Class ResignResult
resign(String keyId, String data)resignFile(String keyId, Path source, Path target)resignFileStream(String keyId, Path source, Path signature, Path target)
This class encapsulates a brand-new Compact JWS produced after re-signing a payload, and includes exhaustive metadata for both the old verification key and the new signing key.
Compact JWS Structure
A Compact JWS consists of three Base64URL-encoded segments separated by dots:
- Header: JSON object containing signature parameters such
as
alg(e.g. Falcon-1024) andkid. - Payload: the original file data (detached or embedded).
- Signature: the digital signature computed over the header and payload using the negotiated PQC/hybrid algorithm.
Payload persistence
The SDK stores the raw Compact JWS (three Base64URL segments separated by
dots, per RFC
7515) into the newSignatureFile path provided by the caller,
encoded as UTF-8. Applications may keep the file unchanged or process the
token further with any standards-compliant JWS library.
Key metadata
- oldKeyRequested: the
kidoriginally used for verification. - oldKeyUsed: the effective verification
kidafter rotation. - oldKeyAlgorithmUsed: the algorithm negotiated for verification.
- newKeyRequested: the
kidoriginally supplied for signing. - newKeyUsed: the effective signing
kidafter rotation. - newKeyAlgorithmUsed: the algorithm negotiated for signing.
Thread-safety
Instances are immutable data carriers after construction and may be shared across threads safely, provided no setter is invoked.
All getters return non-null values except
getWarnings(), which may be null if no warnings
were issued.
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionvoidvoidvoidvoidvoidvoidvoidvoidsetWarnings(List<String> v)
-
Constructor Details
-
ResignResult
public ResignResult()
-
-
Method Details
-
getJwsToken
-
setJwsToken
-
getOldKeyRequested
-
setOldKeyRequested
-
getOldKeyUsed
-
setOldKeyUsed
-
getOldKeyAlgorithmUsed
-
setOldKeyAlgorithmUsed
-
getNewKeyRequested
-
setNewKeyRequested
-
getNewKeyUsed
-
setNewKeyUsed
-
getNewKeyAlgorithmUsed
-
setNewKeyAlgorithmUsed
-
getWarnings
-
setWarnings
-