Package org.keycloak.crypto

Class CryptoUtils

java.lang.Object

org.keycloak.crypto.CryptoUtils

public class CryptoUtils
extends Object

Utility class for common cryptographic operations and algorithm discovery.

Author:

Forkim Akwichek

Constructor Summary

Constructors

Constructor	Description
CryptoUtils()

Method Summary

Modifier and Type	Method	Description
static org.keycloak.crypto.SignatureProvider	getSignatureProvider(org.keycloak.models.KeycloakSession session, String algorithm)	Looks up a SignatureProvider for the given algorithm, throwing if none is registered.
static List<String>	getSupportedAsymmetricEncryptionAlgorithms(org.keycloak.models.KeycloakSession session)	Returns the supported asymmetric encryption algorithms.
static List<String>	getSupportedAsymmetricSignatureAlgorithms(org.keycloak.models.KeycloakSession session)	Returns the supported asymmetric signature algorithms.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

CryptoUtils

public CryptoUtils()

Method Details

getSignatureProvider

public static org.keycloak.crypto.SignatureProvider getSignatureProvider(org.keycloak.models.KeycloakSession session,
 String algorithm)
                                                                  throws org.keycloak.common.VerificationException

Looks up a SignatureProvider for the given algorithm, throwing if none is registered.

Throws:

org.keycloak.common.VerificationException

getSupportedAsymmetricSignatureAlgorithms

public static List<String> getSupportedAsymmetricSignatureAlgorithms(org.keycloak.models.KeycloakSession session)

Returns the supported asymmetric signature algorithms. This method discovers all available SignatureProvider implementations and filters for those that support asymmetric algorithms (RSA, EC, EdDSA, etc.).

Parameters:

session - The Keycloak session

Returns:

List of asymmetric signature algorithm names

getSupportedAsymmetricEncryptionAlgorithms

public static List<String> getSupportedAsymmetricEncryptionAlgorithms(org.keycloak.models.KeycloakSession session)

Returns the supported asymmetric encryption algorithms. This method discovers all available Keys and filters for those that use asymmetric algorithms (RSA, EC, EdDSA, etc.).

Parameters:

session - The Keycloak session

Returns:

List of asymmetric encryption algorithm names