1 files changed, 19 insertions, 0 deletions
diff --git a/crypto/src/tls/TlsCredentialedDecryptor.cs b/crypto/src/tls/TlsCredentialedDecryptor.cs
new file mode 100644
index 000000000..5fa021d41
--- /dev/null
+++ b/crypto/src/tls/TlsCredentialedDecryptor.cs
@@ -0,0 +1,19 @@
+using System;
+using System.IO;
+
+using Org.BouncyCastle.Tls.Crypto;
+
+namespace Org.BouncyCastle.Tls
+{
+    /// <summary>Base interface for a class that decrypts TLS secrets.</summary>
+    public interface TlsCredentialedDecryptor
+        : TlsCredentials
+    {
+        /// <summary>Decrypt the passed in cipher text using the parameters available.</summary>
+        /// <param name="cryptoParams">the parameters to use for the decryption.</param>
+        /// <param name="ciphertext">the cipher text containing the secret.</param>
+        /// <returns>a TLS secret.</returns>
+        /// <exception cref="IOException">on a parsing or decryption error.</exception>
+        TlsSecret Decrypt(TlsCryptoParameters cryptoParams, byte[] ciphertext);
+    }
+}