :in-any-order :gaps-ok)
(-> (digest (.getBytes “hello world”) “SHA”) (encode/to-hex)) => “2aae6c35c94fcfb415dbe95f408b9ce91ee846ed”
encrypt
added in 3.0
(encrypt bytes key)(encrypt bytes key {:keys [algorithm params random iv], :as opts})encrypts a byte array using a key
(-> (encrypt (.getBytes “hello world”) {:type “AES”, :mode :secret, :format “RAW”, :encoded “euHlt5sHWhRpbKZHjrwrrQ==”}) (encode/to-hex)) => “30491ab4427e45909f3d2f5d600b0f93”
generate-key
added in 3.0
(generate-key)(generate-key algo {:keys [provider], :as opts})generates a key according to algorithm
(generate-key) => (“AES” “ARCFOUR” “Blowfish” “DES” “DESede” “HmacMD5” “HmacSHA1” “HmacSHA224” “HmacSHA256” “HmacSHA384” “HmacSHA512” …)
(generate-key “AES” {:length 128}) ;;=> #key {:type “AES”, ;; :mode :secret, ;; :format “RAW”, ;; :encoded “AQgv8l+vJNfnEWuhHs55wg==”}
(generate-key “HmacSHA224” {:length 40}) ;;=> #key {:type “HmacSHA224”, ;; :mode :secret, ;; :format “RAW”, ;; :encoded “0qQkmic=”}
generate-key-pair
added in 3.0
(generate-key-pair)(generate-key-pair type {:keys [provider], :as opts})creates a public and private key pair
(generate-key-pair) => (“DSA” “DiffieHellman” “EC” “RSA”)
(generate-key-pair “RSA” {:length 512}) ;;=> [#key {:type “RSA”, ;; :mode :public, ;; :format “X.509”, ;; :encoded “….” } ;; #key {:type “RSA”, ;; :mode :private, ;; :format “PKCS#8”, ;; :encoded “…”}]
hmac
added in 3.0
(hmac)(hmac bytes key)(hmac bytes key {:keys [algorithm provider], :as opts})creates a key encrypted digest
(-> (hmac (.getBytes “hello world”) {:type “HmacSHA1”, :mode :secret, :format “RAW”, :encoded “wQ0lyydDSEFRKviwv/2BoWVQDpj8hbUiUXytuWj7Yv8=”}) (encode/to-hex)) => “a6f9e08fad62f63a35c6fd320f4249c9ad3079dc”
key->map
added in 3.0
(key->map k)returns a map representation of a key
(key->map (generate-key “AES” {:length 128})) => (contains {:type “AES”, :mode :secret, :format “RAW”, :encoded string?})
key-generator
added in 3.0
(key-generator)(key-generator name)(key-generator name provider)lists or returns available KeyGenerator implementations
(key-generator) => (“AES” “ARCFOUR” “Blowfish” …)
(key-generator “Blowfish”) => javax.crypto.KeyGenerator
key-pair-generator
added in 3.0
(key-pair-generator)(key-pair-generator name)(key-pair-generator name provider)lists or returns available KeyPairGenerator implementations
(key-pair-generator) => (“DSA” “DiffieHellman” “EC” “RSA”)
(key-pair-generator “RSA”) => java.security.KeyPairGenerator
key-store
added in 3.0
(key-store)(key-store name)(key-store name provider)lists or returns available KeyStore implementations
(key-store) => (“CaseExactJKS” “DKS” “JCEKS” “JKS” “KeychainStore” “PKCS12”)
(key-store “JKS”) => java.security.KeyStore
list-providers
added in 3.0
(list-providers)list all security providers
(list-providers) => “Apple” “SUN” “SunEC” “SunJCE” “SunJGSS” “SunJSSE” “SunPCSC” “SunRsaSign” “SunSASL” “XMLDSig”
list-services
added in 3.0
(list-services)(list-services type)(list-services type provider)lists all services that are available
(list-services) => (“AlgorithmParameterGenerator” “AlgorithmParameters” …)
(list-services “Cipher”) => (“AES” “AESWrap” “AESWrap_128” …)
(list-services “KeyGenerator” “SunJCE”) => (“AES” “ARCFOUR” “Blowfish” “DES” “DESede” …)
mac
added in 3.0
(mac)(mac name)(mac name provider)lists or returns available Mac implementations
(mac) => (“HmacMD5” “HmacPBESHA1” “HmacSHA1” …)
(mac “HmacMD5”) => javax.crypto.Mac
md5
added in 4.0
(md5 body)function for md5 hash
(md5 “123”) => “202cb962ac59075b964b07152d234b70”
message-digest
added in 3.0
(message-digest)(message-digest name)(message-digest name provider)lists or returns available MessageDigest implementations
(message-digest) => (“MD2” “MD5” “SHA” “SHA-224” “SHA-256” “SHA-384” “SHA-512”)
(message-digest “MD2”) => java.security.MessageDigest$Delegate
sha1
added in 3.0
(sha1 body)function for sha1 hash
(sha1 “123”) => “40bd001563085fc35165329ea1ff5c5ecbdbbeef”
sign
added in 3.0
(sign)(sign bytes key {:keys [algorithm provider], :as opts})creates a signature using a private key
(sign) ;; => (contains “MD2withRSA” “MD5andSHA1withRSA” “MD5withRSA” ;; “NONEwithDSA” “NONEwithECDSA” “SHA1withDSA” ;; “SHA1withECDSA” “SHA1withRSA” “SHA224withDSA” ;; “SHA224withECDSA” “SHA224withRSA” “SHA256withDSA” ;; “SHA256withECDSA” “SHA256withRSA” “SHA384withECDSA” ;; “SHA384withRSA” “SHA512withECDSA” “SHA512withRSA” ;; :in-any-order)
(-> (sign (.getBytes “hello world”) {:type “RSA”, :mode :private, :format “PKCS#8”, :encoded (apply str [“MIIBVQIBADANBgkqhkiG9w0BAQEFAASCAT8wggE7AgEAAkEAmrOdqA5ZGMJ6” “55meZCnj44B65ZUXnAscXu7GJcNQO91Z7B9NmWX/P59BBUC/yJ6s/ugEffhP” “wCYJt013GkV6tQIDAQABAkBJxzV+C3G0XDOvNlUSoeO8AO8bhJIg6i+amrdH” “FTGzimwp/eyOGZlXpHcaK57kSBK4npXgfWCFFLNuvAtCrQ91AiEA0McEFHMS” “MTVU/78kDYSsJ+lty6izxkONp/XZ4+T6BDsCIQC9sWmBYAFDfiHvLnv2NT7O” “08LR+UnNuDalduukc649zwIhAKXHEadHRA/M4GR/Gxqc2bKLeUJ4/98TrvzK” “jCyYmioXAiAiOg2wY1M3C14yGvARB6ByjzD61AEmFlP93Qw9mwXYbwIhALR/” “Uv4DvJJbR7mpRXcRCo9Me1wawdCndM5ZyF7Hvpu4”])} {:algorithm “MD5withRSA”}) (encode/to-hex)) => (apply str “5ba863c3e24c73f09d50749698ae82406490c” “edc4566810461480e37da661754b7bf33cc6b” “bf0f48646304c8994202d2fd7094e7420049f” “eaa512c8cd72d7000”)
signature
added in 3.0
(signature)(signature name)(signature name provider)lists or returns available Signature implementations
(signature) => (“MD2withRSA” “MD5andSHA1withRSA” “MD5withRSA” …)
(signature “MD2withRSA”) => java.security.Signature$Delegate
verify
added in 3.0
(verify)(verify bytes signature key {:keys [algorithm provider], :as opts})verifies a signature using a public key
(verify (.getBytes “hello world”) (->> [“5ba863c3e24c73f09d50749698ae82406490c” “edc4566810461480e37da661754b7bf33cc6b” “bf0f48646304c8994202d2fd7094e7420049f” “eaa512c8cd72d7000”] (apply str) (encode/from-hex)) {:type “RSA”, :mode :public, :format “X.509”, :encoded (apply str [“MFwwDQYJKoZIhvcNAQEBBQADSwAwSA” “JBAJqznagOWRjCeueZnmQp4+OAeuWV” “F5wLHF7uxiXDUDvdWewfTZll/z+fQQ” “VAv8ierP7oBH34T8AmCbdNdxpFerUC” “AwEAAQ==”])} {:algorithm “MD5withRSA”}) => true