package org.bouncycastle.jce;

import org.bouncycastle.asn1.ASN1Encodable;
import org.bouncycastle.asn1.DERObject;
import org.bouncycastle.asn1.x509.KeyUsage;

A holding class for constructing an X509 Key Usage extension.
   id-ce-keyUsage OBJECT IDENTIFIER ::=  { id-ce 15 }
   KeyUsage ::= BIT STRING {
        digitalSignature        (0),
        nonRepudiation          (1),
        keyEncipherment         (2),
        dataEncipherment        (3),
        keyAgreement            (4),
        keyCertSign             (5),
        cRLSign                 (6),
        encipherOnly            (7),
        decipherOnly            (8) }
/** * A holding class for constructing an X509 Key Usage extension. * * <pre> * id-ce-keyUsage OBJECT IDENTIFIER ::= { id-ce 15 } * * KeyUsage ::= BIT STRING { * digitalSignature (0), * nonRepudiation (1), * keyEncipherment (2), * dataEncipherment (3), * keyAgreement (4), * keyCertSign (5), * cRLSign (6), * encipherOnly (7), * decipherOnly (8) } * </pre> */
public class X509KeyUsage extends ASN1Encodable { public static final int digitalSignature = 1 << 7; public static final int nonRepudiation = 1 << 6; public static final int keyEncipherment = 1 << 5; public static final int dataEncipherment = 1 << 4; public static final int keyAgreement = 1 << 3; public static final int keyCertSign = 1 << 2; public static final int cRLSign = 1 << 1; public static final int encipherOnly = 1 << 0; public static final int decipherOnly = 1 << 15; private int usage = 0;
Basic constructor.
Params:
  • usage – - the bitwise OR of the Key Usage flags giving the allowed uses for the key. e.g. (X509KeyUsage.keyEncipherment | X509KeyUsage.dataEncipherment)
/** * Basic constructor. * * @param usage - the bitwise OR of the Key Usage flags giving the * allowed uses for the key. * e.g. (X509KeyUsage.keyEncipherment | X509KeyUsage.dataEncipherment) */
public X509KeyUsage( int usage) { this.usage = usage; } public DERObject toASN1Object() { return new KeyUsage(usage); } }