/*
* Copyright (c) 2005-2009 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of the License "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description: 
* CTransientKey declaration
*
*/


/**
 @file 
 @released
 @internalComponent
*/

#ifndef TRANSIENTKEY_H
#define TRANSIENTKEY_H

#include <pbe.h>
#include "authserver_client.h"
#include "encryptedprotectionkey.h"

namespace AuthServer
{

/**
 * CTransientKey is a cryptographic key that is generated on the fly and never
 * stored on the device.  Transient keys are used to encrypt and decrypt
 * protection keys, they are generated by the AuthServer using data gathered
 * from CAuthPlugin derived classes.
 */
class CTransientKey : public CBase
	{
public:
	
	/**
	 * Creates a new transient key, passing in the plugin data from which to
	 * derive it.
	 *
	 * @param aEncryptor encryption element to use as the key. Ownership
	 * passes to this object.
	 **/
	static CTransientKey* NewL(CPBEncryptElement* aEncryptor);

	/**
	 * Creates a new transient key, passing in the plugin data from which to
	 * derive it.
	 *
	 * @param aEncryptor encryption element to use as the key. Ownership
	 * passes to this object.
	 **/
	static CTransientKey* NewLC(CPBEncryptElement* aEncryptor);

	~CTransientKey();

	/**
	 * Create an version of the provided protection key encrypted by this
	 * key. Ownership of the returned object is passed to the caller.
	 *
	 * @param aKey the protection key to encrypt.
	 *
	 * @return an protection key encrypted by this key.
	 **/
	CEncryptedProtectionKey* EncryptL(const CProtectionKey& aKey) const;

	/**
	 * Decrypts an CEncryptedProtectionKey created by this transient
	 * key. Ownership of the returned object is passed to the caller.
	 *
	 * @param aKey the encrypted protection key to decrypt.
	 *
	 * @return a protection key
	 **/
	CProtectionKey* DecryptL(const CEncryptedProtectionKey& aKey) const;

		
private:
	void ConstructL(CPBEncryptElement* aEncryptor);
	
	CPBEncryptElement* iPbeElement;
    };
}

#endif // TRANSIENTKEY_H