All Classes and Interfaces
Class
Description
Algorithm catalog operations facade.
Filter criteria for querying supported algorithms from the AnkaSecure platform.
Builder for constructing
AlgorithmFilter instances.Immutable value object representing a supported algorithm profile.
Category of the algorithm: classical vs. post-quantum vs. hybrid.
Lifecycle status as defined by the platform.
Immutable pair of classical and post-quantum algorithm identifiers.
Pure client-side conversion helpers between the JOSE Compact Serialization
(RFC 7516 §7.1 for JWE / RFC 7515 §7.1 for JWS) and the General JSON
Serialization (RFC 7516 §7.2 / RFC 7515 §7.2) used by ANKASecure on the
wire.
Factory for creating authenticated SDK instances.
A uniform, localization-ready exception thrown by all public AnkaSecure SDK APIs.
Factory for creating configured ApiClient instances.
Authenticated SDK instance with immutable JWT token.
Holder for a JWT bearer token represented as
char[] rather than String, with
a redacted BearerToken.toString() so accidental log statements do not leak the token verbatim.Combined cryptographic operations facade.
Thread-safe implementation of
CombinedOperationsService.Thrown when a cryptographic operation fails due to local processing errors.
Immutable representation of the
Crypto-Policy-Info response header.Fluent builder that mirrors the legacy API, preserving existing unit
tests and client code.
Decodes the Base64URL-encoded value of the
Crypto-Policy-Info
response header into a CryptoPolicyInfo.Centralized provider for cryptographically secure random number generation.
Thread-safe concrete implementation of
CryptoService.Represents a structured cryptographic operation warning.
Immutable result returned by decryption operations.
Builder for constructing immutable DecryptResult instances.
DecryptResultMetadataResult of a decrypt-then-verify combined operation.
Thrown when a file-output operation cannot commit its result because a file already exists at the
destination and
FAIL_IF_EXISTS (the default) is in effect.One-shot utility: encrypts a clientId + clientSecret using the same
PBKDF2 + AES-GCM scheme as
ExampleUtil and prints the four
lines that must be pasted into cli.properties.Encryption and decryption operations facade.
Immutable result returned by encryption operations.
Builder for constructing immutable EncryptResult instances.
Best-effort removal of an environment variable from the JVM's process environment map after
the variable has been read.
Runs all SDK example scenarios in sequence and provides a comprehensive summary.
Console entry-point that lets you run any of the sample scenarios packaged
with the AnkaSecure SDK.
Resolves PRE-PROVISIONED playground key ids for the realigned data-plane
examples.
Scenario 1 — End-to-End ML-KEM-512 Encryption (Streaming).
Scenario 10 — ML-KEM-1024 Bulk Helpers (Compact JWE).
Scenario 11 — ML-DSA-87 Bulk Helpers (Compact JWS).
Scenario 12 — ML-DSA-65 → SLH-DSA-SHA2-128S Streaming Re-sign (Detached JWS).
Scenario 13 — Runtime Discovery of PQC Algorithms.
Scenario 14 — In-Memory Post-Quantum Crypto (Compact JWE/JWS).
Scenario 15 — Compact-Token Rotation (RSA-3072 → ML-KEM-768).
Scenario 16 — XMSS Streaming Detached JWS Verification.
Scenario 17 — Sign-Then-Encrypt Nested Operations, Compact (data-plane).
Scenario 18 — Use Composite Hybrid Keys for Quantum-Resistant Security (data-plane).
Scenario 19 — PKCS#7/CMS Structural Analysis (data-plane).
Scenario 2 — RSA-2048 Streaming Sign / Verify.
Scenario 20 — PKCS#7 → JOSE Conversion / Migration (data-plane).
Scenario 21 — Sign-Then-Encrypt Nested Operations, Streaming (data-plane).
Scenario 3 — AES-256 Streaming Encrypt / Decrypt.
Scenario 4 — Streaming Re-encrypt (RSA-3072 → ML-KEM-768).
Scenario 5 — ML-KEM-512 Bulk Helpers (Compact JWE).
Scenario 6 — ML-DSA-87 Bulk Helpers (Compact JWS).
Scenario 7 — AES-256 Compact JWE Helpers.
Scenario 8 — ML-KEM-768 → ML-KEM-1024 Bulk Re-encryption (auto-detect / Compact JWE).
Scenario 9 — RSA-3072 → ML-DSA-87 Bulk Re-sign (Compact JWS).
Shared utilities for all ANKASecure© SDK example scenarios.
Centralised UTF-8 file I/O utility for the ANKASecure SDK.
Generic warning for messages that don't match known patterns.
Utility class that converts the
Crypto-Policy-Info response header
emitted by all streaming endpoints into the immutable SDK metadata objects
required by client code.Thrown when input validation fails for SDK operations.
JWS serialization representation requested for an attached signing operation
(PRD §60).
Warning indicating that a cryptographic key is approaching expiration.
Server-side filters for the key listing endpoints.
Key management operations facade.
Thread-safe implementation of
KeyManagementService.Metadata for a cryptographic key in the ANKASecure platform.
Indicates how a cryptographic key was created or acquired.
One page of a key listing, mirroring the server's paginated envelope.
Immutable response model returned by combined PKCS#7 migration workflows.
NIST security levels for post-quantum cryptographic algorithms.
Governs how a file-output operation promotes its result onto an already-existing destination
(PRD §64).
Thrown by the auto-paginating
listAllKeys(filters) when the server reports
more pages than the SDK's defensive ceiling allows (ceil(totalElements/size)+1
iterations, hard-capped at 10000 pages).Classpath loader for the PKCS#7/CMS example fixture used by the data-plane
migration scenarios (
ExampleScenario19, ExampleScenario20).PqcClientCryptoUtil
A record containing both raw key objects (public, private) and their
Base64-encoded forms.
Immutable value object returned by PQC hybrid handshake endpoints.
Manages PQC transport sessions: generates PQC key pairs, performs
handshake, unwraps AES keys, and caches sessions until TTL expires.
Configuration holder for PQC transport encryption settings.
OkHttp Interceptor that transparently encrypts request bodies and decrypts
response bodies when PQC transport encryption is enabled.
Internal representation of a PQC transport session: holds sessionId,
AES key, and creation timestamp.
Informational view of an embedded RFC 3161 qualified timestamp
(JAdES
sigTst) reported by a verification operation (PRD §60).Result of a re-encryption
operation.
Result of a re-signature
operation.
High-level, protocol-agnostic error categories recognised by the SDK.
Owning wrapper for a sensitive
byte[].Owning wrapper for a sensitive
char[] (typically passwords, passphrases, or other
character-secret material returned by System.console().readPassword() or by JCA
APIs that operate on char[]).Centralized HTTP client configuration for the AnkaSecure SDK.
Signature and verification operations facade.
Thread-safe implementation of
SignatureService.Result of a sign-then-encrypt combined operation.
Immutable result returned by signing operations.
Builder for constructing immutable SignResult instances.
Thrown when a streaming / atomic file-output operation cannot create its quarantine sidecar
(
<destination>.part) because a file already exists at the sidecar path — the signature of a
stale sidecar orphaned by a prior crashed or force-killed operation (the
CREATE_NEW sidecar is normally deleted on BOTH the success and the fail-closed paths, so a
surviving one indicates an earlier abnormal termination).Extended ApiClient with streaming optimizations.
Thrown when a streaming file-output operation cannot commit its result because the
server-emitted end-of-stream integrity verdict did not pass (fail-closed).
Warning indicating that a cryptographic key is approaching its usage limit.
Utility operations facade for PKCS#7 analysis, conversion, and migration.
VerifySignatureResultSeverity levels for cryptographic warnings.
Centralized zeroization helpers for the ANKASecure secure-memory layer.