Package co.ankatech.ankasecure.sdk.operations

Class CombinedOperations

java.lang.Object

co.ankatech.ankasecure.sdk.operations.CombinedOperations

public final class CombinedOperations
extends Object

Combined cryptographic operations facade.

Public facade for combined operations (re-encryption, re-signature, sign-then-encrypt, decrypt-then-verify, and utility operations with external keys). All methods are exposed via AuthenticatedSdk.

Since:

3.0.0

Author:

ANKATech Solutions Inc.

Constructor Summary

Constructors

Constructor	Description
CombinedOperations(InternalServiceFactory svc, co.ankatech.ankasecure.openapi.client.AnkaSecureOpenApiClient openApiClient, org.slf4j.Logger userLogger)

Method Summary

Modifier and Type	Method	Description
DecryptVerifyResult	decryptThenVerify(String jweToken)
DecryptVerifyResult	decryptThenVerifyFileCompact(Path input, Path output)
DecryptVerifyResult	decryptThenVerifyFileStream(Path input, Path output)
EncryptResult	encryptFileUtilityStream(String kty, String alg, String publicKeyB64, Path input, Path output)
ReencryptResult	reencrypt(String newKid, String jweToken)
ReencryptResult	reencryptFileCompact(String newKid, Path input, Path output)
ReencryptResult	reencryptFileStream(String newKid, String sourceKidOverride, Path input, Path output)
ResignResult	resign(String newKid, String jws)
ResignResult	resign(String newKid, String jws, JwsSerialization serialization)	Re-signs a JWS with an explicit JWS serialization selection (PRD §60).
ResignResult	resignFileCompact(String newKid, Path input, Path output)
ResignResult	resignFileCompact(String newKid, Path input, Path output, JwsSerialization serialization)	Re-signs a file with an explicit JWS serialization selection (PRD §60).
ResignResult	resignFileStream(Path oldJwsHeader, String newKid, Path input, Path output)
SignEncryptResult	signThenEncrypt(String signKid, String encryptKid, byte[] data)
SignEncryptResult	signThenEncrypt(String signKid, String encryptKid, byte[] data, JwsSerialization serialization)	Signs then encrypts with an explicit inner-JWS serialization selection (PRD §60).
SignEncryptResult	signThenEncryptFileCompact(String signKid, String encryptKid, Path input, Path output)
SignEncryptResult	signThenEncryptFileCompact(String signKid, String encryptKid, Path input, Path output, JwsSerialization serialization)	Signs a file then encrypts it with an explicit inner-JWS serialization selection (PRD §60).
SignEncryptResult	signThenEncryptFileStream(String signKid, String encryptKid, Path input, Path output)
VerifySignatureResult	verifySignatureUtilityStream(String kty, String alg, String publicKeyB64, String signatureB64, Path dataFile)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

CombinedOperations

public CombinedOperations(InternalServiceFactory svc,
 co.ankatech.ankasecure.openapi.client.AnkaSecureOpenApiClient openApiClient,
 org.slf4j.Logger userLogger)

Method Details

reencrypt

public ReencryptResult reencrypt(String newKid,
 String jweToken)
                          throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException

reencryptFileCompact

public ReencryptResult reencryptFileCompact(String newKid,
 Path input,
 Path output)
                                     throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException

reencryptFileStream

public ReencryptResult reencryptFileStream(String newKid,
 String sourceKidOverride,
 Path input,
 Path output)
                                    throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException

encryptFileUtilityStream

public EncryptResult encryptFileUtilityStream(String kty,
 String alg,
 String publicKeyB64,
 Path input,
 Path output)
                                       throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException

verifySignatureUtilityStream

public VerifySignatureResult verifySignatureUtilityStream(String kty,
 String alg,
 String publicKeyB64,
 String signatureB64,
 Path dataFile)
                                                   throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException

resign

public ResignResult resign(String newKid,
 String jws)
                    throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException

resign

public ResignResult resign(String newKid,
 String jws,
 JwsSerialization serialization)
                    throws AnkaSecureSdkException

Re-signs a JWS with an explicit JWS serialization selection (PRD §60). Ergonomic overload of resign(String, String); a null serialization defers to the server.

Parameters:

newKid - destination key identifier; must not be null

jws - the JWS to re-sign (compact or JWS-JSON); must not be null

serialization - requested serialization, or null to let the server choose

Returns:

re-signature result; never null

Throws:

AnkaSecureSdkException - on error, including HTTP 400 when COMPACT is requested but the deployment mandates a qualified timestamp

NullPointerException - if newKid or jws is null

Since:

3.0.0

resignFileCompact

public ResignResult resignFileCompact(String newKid,
 Path input,
 Path output)
                               throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException

resignFileCompact

public ResignResult resignFileCompact(String newKid,
 Path input,
 Path output,
 JwsSerialization serialization)
                               throws AnkaSecureSdkException

Re-signs a file with an explicit JWS serialization selection (PRD §60). Ergonomic overload of resignFileCompact(String, Path, Path); a null serialization defers to the server. When the server mandates a qualified timestamp, the written output is a JWS-JSON artifact carrying the JAdES sigTst.

Parameters:

newKid - destination key identifier; must not be null

input - input JWS file (compact or JWS-JSON); must not be null

output - output file; must not be null

serialization - requested serialization, or null to let the server choose

Returns:

re-signature result; never null

Throws:

AnkaSecureSdkException - on error, including HTTP 400 when COMPACT is requested but the deployment mandates a qualified timestamp

NullPointerException - if newKid, input, or output is null

Since:

3.0.0

resignFileStream

public ResignResult resignFileStream(Path oldJwsHeader,
 String newKid,
 Path input,
 Path output)
                              throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException

signThenEncrypt

public SignEncryptResult signThenEncrypt(String signKid,
 String encryptKid,
 byte[] data)
                                  throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException

signThenEncrypt

public SignEncryptResult signThenEncrypt(String signKid,
 String encryptKid,
 byte[] data,
 JwsSerialization serialization)
                                  throws AnkaSecureSdkException

Signs then encrypts with an explicit inner-JWS serialization selection (PRD §60). Ergonomic overload of signThenEncrypt(String, String, byte[]); a null serialization defers to the server. Governs only the inner JWS representation and never changes the outer JWE.

Parameters:

signKid - private key identifier for signing; must not be null

encryptKid - public key identifier for encryption; must not be null

data - plaintext bytes to sign and encrypt; must not be null

serialization - requested inner-JWS serialization, or null to defer

Returns:

combined sign-encrypt result; never null

Throws:

AnkaSecureSdkException - on error, including HTTP 400 (before any signing or encryption) when COMPACT is requested but the deployment mandates a qualified timestamp

NullPointerException - if any of signKid, encryptKid, or data is null

Since:

3.0.0

decryptThenVerify

public DecryptVerifyResult decryptThenVerify(String jweToken)
                                      throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException

signThenEncryptFileCompact

public SignEncryptResult signThenEncryptFileCompact(String signKid,
 String encryptKid,
 Path input,
 Path output)
                                             throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException

signThenEncryptFileCompact

public SignEncryptResult signThenEncryptFileCompact(String signKid,
 String encryptKid,
 Path input,
 Path output,
 JwsSerialization serialization)
                                             throws AnkaSecureSdkException

Signs a file then encrypts it with an explicit inner-JWS serialization selection (PRD §60). Ergonomic overload of signThenEncryptFileCompact(String, String, Path, Path); a null serialization defers to the server.

Parameters:

signKid - private key identifier for signing; must not be null

encryptKid - public key identifier for encryption; must not be null

input - input file; must not be null

output - output file; must not be null

serialization - requested inner-JWS serialization, or null to defer

Returns:

combined sign-encrypt result; never null

Throws:

AnkaSecureSdkException - on error, including HTTP 400 (before any signing or encryption) when COMPACT is requested but the deployment mandates a qualified timestamp

NullPointerException - if any argument is null

Since:

3.0.0

decryptThenVerifyFileCompact

public DecryptVerifyResult decryptThenVerifyFileCompact(Path input,
 Path output)
                                                 throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException

signThenEncryptFileStream

public SignEncryptResult signThenEncryptFileStream(String signKid,
 String encryptKid,
 Path input,
 Path output)
                                            throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException

decryptThenVerifyFileStream

public DecryptVerifyResult decryptThenVerifyFileStream(Path input,
 Path output)
                                                throws AnkaSecureSdkException

Throws:

AnkaSecureSdkException