001/*
002 * jPOS Project [http://jpos.org]
003 * Copyright (C) 2000-2026 jPOS Software SRL
004 *
005 * This program is free software: you can redistribute it and/or modify
006 * it under the terms of the GNU Affero General Public License as
007 * published by the Free Software Foundation, either version 3 of the
008 * License, or (at your option) any later version.
009 *
010 * This program is distributed in the hope that it will be useful,
011 * but WITHOUT ANY WARRANTY; without even the implied warranty of
012 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
013 * GNU Affero General Public License for more details.
014 *
015 * You should have received a copy of the GNU Affero General Public License
016 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
017 */
018
019package org.jpos.q2.cli.ssm.actions;
020
021import org.jpos.iso.ISOUtil;
022import org.jpos.q2.CLIContext;
023import org.jpos.q2.cli.ssm.SsmActionBase;
024import org.jpos.security.SMException;
025import org.jpos.security.SecureDESKey;
026import org.jpos.security.jceadapter.JCESecurityModule;
027
028/**
029 * Import a key from encryption under a KEK to under the LMK.
030 *
031 * @author Alwyn Schoeman - alwyn.schoeman@gmail.com
032 */
033public class IK extends SsmActionBase {
034
035    @Override
036    protected boolean checkUsage(CLIContext cli, String[] strings) {
037        if (strings.length < 8) {
038            cli.println("Usage: IK keyLength keyType KEYunderKEK kekLength kekType KEKunderLMK KEKcheckValue");
039            return false;
040        }
041        return true;
042    }
043
044    @Override
045    protected void doCommand(CLIContext cli, JCESecurityModule sm, short keyLength, String[] strings) throws SMException {
046        SecureDESKey KEKunderLMK = new SecureDESKey((short) Integer.parseInt(strings[4]),
047                strings[5].toUpperCase(), strings[6], strings[7]);
048        sm.importKey(keyLength, strings[2].toUpperCase(),
049                ISOUtil.hex2byte(strings[3]), KEKunderLMK, true);
050    }
051}