MessageDigestCalculatingInputStream.java
/*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.apache.commons.io.input;
import java.io.IOException;
import java.io.InputStream;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.security.Provider;
import java.util.Arrays;
import java.util.Objects;
/**
* Calculates a checksum using a {@link MessageDigest}, for example, a SHA-512 sum.
* <p>
* To build an instance, use {@link Builder}.
* </p>
* <p>
* See the MessageDigest section in the <a href= "https://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#MessageDigest"> Java
* Cryptography Architecture Standard Algorithm Name Documentation</a> for information about standard algorithm names.
* </p>
* <p>
* <em>Note</em>: Neither {@link ObservableInputStream}, nor {@link MessageDigest}, are thread safe, so is {@link MessageDigestCalculatingInputStream}.
* </p>
*
* @see Builder
* @deprecated Use {@link MessageDigestInputStream}.
*/
@Deprecated
public class MessageDigestCalculatingInputStream extends ObservableInputStream {
// @formatter:off
/**
* Builds a new {@link MessageDigestCalculatingInputStream}.
*
* <p>
* For example:
* </p>
* <pre>{@code
* MessageDigestCalculatingInputStream s = MessageDigestCalculatingInputStream.builder()
* .setPath(path)
* .setMessageDigest("SHA-512")
* .get();}
* </pre>
* <p>
* <em>The MD5 cryptographic algorithm is weak and should not be used.</em>
* </p>
*
* @see #get()
* @since 2.12.0
*/
// @formatter:on
public static class Builder extends AbstractBuilder<Builder> {
private MessageDigest messageDigest;
/**
* Constructs a new {@link Builder}.
* <p>
* The default for compatibility is the MD5 cryptographic algorithm which is weak and should not be used.
* </p>
*/
public Builder() {
try {
this.messageDigest = getDefaultMessageDigest();
} catch (final NoSuchAlgorithmException e) {
// Should not happen.
throw new IllegalStateException(e);
}
}
/**
* Builds a new {@link MessageDigestCalculatingInputStream}.
* <p>
* You must set input that supports {@link #getInputStream()}, otherwise, this method throws an exception.
* </p>
* <p>
* This builder use the following aspects:
* </p>
* <ul>
* <li>{@link #getPath()}</li>
* <li>{@link MessageDigest}</li>
* </ul>
*
* @return a new instance.
* @throws NullPointerException if messageDigest is null.
* @throws IllegalStateException if the {@code origin} is {@code null}.
* @throws UnsupportedOperationException if the origin cannot be converted to an {@link InputStream}.
* @throws IOException if an I/O error occurs.
* @see #getInputStream()
*/
@Override
public MessageDigestCalculatingInputStream get() throws IOException {
setObservers(Arrays.asList(new MessageDigestMaintainingObserver(messageDigest)));
return new MessageDigestCalculatingInputStream(this);
}
/**
* Sets the message digest.
* <p>
* <em>The MD5 cryptographic algorithm is weak and should not be used.</em>
* </p>
*
* @param messageDigest the message digest.
*/
public void setMessageDigest(final MessageDigest messageDigest) {
this.messageDigest = messageDigest;
}
/**
* Sets the name of the name of the message digest algorithm.
* <p>
* <em>The MD5 cryptographic algorithm is weak and should not be used.</em>
* </p>
*
* @param algorithm the name of the algorithm. See the MessageDigest section in the
* <a href= "https://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#MessageDigest"> Java Cryptography
* Architecture Standard Algorithm Name Documentation</a> for information about standard algorithm names.
* @throws NoSuchAlgorithmException if no Provider supports a MessageDigestSpi implementation for the specified algorithm.
*/
public void setMessageDigest(final String algorithm) throws NoSuchAlgorithmException {
this.messageDigest = MessageDigest.getInstance(algorithm);
}
}
/**
* Maintains the message digest.
*/
public static class MessageDigestMaintainingObserver extends Observer {
private final MessageDigest messageDigest;
/**
* Constructs an MessageDigestMaintainingObserver for the given MessageDigest.
*
* @param messageDigest the message digest to use
* @throws NullPointerException if messageDigest is null.
*/
public MessageDigestMaintainingObserver(final MessageDigest messageDigest) {
this.messageDigest = Objects.requireNonNull(messageDigest, "messageDigest");
}
@Override
public void data(final byte[] input, final int offset, final int length) throws IOException {
messageDigest.update(input, offset, length);
}
@Override
public void data(final int input) throws IOException {
messageDigest.update((byte) input);
}
}
/**
* The default message digest algorithm {@code "MD5"}.
* <p>
* The MD5 cryptographic algorithm is weak and should not be used.
* </p>
*/
private static final String DEFAULT_ALGORITHM = "MD5";
/**
* Constructs a new {@link Builder}.
*
* @return a new {@link Builder}.
* @since 2.12.0
*/
public static Builder builder() {
return new Builder();
}
/**
* Gets a MessageDigest object that implements the default digest algorithm {@code "MD5"}.
* <p>
* The MD5 cryptographic algorithm is weak and should not be used.
* </p>
*
* @return a Message Digest object that implements the default algorithm.
* @throws NoSuchAlgorithmException if no Provider supports a MessageDigestSpi implementation.
* @see Provider
*/
static MessageDigest getDefaultMessageDigest() throws NoSuchAlgorithmException {
return MessageDigest.getInstance(DEFAULT_ALGORITHM);
}
private final MessageDigest messageDigest;
private MessageDigestCalculatingInputStream(final Builder builder) throws IOException {
super(builder);
this.messageDigest = builder.messageDigest;
}
/**
* Constructs a new instance, which calculates a signature on the given stream, using a {@link MessageDigest} with the "MD5" algorithm.
* <p>
* The MD5 algorithm is weak and should not be used.
* </p>
*
* @param inputStream the stream to calculate the message digest for
* @throws NoSuchAlgorithmException if no Provider supports a MessageDigestSpi implementation for the specified algorithm.
* @deprecated Use {@link #builder()}, {@link Builder}, and {@link Builder#get()}.
*/
@Deprecated
public MessageDigestCalculatingInputStream(final InputStream inputStream) throws NoSuchAlgorithmException {
this(inputStream, getDefaultMessageDigest());
}
/**
* Constructs a new instance, which calculates a signature on the given stream, using the given {@link MessageDigest}.
* <p>
* The MD5 cryptographic algorithm is weak and should not be used.
* </p>
*
* @param inputStream the stream to calculate the message digest for
* @param messageDigest the message digest to use
* @throws NullPointerException if messageDigest is null.
* @deprecated Use {@link #builder()}, {@link Builder}, and {@link Builder#get()}.
*/
@Deprecated
public MessageDigestCalculatingInputStream(final InputStream inputStream, final MessageDigest messageDigest) {
super(inputStream, new MessageDigestMaintainingObserver(messageDigest));
this.messageDigest = messageDigest;
}
/**
* Constructs a new instance, which calculates a signature on the given stream, using a {@link MessageDigest} with the given algorithm.
* <p>
* The MD5 cryptographic algorithm is weak and should not be used.
* </p>
*
* @param inputStream the stream to calculate the message digest for
* @param algorithm the name of the algorithm requested. See the MessageDigest section in the
* <a href= "https://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#MessageDigest"> Java Cryptography
* Architecture Standard Algorithm Name Documentation</a> for information about standard algorithm names.
* @throws NoSuchAlgorithmException if no Provider supports a MessageDigestSpi implementation for the specified algorithm.
* @deprecated Use {@link #builder()}, {@link Builder}, and {@link Builder#get()}.
*/
@Deprecated
public MessageDigestCalculatingInputStream(final InputStream inputStream, final String algorithm) throws NoSuchAlgorithmException {
this(inputStream, MessageDigest.getInstance(algorithm));
}
/**
* Gets the {@link MessageDigest}, which is being used for generating the checksum.
* <p>
* <em>Note</em>: The checksum will only reflect the data, which has been read so far. This is probably not, what you expect. Make sure, that the complete
* data has been read, if that is what you want. The easiest way to do so is by invoking {@link #consume()}.
* </p>
*
* @return the message digest used
*/
public MessageDigest getMessageDigest() {
return messageDigest;
}
}