Index

A B C D E F G H I J K L M N O P Q R S T U V W Z
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

addWarning(CryptoWarning) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Adds a single warning.

addWarning(CryptoWarning) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Adds a single warning.

AlgorithmCatalogOperations - Class in co.ankatech.ankasecure.sdk.operations

Algorithm catalog operations facade.

AlgorithmCatalogOperations(InternalServiceFactory, AnkaSecureOpenApiClient, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.AlgorithmCatalogOperations

AlgorithmFilter - Class in co.ankatech.ankasecure.sdk.model

Filter criteria for querying supported algorithms from the AnkaSecure platform.

AlgorithmFilter.Builder - Class in co.ankatech.ankasecure.sdk.model

Builder for constructing AlgorithmFilter instances.

AlgorithmInfo - Class in co.ankatech.ankasecure.sdk.model

Immutable value object representing a supported algorithm profile.

AlgorithmInfo() - Constructor for class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

Zero-arg constructor for deserialization frameworks.

AlgorithmInfo.Category - Enum Class in co.ankatech.ankasecure.sdk.model

Category of the algorithm: classical vs. post-quantum vs. hybrid.

AlgorithmInfo.Status - Enum Class in co.ankatech.ankasecure.sdk.model

Lifecycle status as defined by the platform.

AlgorithmPair - Class in co.ankatech.ankasecure.sdk.model

Immutable pair of classical and post-quantum algorithm identifiers.

AlgorithmPair(String, String) - Constructor for class co.ankatech.ankasecure.sdk.model.AlgorithmPair

Creates a new algorithm pair.

algorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Sets the algorithm used.

algorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Sets the algorithm used.

analyzePkcs7(Pkcs7AnalysisRequest) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Analyzes a PKCS#7 file to extract metadata and certificate information.

analyzePkcs7(Pkcs7AnalysisRequest) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

analyzePkcs7(Pkcs7AnalysisRequest) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations

Analyzes a PKCS#7 structure (compact mode).

analyzePkcs7Stream(Pkcs7AnalysisStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Analyzes a PKCS#7 file using streaming to avoid loading the entire file into memory.

analyzePkcs7Stream(Pkcs7AnalysisStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

analyzePkcs7Stream(Pkcs7AnalysisStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations

Analyzes a PKCS#7 structure (streaming mode for large files).

AnkaJoseUtil - Class in co.ankatech.ankasecure.sdk.jose

Pure client-side conversion helpers between the JOSE Compact Serialization (RFC 7516 §7.1 for JWE / RFC 7515 §7.1 for JWS) and the General JSON Serialization (RFC 7516 §7.2 / RFC 7515 §7.2) used by ANKASecure on the wire.

AnkaSecureSdk - Class in co.ankatech.ankasecure.sdk

Factory for creating authenticated SDK instances.

AnkaSecureSdk(Properties) - Constructor for class co.ankatech.ankasecure.sdk.AnkaSecureSdk

Constructs the SDK factory using the provided CLI properties.

AnkaSecureSdkException - Exception in co.ankatech.ankasecure.sdk.exception

A uniform, localization-ready exception thrown by all public AnkaSecure SDK APIs.

AnkaSecureSdkException(String, int, String, Throwable, Map<String, String>) - Constructor for exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Constructs a new SDK exception with the specified message, HTTP status, response body, cause, and context.

AnkaSecureSdkException(String, int, String, Throwable, Map<String, String>, SdkErrorCode, Long) - Constructor for exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Constructs a new SDK exception with the specified message, HTTP status, response body, cause, context, a specific SDK error code, and the server-provided Retry-After hint.

ApiClientFactory - Class in co.ankatech.ankasecure.sdk.client

Factory for creating configured ApiClient instances.

ApiClientFactory.ClientMode - Enum Class in co.ankatech.ankasecure.sdk.client

authenticate(Properties) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Authenticates using encrypted credentials stored in cli.properties and returns an AuthenticatedSdk.

authenticateApplication(String, SecretChars) - Method in class co.ankatech.ankasecure.sdk.AnkaSecureSdk

Authenticates as an application and returns an authenticated SDK instance.

AuthenticatedSdk - Class in co.ankatech.ankasecure.sdk

Authenticated SDK instance with immutable JWT token.

authenticateUser(String, SecretChars, String) - Method in class co.ankatech.ankasecure.sdk.AnkaSecureSdk

Authenticates as a user and returns an authenticated SDK instance.

B

BearerToken - Class in co.ankatech.ankasecure.sdk.security

Holder for a JWT bearer token represented as char[] rather than String, with a redacted BearerToken.toString() so accidental log statements do not leak the token verbatim.

BearerToken(char[]) - Constructor for class co.ankatech.ankasecure.sdk.security.BearerToken

Takes ownership of the supplied char array.

build() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Builds the AlgorithmFilter instance.

build() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

build() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult.Builder

Builds an immutable DecryptResult instance.

build() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Builds an immutable EncryptResult instance.

build() - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Builds an immutable SignResult instance.

builder() - Static method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

Creates a new builder for constructing an AlgorithmFilter.

builder() - Static method in class co.ankatech.ankasecure.sdk.model.DecryptResult

Creates a new builder for constructing DecryptResult instances.

builder() - Static method in class co.ankatech.ankasecure.sdk.model.EncryptResult

Creates a new builder for constructing EncryptResult instances.

builder() - Static method in class co.ankatech.ankasecure.sdk.model.SignResult

Creates a new builder for constructing SignResult instances.

Builder() - Constructor for class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

bytes() - Method in class co.ankatech.ankasecure.sdk.security.SecretBuffer

C

chars() - Method in class co.ankatech.ankasecure.sdk.security.BearerToken

chars() - Method in class co.ankatech.ankasecure.sdk.security.SecretChars

CIPHER_INPUT_STREAM_BUFFER_SIZE - Static variable in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

CLASSICAL - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category

Traditional algorithms vulnerable to quantum computers.

clear() - Method in class co.ankatech.ankasecure.sdk.security.BearerToken

Zeroizes the underlying token via Zeroization.zeroize(char[]) (space-fill).

close() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

SDK-006 (secure-memory-cutover Slice 4): clears the bearer token from the underlying AnkaSecureOpenApiClient's HttpBearerAuth.

close() - Method in class co.ankatech.ankasecure.sdk.security.SecretBuffer

Zeroizes the underlying byte[] (overwrites every element with 0x00), nulls the internal field, and marks this wrapper as closed.

close() - Method in class co.ankatech.ankasecure.sdk.security.SecretChars

Zeroizes the underlying char[] (space-fill ' '), nulls the internal field, and marks this wrapper as closed.

close() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession

Best-effort destruction of the underlying AES SecretKey.

co.ankatech.ankasecure.sdk - package co.ankatech.ankasecure.sdk

co.ankatech.ankasecure.sdk.client - package co.ankatech.ankasecure.sdk.client

co.ankatech.ankasecure.sdk.examples - package co.ankatech.ankasecure.sdk.examples

co.ankatech.ankasecure.sdk.exception - package co.ankatech.ankasecure.sdk.exception

co.ankatech.ankasecure.sdk.internal - package co.ankatech.ankasecure.sdk.internal

co.ankatech.ankasecure.sdk.internal.service.impl - package co.ankatech.ankasecure.sdk.internal.service.impl

co.ankatech.ankasecure.sdk.jose - package co.ankatech.ankasecure.sdk.jose

co.ankatech.ankasecure.sdk.meta - package co.ankatech.ankasecure.sdk.meta

co.ankatech.ankasecure.sdk.model - package co.ankatech.ankasecure.sdk.model

co.ankatech.ankasecure.sdk.model.warning - package co.ankatech.ankasecure.sdk.model.warning

Structured warning types for cryptographic operations.

co.ankatech.ankasecure.sdk.operations - package co.ankatech.ankasecure.sdk.operations

co.ankatech.ankasecure.sdk.security - package co.ankatech.ankasecure.sdk.security

The ANKASecure SDK secure-memory layer.

co.ankatech.ankasecure.sdk.transport - package co.ankatech.ankasecure.sdk.transport

co.ankatech.ankasecure.sdk.util - package co.ankatech.ankasecure.sdk.util

combinedOperations() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

CombinedOperations - Class in co.ankatech.ankasecure.sdk.operations

Combined cryptographic operations facade.

CombinedOperations(InternalServiceFactory, AnkaSecureOpenApiClient, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.CombinedOperations

CombinedOperationsServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl

Thread-safe implementation of CombinedOperationsService.

CombinedOperationsServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

Convenience constructor using the default OverwritePolicy.FAIL_IF_EXISTS policy.

CombinedOperationsServiceImpl(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

Constructor with dependency injection.

COMPACT - Enum constant in enum class co.ankatech.ankasecure.sdk.model.JwsSerialization

RFC 7515 §7.1 Compact Serialization (three dot-separated segments).

compactJweToGeneral(String) - Static method in class co.ankatech.ankasecure.sdk.jose.AnkaJoseUtil

Converts a Compact JWE (5 dot-separated base64url segments) into the General JSON Serialization form as a JSON string.

compactJwsToGeneral(String) - Static method in class co.ankatech.ankasecure.sdk.jose.AnkaJoseUtil

Converts a Compact JWS (3 dot-separated base64url segments) into the General JSON Serialization form as a JSON string.

configureForHighThroughput(ApiClient) - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory

Applies high-throughput configuration to an existing ApiClient.

configureForStreaming(ApiClient) - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory

Applies streaming configuration to an existing ApiClient.

content() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Returns the value of the content record component.

convertPkcs7ToJose(Pkcs7ConversionRequest) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Converts a PKCS#7 signature to JOSE (JWS) format.

convertPkcs7ToJose(Pkcs7ConversionRequest) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

convertPkcs7ToJose(Pkcs7ConversionRequest) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations

Converts PKCS#7 signed-data to JOSE JWS format (compact mode).

convertPkcs7ToJoseStream(Pkcs7ConversionStreamRequest, File, File) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Converts a PKCS#7 signature to JOSE using streaming.

convertPkcs7ToJoseStream(Pkcs7ConversionStreamRequest, File, File) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

convertPkcs7ToJoseStream(Pkcs7ConversionStreamRequest, File, File) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations

Converts PKCS#7 signed-data to JOSE JWS format (streaming mode for large files).

create(String, int, int, int) - Static method in class co.ankatech.ankasecure.sdk.client.StreamingApiClient

Creates a new streaming-optimized API client with custom configuration.

createClient(ApiClientFactory.ClientMode) - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory

Creates an ApiClient based on the specified mode.

createCustomClient(int, int, int, int, int) - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory

Creates a custom configured ApiClient.

createStandardClient() - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory

Creates a standard ApiClient with default configuration.

createStreamingClient() - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory

Creates a streaming-optimized ApiClient.

CRITICAL - Enum constant in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity

Immediate action required to prevent service disruption.

crypto() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

CryptoOperationException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown when a cryptographic operation fails due to local processing errors.

CryptoOperationException(String) - Constructor for exception co.ankatech.ankasecure.sdk.exception.CryptoOperationException

Constructs a new crypto operation exception with the specified message.

CryptoOperationException(String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.CryptoOperationException

Constructs a new crypto operation exception with the specified message and cause.

CryptoPolicyInfo - Class in co.ankatech.ankasecure.sdk.model

Immutable representation of the Crypto-Policy-Info response header.

CryptoPolicyInfo(String, String, int, int, String, String, int, int, boolean) - Constructor for class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

Constructs an instance from the JSON-mapped fields.

CryptoPolicyInfo.Builder - Class in co.ankatech.ankasecure.sdk.model

Fluent builder that mirrors the legacy API, preserving existing unit tests and client code.

CryptoPolicyInfoDecoder - Class in co.ankatech.ankasecure.sdk.meta

Decodes the Base64URL-encoded value of the Crypto-Policy-Info response header into a CryptoPolicyInfo.

CryptoRandomProvider - Class in co.ankatech.ankasecure.sdk.util

Centralized provider for cryptographically secure random number generation.

CryptoServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl

Thread-safe concrete implementation of CryptoService.

CryptoServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

Convenience constructor using the default OverwritePolicy.FAIL_IF_EXISTS policy.

CryptoServiceImpl(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

CryptoWarning - Interface in co.ankatech.ankasecure.sdk.model.warning

Represents a structured cryptographic operation warning.

currentKeyAlgorithm() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

currentKeyAlgorithm(String) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

currentKeyExpWarnDays() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

currentKeyExpWarnDays(int) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

currentKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

currentKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

currentKeyUsageWarn() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

currentKeyUsageWarn(int) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

D

daysRemaining() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

Returns the value of the daysRemaining record component.

decapsulateKem(PrivateKey, String, byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

Decapsulates and decrypts a ciphertext using the provided PrivateKey.

decode(String) - Static method in class co.ankatech.ankasecure.sdk.meta.CryptoPolicyInfoDecoder

decrypt(String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts a compact JWE (RFC 7516) token to recover the original plaintext.

decrypt(String) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

Decrypts a compact JWE token string.

decryptBytes(String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

Decrypt a Compact JWE that is already in RAM.

decryptDataRaw(byte[], byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

decryptDataRaw(SecretBuffer, byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

SecretBuffer overload of PqcClientCryptoUtil.decryptDataRaw(byte[], byte[]).

decryptedData(byte[]) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult.Builder

Sets the decrypted data (will be defensively copied).

decryptFile(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts a file.

decryptFile(Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

decryptFileCompact(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts a file with forced compact format.

decryptFileCompact(Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

Decrypts a file containing a compact JWE token.

decryptFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts a file with forced streaming format.

decryptFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

Decrypts a JWET multipart file via streaming API.

decryptFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

Decrypts a file in streaming mode (designed for large files >100 MB).

DecryptResult - Class in co.ankatech.ankasecure.sdk.model

Immutable result returned by decryption operations.

DecryptResult.Builder - Class in co.ankatech.ankasecure.sdk.model

Builder for constructing immutable DecryptResult instances.

DecryptResultMetadata - Class in co.ankatech.ankasecure.sdk.model

DecryptResultMetadata

DecryptResultMetadata() - Constructor for class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

decryptThenVerify(String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts a JWE then verifies the inner JWS signature.

decryptThenVerify(String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

decryptThenVerify(String) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

decryptThenVerifyFile(Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

decryptThenVerifyFileCompact(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts and verifies a nested JWE(JWS) file with forced compact format.

decryptThenVerifyFileCompact(Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

decryptThenVerifyFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts a nested JWE(JWS) file then verifies the inner signature in streaming mode — the large-file counterpart of AuthenticatedSdk.decryptThenVerifyFileCompact(Path, Path), and the inverse of AuthenticatedSdk.signThenEncryptFileStream(String, String, Path, Path).

decryptThenVerifyFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

decryptThenVerifyFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

DecryptVerifyResult - Class in co.ankatech.ankasecure.sdk.model

Result of a decrypt-then-verify combined operation.

DecryptVerifyResult() - Constructor for class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Default constructor initializing empty warning lists.

DERIVED - Enum constant in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin

Key derived from another key using key derivation functions.

DestinationExistsException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown when a file-output operation cannot commit its result because a file already exists at the destination and FAIL_IF_EXISTS (the default) is in effect.

DestinationExistsException(Path, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.DestinationExistsException

Constructs a new destination-collision exception.

destroyIfPossible(Object) - Static method in class co.ankatech.ankasecure.sdk.security.Zeroization

Calls Destroyable.destroy() if the supplied object implements Destroyable and is not yet destroyed.

E

enableStreaming() - Method in class co.ankatech.ankasecure.sdk.client.StreamingApiClient

Enables streaming mode with optimized timeouts and configuration.

enableStreaming(int, int, int) - Method in class co.ankatech.ankasecure.sdk.client.StreamingApiClient

Enables streaming mode with custom timeouts.

encrypt(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Encrypts raw bytes using the key identified by kid.

encrypt(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

Encrypts raw bytes using the key identified by kid.

encryptBytes(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

Encrypt raw bytes with a server-side **public** key.

EncryptCredentials - Class in co.ankatech.ankasecure.sdk.examples

One-shot utility: encrypts a clientId + clientSecret using the same PBKDF2 + AES-GCM scheme as ExampleUtil and prints the four lines that must be pasted into cli.properties.

encryptDataRaw(byte[], byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

encryptDataRaw(SecretBuffer, byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

SecretBuffer overload of PqcClientCryptoUtil.encryptDataRaw(byte[], byte[]).

encryptFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Encrypts a file.

encryptFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

encryptFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Encrypts a file with forced compact format.

encryptFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

Encrypts a file using the key identified by kid.

encryptFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Encrypts a file with forced streaming format.

encryptFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

encryptFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

Encrypts a file in streaming mode (designed for large files >100 MB).

encryptFileUtilityStream(String, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Encrypts a file using a provided public key (without requiring key in ANKASecure).

encryptFileUtilityStream(String, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

encryptFileUtilityStream(String, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

EncryptionOperations - Class in co.ankatech.ankasecure.sdk.operations

Encryption and decryption operations facade.

EncryptionOperations(InternalServiceFactory, AnkaSecureOpenApiClient, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

EncryptResult - Class in co.ankatech.ankasecure.sdk.model

Immutable result returned by encryption operations.

EncryptResult.Builder - Class in co.ankatech.ankasecure.sdk.model

Builder for constructing immutable EncryptResult instances.

encryptWithExternalPublicKey(String, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

ensure() - Static method in class co.ankatech.ankasecure.sdk.internal.RuntimeGuard

ensureTempDir() - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Ensures that the ExampleUtil.TEMP_DIR directory exists, creating it (and any parent directories) if necessary.

ensureTempDir(Path) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Ensures that the given directory exists, creating it (and any parent directories) if necessary.

envelopedDataBase64() - Static method in class co.ankatech.ankasecure.sdk.examples.Pkcs7ExampleFixture

Returns the fixture as a Base64 string, suitable for the compact-mode request fields Pkcs7AnalysisRequest.pkcs7Data / Pkcs7ConversionRequest.pkcs7Data.

envelopedDataBytes() - Static method in class co.ankatech.ankasecure.sdk.examples.Pkcs7ExampleFixture

Loads the raw DER bytes of the packaged EnvelopedData fixture from the classpath.

EnvScrubber - Class in co.ankatech.ankasecure.sdk.security

Best-effort removal of an environment variable from the JVM's process environment map after the variable has been read.

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult

Constant-time equality check on sessionId only.

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Indicates whether some other object is "equal to" this one.

ExampleComplete - Class in co.ankatech.ankasecure.sdk.examples

Runs all SDK example scenarios in sequence and provides a comprehensive summary.

ExampleMenu - Class in co.ankatech.ankasecure.sdk.examples

Console entry-point that lets you run any of the sample scenarios packaged with the AnkaSecure SDK.

ExamplePlaygroundKeys - Class in co.ankatech.ankasecure.sdk.examples

Resolves PRE-PROVISIONED playground key ids for the realigned data-plane examples.

ExampleScenario1 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 1 — End-to-End ML-KEM-512 Encryption (Streaming).

ExampleScenario10 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 10 — ML-KEM-1024 Bulk Helpers (Compact JWE).

ExampleScenario11 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 11 — ML-DSA-87 Bulk Helpers (Compact JWS).

ExampleScenario12 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 12 — ML-DSA-65 → SLH-DSA-SHA2-128S Streaming Re-sign (Detached JWS).

ExampleScenario13 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 13 — Runtime Discovery of PQC Algorithms.

ExampleScenario14 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 14 — In-Memory Post-Quantum Crypto (Compact JWE/JWS).

ExampleScenario15 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 15 — Compact-Token Rotation (RSA-3072 → ML-KEM-768).

ExampleScenario16 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 16 — XMSS Streaming Detached JWS Verification.

ExampleScenario17 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 17 — Sign-Then-Encrypt Nested Operations, Compact (data-plane).

ExampleScenario18 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 18 — Use Composite Hybrid Keys for Quantum-Resistant Security (data-plane).

ExampleScenario19 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 19 — PKCS#7/CMS Structural Analysis (data-plane).

ExampleScenario2 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 2 — RSA-2048 Streaming Sign / Verify.

ExampleScenario20 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 20 — PKCS#7 → JOSE Conversion / Migration (data-plane).

ExampleScenario21 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 21 — Sign-Then-Encrypt Nested Operations, Streaming (data-plane).

ExampleScenario3 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 3 — AES-256 Streaming Encrypt / Decrypt.

ExampleScenario4 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 4 — Streaming Re-encrypt (RSA-3072 → ML-KEM-768).

ExampleScenario5 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 5 — ML-KEM-512 Bulk Helpers (Compact JWE).

ExampleScenario6 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 6 — ML-DSA-87 Bulk Helpers (Compact JWS).

ExampleScenario7 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 7 — AES-256 Compact JWE Helpers.

ExampleScenario8 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 8 — ML-KEM-768 → ML-KEM-1024 Bulk Re-encryption (auto-detect / Compact JWE).

ExampleScenario9 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 9 — RSA-3072 → ML-DSA-87 Bulk Re-sign (Compact JWS).

ExampleUtil - Class in co.ankatech.ankasecure.sdk.examples

Shared utilities for all ANKASecure© SDK example scenarios.

EXPERIMENTAL - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status

Preview or beta algorithm not ready for production use.

F

FAIL_IF_EXISTS - Enum constant in enum class co.ankatech.ankasecure.sdk.model.OverwritePolicy

Default: refuse to clobber an existing destination (atomic-rename is the TOCTOU guard).

fatal(String, Throwable) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Logs a fatal error to stderr and terminates the JVM with exit code 1.

FileIO - Class in co.ankatech.ankasecure.sdk.util

Centralised UTF-8 file I/O utility for the ANKASecure SDK.

from(QualifiedTimestamp) - Static method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

Maps a generated OpenAPI QualifiedTimestamp to this public view.

from(Properties, AuthenticatedSdk) - Static method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys

Builds a resolver from the loaded cli.properties and an authenticated SDK.

fromLevel(int) - Static method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Parses a security level from its numeric value.

fromStandard(ApiClient) - Static method in class co.ankatech.ankasecure.sdk.client.StreamingApiClient

Creates a new streaming-optimized API client from a standard one.

G

generalJweToCompact(String) - Static method in class co.ankatech.ankasecure.sdk.jose.AnkaJoseUtil

Converts a General JSON Serialization JWE (as a JSON string) into the Compact Serialization (5 dot-separated segments).

generalJwsToCompact(String) - Static method in class co.ankatech.ankasecure.sdk.jose.AnkaJoseUtil

Converts a General JSON Serialization JWS (as a JSON string) into the Compact Serialization (3 dot-separated segments).

GENERATED - Enum constant in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin

Key natively created by AnkaSecure platform using generate-key endpoint.

GeneratedKeyPair(PublicKey, PrivateKey, String) - Constructor for record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Creates an instance of a GeneratedKeyPair record class.

generateKeyPair(String) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

Generates an asymmetric key pair for a specified algorithm, potentially referencing PQC or classical algorithms.

GenericWarning - Record Class in co.ankatech.ankasecure.sdk.model.warning

Generic warning for messages that don't match known patterns.

GenericWarning(String) - Constructor for record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

Creates an instance of a GenericWarning record class.

get() - Static method in class co.ankatech.ankasecure.sdk.util.CryptoRandomProvider

Returns the singleton SecureRandom instance.

getAdvisory() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

getAesKey() - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult

Returns a direct reference to the AES-256 key bytes.

getAesKey() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession

getAlg() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getAlg() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

getAlg() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the algorithm identifier.

getAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

getAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult

Returns the algorithm negotiated by the server for this encryption operation (e.g.

getAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.SignResult

Returns the signature algorithm negotiated by the service (e.g.

getAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

getAnalysis() - Method in class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult

Returns the complete PKCS#7 analysis response.

getBitSecurity() - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Returns the equivalent symmetric key strength in bits.

getCategory() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getCategory() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

Returns the algorithm category.

getClassicalAlgorithm() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair

Returns the classical algorithm in this pair.

getClient() - Method in class co.ankatech.ankasecure.sdk.SharedHttpClient

Returns the configured OkHttpClient instance.

getContext() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Returns additional context information provided with this exception.

getCorrelationId() - Method in exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException

Returns the request correlation id, for cross-service tracing.

getCreatedAt() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the key creation timestamp.

getCreatedAt() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession

getDecryptAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets the algorithm used for decryption.

getDecryptedData() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult

Returns the raw decrypted bytes.

getDecryptedData() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Returns the decrypted plaintext bytes.

getDecryptKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets the key identifier requested for decryption.

getDecryptMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets the key-material version (ank_kv) that performed the decryption under the requested Stable KID.

getDecryptWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets structured warnings related to the decryption operation.

getDescription() - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Returns a human-readable description of this security level.

getDestination() - Method in exception co.ankatech.ankasecure.sdk.exception.DestinationExistsException

Returns the destination path that already exists.

getDestination() - Method in exception co.ankatech.ankasecure.sdk.exception.StaleSidecarException

Returns the final destination the blocked write targeted.

getEncryptAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets the algorithm used for encryption.

getEncryptKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets the key identifier requested for encryption.

getEncryptMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets the key-material version (ank_kv) that performed the encryption operation under the requested Stable KID.

getEncryptWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets structured warnings related to the encryption operation.

getErrorCode() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Returns the specific SDK error code categorizing this failure.

getExpiresAt() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the hard expiration timestamp.

getExportable() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns whether the key can be exported.

getGcmTagVerdict() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Returns the outer AES-GCM tag integrity dimension of the streaming decrypt-verify result.

getGenTime() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

getHandshakeEndpoint() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

getHttpStatus() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Returns the HTTP status code returned by the remote service.

getJoseOutput() - Method in class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult

Returns the output file containing converted JOSE data.

getJweToken() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult

Returns the raw Compact JWE exactly as emitted by the server.

getJweToken() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the new compact JWE token after re-encryption.

getJweToken() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Returns the nested JWE(JWS) token.

getJwsToken() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the new compact JWS token after re-signing.

getJwsToken() - Method in class co.ankatech.ankasecure.sdk.model.SignResult

Returns the raw Compact JWS exactly as issued by the server.

getKdf() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the key derivation function for composite KEM keys.

getKeyMetadata(String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Retrieves metadata for a specific key.

getKeyMetadata(String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl

getKeyMetadata(String) - Method in class co.ankatech.ankasecure.sdk.operations.KeyManagementOperations

Retrieves complete metadata for a specific key.

getKeyOps() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getKeyOps() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

Returns an unmodifiable copy to protect internal state.

getKeyOps() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the permitted key operations.

getKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

getKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult

Returns the key identifier originally supplied by the client.

getKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.SignResult

Returns the key identifier originally requested by the client.

getKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

getKid() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the unique key identifier.

getKty() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getKty() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

getKty() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the key type.

getLevel() - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Returns the numeric security level.

getMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

getMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult

Returns the key-material version (ank_kv) that performed the operation under the requested Stable KID; null when not resolvable (e.g. utility mode) — never 0.

getMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.SignResult

Returns the key-material version (ank_kv) that performed the operation under the requested Stable KID; null when not resolvable (e.g. utility mode) — never 0.

getMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

getMaxSecurityLevel() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getMaxUsageLimit() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the hard usage limit.

getMeta() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult

Returns the full metadata returned by the service.

getMinSecurityLevel() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getNewKeyAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the hybrid algorithm used for encryption.

getNewKeyAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the algorithm used for signing.

getNewKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the original key identifier requested for encryption.

getNewKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the key identifier originally requested for signing.

getOldKeyAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the hybrid algorithm used for decryption.

getOldKeyAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the algorithm used for verification.

getOldKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the original key identifier requested for decryption.

getOldKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the key identifier originally requested for verification.

getOperation() - Method in exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException

Returns the operation whose end-of-stream verdict failed.

getOrigin() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the key origin.

getPolicyOid() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

getPqcAlgorithm() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair

Returns the PQC algorithm in this pair.

getProviderInfo() - Static method in class co.ankatech.ankasecure.sdk.util.CryptoRandomProvider

Returns information about the underlying random provider.

getQualifiedTimestamp() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Returns the embedded RFC 3161 qualified timestamp from the inner JWS, when present.

getQualifiedTimestamp() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

Returns the embedded RFC 3161 qualified timestamp, when present.

getReason() - Method in exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException

Returns the server's oracle-safe reason for the failing verdict.

getResponseBody() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Returns the full response body returned by the remote service.

getRestricted() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns whether the key is restricted (legacy format).

getRetryAfterSeconds() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Returns the server-provided Retry-After hint, in integer seconds.

getSecurityLevel() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

getSerialNumber() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

getSession() - Method in class co.ankatech.ankasecure.sdk.transport.PqcSessionManager

Returns an active session, or performs a new handshake if none exists or TTL expired.

getSessionId() - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult

Returns the opaque session identifier for follow-up calls.

getSessionId() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession

getSessionTtl() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

getSidecar() - Method in exception co.ankatech.ankasecure.sdk.exception.StaleSidecarException

Returns the stale sidecar path that blocked the write.

getSignAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets the algorithm used for signing (from JWS header).

getSignAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets the algorithm used for signing.

getSignatureResults() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

Per-signature verification results — see VerifySignatureResult.signatureResults.

getSignatureVerdict() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Returns the inner JWS signature integrity dimension of the streaming decrypt-verify result.

getSignerInfo() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets additional signer information (if present in JWS claims).

getSigningKey() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets the key identifier used for signing (from JWS header).

getSignKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets the key identifier requested for signing.

getSignMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets the key-material version (ank_kv) that performed the signing operation under the requested Stable KID.

getSignWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets structured warnings related to the signing operation.

getSoftLimitExpiration() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the soft expiration (warning threshold) timestamp.

getSoftUsageLimit() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the soft usage limit (warning threshold).

getSourceMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the key-material version that decrypted the original payload under the source Stable KID.

getSourceMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the key-material version that verified the original signature under the source Stable KID.

getStandards() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getStandards() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

Returns an unmodifiable copy to protect internal state.

getStatus() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getStatus() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

getStatus() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the current lifecycle status.

getSunsetDate() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

getSupportedAlgorithms() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Retrieves the complete list of cryptographic algorithms supported by the server.

getSupportedAlgorithms() - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl

getSupportedAlgorithms() - Method in class co.ankatech.ankasecure.sdk.operations.AlgorithmCatalogOperations

Retrieves the complete catalog of cryptographic algorithms supported by the server.

getSupportedAlgorithms(AlgorithmFilter) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Retrieves cryptographic algorithms matching the specified filter criteria.

getSupportedAlgorithms(AlgorithmFilter) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl

getSupportedAlgorithms(AlgorithmFilter) - Method in class co.ankatech.ankasecure.sdk.operations.AlgorithmCatalogOperations

Retrieves supported algorithms matching the specified filter criteria.

getTargetMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the PRIMARY key-material version that encrypted the new payload under the target Stable KID.

getTargetMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the PRIMARY key-material version that signed the new payload under the target Stable KID.

getTokenExpiration() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Extracts the expiration time from the JWT token.

getTotalElements() - Method in exception co.ankatech.ankasecure.sdk.exception.PaginationCeilingExceededException

getTotalPages() - Method in exception co.ankatech.ankasecure.sdk.exception.PaginationCeilingExceededException

getTrustStatus() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

getUsageCount() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the current usage counter.

getVerdict() - Method in exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException

Returns the verdict outcome.

getVerifyMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets the key-material version (ank_kv) that performed the signature verification under the requested Stable KID.

getVerifyWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets structured warnings related to the signature verification operation.

getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

Returns structured warnings encountered during the decryption operation.

getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult

Returns structured warnings encountered during the encryption operation.

getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns non-fatal warnings encountered during the re-encryption operation.

getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns non-fatal warnings encountered during the re-signing operation.

getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignResult

Returns structured warnings encountered during the signing operation.

getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

Returns structured warnings encountered during signature verification.

H

HARD_PAGE_CAP - Static variable in exception co.ankatech.ankasecure.sdk.exception.PaginationCeilingExceededException

Defensive hard cap on auto-pagination (10,000 pages × 200 = 2,000,000 keys).

hasAnyWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Checks if there are any warnings (decrypt or verify).

hasAnyWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Checks if there are any warnings (sign or encrypt).

hasDecryptWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Checks if decryption operation produced warnings.

hasEncryptWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Checks if encryption operation produced warnings.

hasFilters() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

Checks if any filter criteria are set.

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Returns a hash code value for this object.

hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Returns a hash code value for this object.

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

Returns a hash code value for this object.

hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

Returns a hash code value for this object.

hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

Returns a hash code value for this object.

hashCode() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Returns a hash code value for this object.

hasSignWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Checks if signing operation produced warnings.

hasVerifyWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Checks if verification operation produced warnings.

HEADER_KEM - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor

Header that tells the server which KEM algorithm to use.

HEADER_SESSION - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor

Header that carries the PQC session identifier.

HEADER_TRANSPORT - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor

Header that indicates the payload is PQC-encrypted.

HeaderMetaParser - Class in co.ankatech.ankasecure.sdk.meta

Utility class that converts the Crypto-Policy-Info response header emitted by all streaming endpoints into the immutable SDK metadata objects required by client code.

HIGH_THROUGHPUT - Enum constant in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode

HTTP - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Remote endpoint replied with an HTTP 4xx (client error) or 5xx (server error).

HYBRID - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category

Composite algorithms combining classical and post-quantum components.

I

IMPORTED - Enum constant in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin

Key imported from external source (PKCS#12, JWK, PEM, etc.).

INFO - Enum constant in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity

Informational message, no action required.

intercept(Interceptor.Chain) - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor

InternalServiceFactory - Class in co.ankatech.ankasecure.sdk.internal

InternalServiceFactory(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

Convenience factory using the default OverwritePolicy.FAIL_IF_EXISTS write policy.

InternalServiceFactory(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

invalidateSession() - Method in class co.ankatech.ankasecure.sdk.transport.PqcSessionManager

Invalidates the current session, forcing handshake on next request.

InvalidInputException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown when input validation fails for SDK operations.

InvalidInputException(String) - Constructor for exception co.ankatech.ankasecure.sdk.exception.InvalidInputException

Constructs a new invalid input exception with the specified message.

InvalidInputException(String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.InvalidInputException

Constructs a new invalid input exception with the specified message and cause.

invocationsRemaining() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

Returns the value of the invocationsRemaining record component.

IO - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Generic I/O problem during HTTP communication.

isCleared() - Method in class co.ankatech.ankasecure.sdk.security.BearerToken

isClosed() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

isClosed() - Method in class co.ankatech.ankasecure.sdk.security.SecretBuffer

isClosed() - Method in class co.ankatech.ankasecure.sdk.security.SecretChars

isClosed() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession

isCompleteSuccess() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Checks if operation completed successfully with no issues.

isComposite() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Checks if this is a composite key.

isCompositeKem() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Checks if this is a composite KEM key.

isCompositeSignature() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Checks if this is a composite signature key.

isEnabled() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

isMigrationMode() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Indicates whether the operation ran in migration mode.

isPresent() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

isSignatureValid() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Checks if the signature verification succeeded.

isStreamingMode() - Method in class co.ankatech.ankasecure.sdk.client.StreamingApiClient

Checks if streaming mode is enabled.

isTokenExpiredLocally() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Checks whether the access token has expired according to its local exp claim only.

isValid() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

Indicates whether verification succeeded both cryptographically and against server-side policy checks.

J

JSON - Enum constant in enum class co.ankatech.ankasecure.sdk.model.JwsSerialization

RFC 7515 §7.2 JWS JSON Serialization (able to carry a JAdES timestamp).

jweToken(String) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Sets the JWE token (required).

JwsSerialization - Enum Class in co.ankatech.ankasecure.sdk.model

JWS serialization representation requested for an attached signing operation (PRD §60).

jwsToken(String) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Sets the JWS token (required).

K

KEY_ENABLED - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

KEY_HANDSHAKE_ENDPOINT - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

KEY_SESSION_TTL - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

KeyExpirationWarning - Record Class in co.ankatech.ankasecure.sdk.model.warning

Warning indicating that a cryptographic key is approaching expiration.

KeyExpirationWarning(int) - Constructor for record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

Creates an instance of a KeyExpirationWarning record class.

KeyFilters - Record Class in co.ankatech.ankasecure.sdk.model

Server-side filters for the key listing endpoints.

KeyFilters(String, Boolean, String, String) - Constructor for record class co.ankatech.ankasecure.sdk.model.KeyFilters

Creates an instance of a KeyFilters record class.

KeyManagementOperations - Class in co.ankatech.ankasecure.sdk.operations

Key management operations facade.

KeyManagementOperations(InternalServiceFactory, AnkaSecureOpenApiClient, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.KeyManagementOperations

KeyManagementServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl

Thread-safe implementation of KeyManagementService.

KeyManagementServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl

KeyMetadata - Class in co.ankatech.ankasecure.sdk.model

Metadata for a cryptographic key in the ANKASecure platform.

KeyMetadata(String, String, String, String, List<String>, Boolean, KeyOrigin, Boolean, String, ZonedDateTime, ZonedDateTime, ZonedDateTime, Integer, Integer, Integer) - Constructor for class co.ankatech.ankasecure.sdk.model.KeyMetadata

Constructor for internal SDK use.

KeyOrigin - Enum Class in co.ankatech.ankasecure.sdk.model

Indicates how a cryptographic key was created or acquired.

KeyPage - Record Class in co.ankatech.ankasecure.sdk.model

One page of a key listing, mirroring the server's paginated envelope.

KeyPage(List<KeyMetadata>, long, int, int) - Constructor for record class co.ankatech.ankasecure.sdk.model.KeyPage

Creates an instance of a KeyPage record class.

keyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Sets the requested key identifier.

keyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Sets the requested key identifier.

keys() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

kidForAlgorithm(String) - Method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys

Returns the first pre-provisioned kid whose algorithm equals alg (case-insensitive).

kidForAlgorithmAndOp(String, String) - Method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys

Returns the first pre-provisioned kid whose algorithm equals alg AND whose keyOps include keyOp — for picking between keys that share an algorithm but differ in operation (e.g. distinct cross-kid endpoints).

kids() - Method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys

The pre-provisioned playground kids, in file order.

kty() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Returns the value of the kty record component.

L

last() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

true when this is the last page (or the listing is empty).

LEGACY - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status

Deprecated algorithm maintained for backward compatibility only.

length() - Method in class co.ankatech.ankasecure.sdk.security.SecretBuffer

length() - Method in class co.ankatech.ankasecure.sdk.security.SecretChars

LEVEL_1 - Enum constant in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

NIST Security Level 1 - Equivalent to AES-128 (128-bit security).

LEVEL_3 - Enum constant in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

NIST Security Level 3 - Equivalent to AES-192 (192-bit security).

LEVEL_5 - Enum constant in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

NIST Security Level 5 - Equivalent to AES-256 (256-bit security).

listAllKeys(KeyFilters) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Lists ALL keys matching the filters by auto-paginating through the server's paginated listing (the AWS-CLI pattern: the API pages, the client iterates).

listAllKeys(KeyFilters) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl

listAllKeys(KeyFilters) - Method in class co.ankatech.ankasecure.sdk.operations.KeyManagementOperations

Lists ALL keys matching the filters via client-side auto-pagination (bounded; throws PaginationCeilingExceededException beyond the hard cap).

listKeys(KeyFilters, int, int) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Lists ONE PAGE of the keys accessible to the authenticated client.

listKeys(KeyFilters, int, int) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl

listKeys(KeyFilters, int, int) - Method in class co.ankatech.ankasecure.sdk.operations.KeyManagementOperations

Lists ONE PAGE of keys with optional server-side filters (applied BEFORE pagination — the page totals are filtered, tenant-scoped counts).

loadProperties() - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Loads CLI properties using the following look-up order: A cli.properties file in the current working directory. The file pointed to by the cli.config system property. A /cli.properties resource on the classpath.

M

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.EncryptCredentials

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleComplete

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleMenu

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario1

Runs the ML-KEM-512 streaming encryption scenario on a pre-provisioned key.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario10

Runs the ML-KEM-1024 compact JWE encrypt/decrypt scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario11

Runs the ML-DSA-87 compact JWS sign/verify scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario12

Runs the ML-DSA-65 to SLH-DSA-SHA2-128S streaming re-sign scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario13

Runs the runtime PQC algorithm discovery scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario14

Runs the in-memory post-quantum crypto scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario15

Runs the compact-token rotation scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario16

Runs the XMSS streaming detached JWS verification scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario17

Runs the sign-then-encrypt nested operations scenario on pre-provisioned keys.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario18

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario19

Runs the PKCS#7/CMS structural-analysis scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario2

Runs the RSA-2048 streaming sign/verify scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario20

Runs the PKCS#7 → JOSE conversion / migration scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario21

Runs the streaming sign-then-encrypt / decrypt-then-verify scenario on pre-provisioned keys.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario3

Runs the AES-256 streaming encrypt/decrypt scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario4

Runs the RSA-3072 to ML-KEM-768 streaming re-encryption scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario5

Runs the ML-KEM-512 compact JWE encrypt/decrypt scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario6

Runs the ML-DSA-87 compact JWS sign/verify scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario7

Runs the AES-256 compact JWE encrypt/decrypt scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario8

Runs the ML-KEM-768 to ML-KEM-1024 re-encryption scenario on the granted pair.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario9

Runs the RSA-3072 to ML-DSA-87 compact JWS re-sign scenario.

materializeToTempFile() - Static method in class co.ankatech.ankasecure.sdk.examples.Pkcs7ExampleFixture

Materializes the fixture to a temporary File under ExampleUtil.TEMP_DIR, for the streaming APIs that take a java.io.File.

materialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Sets the key-material version that performed the operation.

materialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Sets the key-material version that performed the operation.

meetsMinimum(NistSecurityLevel) - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Checks if this security level meets or exceeds a minimum required level.

message() - Method in interface co.ankatech.ankasecure.sdk.model.warning.CryptoWarning

Returns a human-readable warning message.

message() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

message() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

message() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

meta(DecryptResultMetadata) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult.Builder

Sets the metadata.

migration() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

migrationMode() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

migrationMode(boolean) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

MigrationServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl

MigrationServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

Convenience constructor using the default OverwritePolicy.FAIL_IF_EXISTS policy.

MigrationServiceImpl(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

MigrationWorkflowResult - Class in co.ankatech.ankasecure.sdk.model

Immutable response model returned by combined PKCS#7 migration workflows.

MigrationWorkflowResult() - Constructor for class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult

Default constructor for SDK internal use.

MigrationWorkflowResult(Pkcs7AnalysisResponse, File) - Constructor for class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult

Constructs a new migration workflow result with the specified analysis and JOSE output.

MULTIRECIPIENT_NOT_COMPACT_REPRESENTABLE - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Multi-recipient JWE / multi-signature JWS rejected by the SDK's Compact-format public API surface (architect D-A2).

N

newKeyAlgorithm() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

newKeyAlgorithm(String) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

newKeyExpWarnDays() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

newKeyExpWarnDays(int) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

newKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

newKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

newKeyUsageWarn() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

newKeyUsageWarn(int) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

NistSecurityLevel - Enum Class in co.ankatech.ankasecure.sdk.model

NIST security levels for post-quantum cryptographic algorithms.

none() - Static method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

An unfiltered listing (all keys of the tenant).

NOTICE - Enum constant in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity

User should be aware and plan for future action.

nullSafe(String) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Returns the input string if it is non-null and non-blank; otherwise returns the literal "(none)".

number() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Returns the value of the number record component.

O

origin() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Returns the value of the origin record component.

OVERWRITE - Enum constant in enum class co.ankatech.ankasecure.sdk.model.OverwritePolicy

Opt-in: atomically replace an existing destination (REPLACE_EXISTING, Windows fallback).

overwritePolicy() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Returns the file-output overwrite policy in effect for this instance.

OverwritePolicy - Enum Class in co.ankatech.ankasecure.sdk.model

Governs how a file-output operation promotes its result onto an already-existing destination (PRD §64).

P

PaginationCeilingExceededException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown by the auto-paginating listAllKeys(filters) when the server reports more pages than the SDK's defensive ceiling allows (ceil(totalElements/size)+1 iterations, hard-capped at 10000 pages).

PaginationCeilingExceededException(long, int) - Constructor for exception co.ankatech.ankasecure.sdk.exception.PaginationCeilingExceededException

performMigrationWorkflow(File, Pkcs7ConversionStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Performs a complete PKCS#7-to-JOSE migration workflow with analysis and conversion.

performMigrationWorkflow(File, Pkcs7ConversionStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

performMigrationWorkflow(File, Pkcs7ConversionStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations

Performs a complete PKCS#7-to-JOSE migration workflow with analysis and conversion.

Pkcs7ExampleFixture - Class in co.ankatech.ankasecure.sdk.examples

Classpath loader for the PKCS#7/CMS example fixture used by the data-plane migration scenarios (ExampleScenario19, ExampleScenario20).

POST_QUANTUM - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category

Quantum-resistant algorithms standardized by NIST.

PqcClientCryptoUtil - Class in co.ankatech.ankasecure.sdk.util

PqcClientCryptoUtil

PqcClientCryptoUtil.GeneratedKeyPair - Record Class in co.ankatech.ankasecure.sdk.util

A record containing both raw key objects (public, private) and their Base64-encoded forms.

PqcHandshakeResult - Class in co.ankatech.ankasecure.sdk.model

Immutable value object returned by PQC hybrid handshake endpoints.

PqcHandshakeResult(byte[], String) - Constructor for class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult

PqcSessionManager - Class in co.ankatech.ankasecure.sdk.transport

Manages PQC transport sessions: generates PQC key pairs, performs handshake, unwraps AES keys, and caches sessions until TTL expires.

PqcSessionManager(AnkaSecureOpenApiClient, PqcTransportConfig, String) - Constructor for class co.ankatech.ankasecure.sdk.transport.PqcSessionManager

Constructs manager with the given client, config, and KEM algorithm.

PqcTransportConfig - Class in co.ankatech.ankasecure.sdk.transport

Configuration holder for PQC transport encryption settings.

PqcTransportConfig(Properties) - Constructor for class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

Reads PQC transport settings from provided CLI properties.

PqcTransportInterceptor - Class in co.ankatech.ankasecure.sdk.transport

OkHttp Interceptor that transparently encrypts request bodies and decrypts response bodies when PQC transport encryption is enabled.

PqcTransportInterceptor(PqcTransportConfig, PqcSessionManager) - Constructor for class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor

PqcTransportSession - Class in co.ankatech.ankasecure.sdk.transport

Internal representation of a PQC transport session: holds sessionId, AES key, and creation timestamp.

printDecryptMeta(DecryptResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints decryption metadata extracted from a full DecryptResult, preceded by a section header.

printDecryptMeta(DecryptResultMetadata) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints decryption operation metadata to stdout.

printDecryptVerifyMeta(DecryptVerifyResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints metadata for a decrypt-then-verify combined operation, showing both the decryption layer and the verification layer.

printEncryptMeta(EncryptResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints encryption operation metadata to stdout.

printReencryptMeta(ReencryptResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints re-encryption metadata showing both the old and new key and algorithm details.

printResignMeta(ResignResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints re-signature metadata showing both the old and new key and algorithm details.

printSignEncryptMeta(SignEncryptResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints metadata for a sign-then-encrypt combined operation, showing both the signature layer and the encryption layer.

printSignMeta(SignResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints signature operation metadata to stdout.

printSignMeta(String, SignResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints signature metadata preceded by a contextual heading.

printVerifyMeta(VerifySignatureResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints signature verification metadata to stdout.

printVerifyMeta(String, VerifySignatureResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints signature verification metadata preceded by a contextual heading and including the validity flag.

printWarnings(List<CryptoWarning>) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints a list of warning messages to stdout.

privateKey() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Returns the value of the privateKey record component.

publicKey() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Returns the value of the publicKey record component.

publicKeyBase64() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Returns the value of the publicKeyBase64 record component.

Q

QualifiedTimestampInfo - Class in co.ankatech.ankasecure.sdk.model

Informational view of an embedded RFC 3161 qualified timestamp (JAdES sigTst) reported by a verification operation (PRD §60).

QualifiedTimestampInfo(boolean, String, String, String, String) - Constructor for class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

Creates an immutable qualified-timestamp view.

R

rawMessage() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

Returns the value of the rawMessage record component.

readBytes(Path) - Static method in class co.ankatech.ankasecure.sdk.util.FileIO

readUtf8(Path) - Static method in class co.ankatech.ankasecure.sdk.util.FileIO

Reads the entire file as UTF-8 and trims trailing line breaks exactly like String.trim().

RECOMMENDED - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status

Production-ready algorithm actively maintained and recommended for new keys.

recommendedAction() - Method in interface co.ankatech.ankasecure.sdk.model.warning.CryptoWarning

Returns the recommended action to address this warning.

recommendedAction() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

recommendedAction() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

recommendedAction() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

reencrypt(String, String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-encrypts data with a different key without decrypting to plaintext.

reencrypt(String, String) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

REENCRYPT_DEGENERATE_SAME_KID - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Degenerate same-kid rotation rejected by the SDK's ReencryptInvariantGuard (defense-in-depth on top of the server-side REENCRYPT-as-first-class invariant).

reencryptBytes(String, String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

Re-encrypt a JWE in memory so it becomes protected by newKid.

reencryptFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-encrypts a file.

reencryptFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

reencryptFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-encrypts a file with forced compact format.

reencryptFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

reencryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-encrypts a file with forced streaming format.

reencryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

Server-side re-encryption of a ciphertext with a new key.

reencryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

ReencryptResult - Class in co.ankatech.ankasecure.sdk.model

Result of a re-encryption operation.

ReencryptResult() - Constructor for class co.ankatech.ankasecure.sdk.model.ReencryptResult

requireKid(String) - Method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys

Returns the named pre-provisioned kid, asserting it is present in the ankasecure.demo.kids catalogue.

requiresKeyImport() - Method in class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult

Checks if the analyzed PKCS#7 file requires private key imports.

resign(String, String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-signs data with a different key without verifying the original signature.

resign(String, String) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

resign(String, String, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-signs a JWS, explicitly selecting the JWS serialization (PRD §60).

resign(String, String, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

Re-signs a JWS with an explicit JWS serialization selection (PRD §60).

resignBytes(String, String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

Re-sign a Compact JWS switching to newKid.

resignBytes(String, String, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

resignFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

resignFile(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

resignFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-signs a compact JWS file with forced compact format.

resignFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

resignFileCompact(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-signs a JWS file (attached), explicitly selecting the JWS serialization (PRD §60).

resignFileCompact(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

Re-signs a file with an explicit JWS serialization selection (PRD §60).

resignFileStream(Path, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-signs a detached JWS signature with forced streaming format.

resignFileStream(Path, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

resignFileStream(Path, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

ResignResult - Class in co.ankatech.ankasecure.sdk.model

Result of a re-signature operation.

ResignResult() - Constructor for class co.ankatech.ankasecure.sdk.model.ResignResult

restricted() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Returns the value of the restricted record component.

RuntimeGuard - Class in co.ankatech.ankasecure.sdk.internal

RuntimeGuard() - Constructor for class co.ankatech.ankasecure.sdk.internal.RuntimeGuard

S

SdkErrorCode - Enum Class in co.ankatech.ankasecure.sdk.exception

High-level, protocol-agnostic error categories recognised by the SDK.

SecretBuffer - Class in co.ankatech.ankasecure.sdk.security

Owning wrapper for a sensitive byte[].

SecretBuffer(byte[]) - Constructor for class co.ankatech.ankasecure.sdk.security.SecretBuffer

Takes ownership of the supplied array.

SecretChars - Class in co.ankatech.ankasecure.sdk.security

Owning wrapper for a sensitive char[] (typically passwords, passphrases, or other character-secret material returned by System.console().readPassword() or by JCA APIs that operate on char[]).

SecretChars(char[]) - Constructor for class co.ankatech.ankasecure.sdk.security.SecretChars

Takes ownership of the supplied array.

setAdvisory(String) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setAlg(String) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

setCategory(AlgorithmInfo.Category) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setDecryptAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the algorithm used for decryption.

setDecryptedData(byte[]) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the decrypted plaintext bytes.

setDecryptKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the key identifier requested for decryption.

setDecryptMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the key-material version that performed the decryption.

setDecryptWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets warnings related to the decryption operation.

setEncryptAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the algorithm used for encryption.

setEncryptKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the key identifier requested for encryption.

setEncryptMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the key-material version that performed the encryption operation.

setEncryptWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets warnings related to the encryption operation.

setGcmTagVerdict(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the outer AES-GCM tag integrity dimension.

setJweToken(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the nested JWE(JWS) token.

setKeyOps(List<String>) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

setKty(String) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

setQualifiedTimestamp(QualifiedTimestampInfo) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the embedded qualified timestamp from the inner JWS.

setSecurityLevel(Integer) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setSignAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the algorithm used for signing.

setSignAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the algorithm used for signing.

setSignatureValid(boolean) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets whether signature verification succeeded.

setSignatureVerdict(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the inner JWS signature integrity dimension.

setSignerInfo(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets additional signer information.

setSigningKey(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the key identifier used for signing.

setSignKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the key identifier requested for signing.

setSignMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the key-material version that performed the signing operation.

setSignWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets warnings related to the signing operation.

setStandards(List<String>) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setStatus(AlgorithmInfo.Status) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setSunsetDate(LocalDate) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setVerifyMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the key-material version that performed the signature verification.

setVerifyWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets warnings related to the signature verification operation.

setWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

severity() - Method in interface co.ankatech.ankasecure.sdk.model.warning.CryptoWarning

Returns the severity level of this warning.

severity() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

severity() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

severity() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

SharedHttpClient - Class in co.ankatech.ankasecure.sdk

Centralized HTTP client configuration for the AnkaSecure SDK.

SharedHttpClient(Properties) - Constructor for class co.ankatech.ankasecure.sdk.SharedHttpClient

Constructs a shared HTTP client with configuration loaded from properties.

sig() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

sign(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs raw bytes using the key identified by kid.

sign(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Signs raw bytes using the key identified by kid.

sign(String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs raw bytes, explicitly selecting the JWS serialization (PRD §60).

sign(String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Signs raw bytes with an explicit JWS serialization selection (PRD §60).

SignatureOperations - Class in co.ankatech.ankasecure.sdk.operations

Signature and verification operations facade.

SignatureOperations(InternalServiceFactory, AnkaSecureOpenApiClient, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.SignatureOperations

SignatureServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl

Thread-safe implementation of SignatureService.

SignatureServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

Convenience constructor using the default OverwritePolicy.FAIL_IF_EXISTS policy.

SignatureServiceImpl(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

signBytes(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

Sign an in-memory payload with a server-side **private** key.

signBytes(String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

SignEncryptResult - Class in co.ankatech.ankasecure.sdk.model

Result of a sign-then-encrypt combined operation.

SignEncryptResult() - Constructor for class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Default constructor initializing empty warning lists.

signFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs a file.

signFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

signFile(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

signFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs a file with forced compact format.

signFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Signs a file using the key identified by kid.

signFileCompact(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs a file (attached), explicitly selecting the JWS serialization (PRD §60).

signFileCompact(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Signs a file with an explicit JWS serialization selection (PRD §60).

signFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs a file with forced streaming format.

signFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

signFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Signs a file in streaming mode (designed for large files >100 MB).

SignResult - Class in co.ankatech.ankasecure.sdk.model

Immutable result returned by signing operations.

SignResult.Builder - Class in co.ankatech.ankasecure.sdk.model

Builder for constructing immutable SignResult instances.

signThenEncrypt(String, String, byte[]) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs then encrypts data in a single operation (nested JWE containing JWS).

signThenEncrypt(String, String, byte[]) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

signThenEncrypt(String, String, byte[]) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

signThenEncrypt(String, String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs then encrypts, explicitly selecting the inner-JWS serialization (PRD §60).

signThenEncrypt(String, String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

signThenEncrypt(String, String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

Signs then encrypts with an explicit inner-JWS serialization selection (PRD §60).

signThenEncryptFile(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

signThenEncryptFile(String, String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

signThenEncryptFileCompact(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs then encrypts a file with forced compact format.

signThenEncryptFileCompact(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

signThenEncryptFileCompact(String, String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs a file then encrypts it, explicitly selecting the inner-JWS serialization (PRD §60).

signThenEncryptFileCompact(String, String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

Signs a file then encrypts it with an explicit inner-JWS serialization selection (PRD §60).

signThenEncryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs a file then encrypts it in streaming mode (nested JWE(JWS), bounded memory) — the large-file counterpart of AuthenticatedSdk.signThenEncryptFileCompact(String, String, Path, Path).

signThenEncryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

signThenEncryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

StaleSidecarException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown when a streaming / atomic file-output operation cannot create its quarantine sidecar (<destination>.part) because a file already exists at the sidecar path — the signature of a stale sidecar orphaned by a prior crashed or force-killed operation (the CREATE_NEW sidecar is normally deleted on BOTH the success and the fail-closed paths, so a surviving one indicates an earlier abnormal termination).

StaleSidecarException(Path, Path, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.StaleSidecarException

Constructs a new stale-sidecar exception.

STANDARD - Enum constant in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode

status() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Returns the value of the status record component.

STREAMING - Enum constant in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode

StreamingApiClient - Class in co.ankatech.ankasecure.sdk.client

Extended ApiClient with streaming optimizations.

StreamingApiClient() - Constructor for class co.ankatech.ankasecure.sdk.client.StreamingApiClient

Creates a new StreamingApiClient with default configuration.

StreamingApiClient(ApiClient) - Constructor for class co.ankatech.ankasecure.sdk.client.StreamingApiClient

Creates a new StreamingApiClient based on an existing ApiClient.

StreamIntegrityException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown when a streaming file-output operation cannot commit its result because the server-emitted end-of-stream integrity verdict did not pass (fail-closed).

StreamIntegrityException(String, String, String, String, String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException

Constructs a new streaming-integrity exception.

streamsAreEqual(InputStream, InputStream) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Compares two input streams byte-by-byte to determine whether they contain identical content.

T

TEMP_DIR - Static variable in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Working directory for the temporary artefacts produced by examples.

TIMEOUT - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Network stack detected a connect, read, or write timeout.

toDualMeta(Headers) - Static method in class co.ankatech.ankasecure.sdk.meta.HeaderMetaParser

Converts response headers from a dual-key streaming operation (re-encrypt, re-sign) into a DualKeyMeta.

toJson(Object) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Serialises an object to its JSON string representation using the SDK's internal JSON mapper (ISO-8601 dates, pretty-print).

TokenRevokedException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown when the server rejects a previously-issued access token with HTTP 401 on a data-plane operation.

TokenRevokedException(String, int, String, Throwable, Map<String, String>, SdkErrorCode, Long) - Constructor for exception co.ankatech.ankasecure.sdk.exception.TokenRevokedException

Constructs a token-revoked exception carrying the full HTTP diagnostic context, delegating to AnkaSecureSdkException's canonical constructor.

toSingleMeta(Headers) - Static method in class co.ankatech.ankasecure.sdk.meta.HeaderMetaParser

Converts response headers from a single-key streaming operation (encrypt, decrypt, sign, verify) into a SingleKeyMeta.

toString() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

toString() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

toString() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair

toString() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

toString() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

toString() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Returns string representation for debugging.

toString() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Returns a string representation of this record class.

toString() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Returns a string representation of this record class.

toString() - Method in class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult

Returns a human-readable summary of the migration workflow results.

toString() - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

toString() - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult

toString() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

toString() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Returns string representation for debugging.

toString() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

toString() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

Returns a string representation of this record class.

toString() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

Returns a string representation of this record class.

toString() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

Returns a string representation of this record class.

toString() - Method in class co.ankatech.ankasecure.sdk.security.BearerToken

Returns a redacted representation of the token.

toString() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Returns a string representation of this record class.

totalElements() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Returns the value of the totalElements record component.

totalPages() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Returns the value of the totalPages record component.

tryUnset(String) - Static method in class co.ankatech.ankasecure.sdk.security.EnvScrubber

Attempts to remove the named environment variable from the JVM's in-memory environment map(s).

U

UNKNOWN - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Failure that cannot be classified into SdkErrorCode.TIMEOUT, SdkErrorCode.IO, or SdkErrorCode.HTTP.

UsageLimitWarning - Record Class in co.ankatech.ankasecure.sdk.model.warning

Warning indicating that a cryptographic key is approaching its usage limit.

UsageLimitWarning(int) - Constructor for record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

Creates an instance of a UsageLimitWarning record class.

UtilityOperations - Class in co.ankatech.ankasecure.sdk.operations

Utility operations facade for PKCS#7 analysis, conversion, and migration.

UtilityOperations(InternalServiceFactory, AnkaSecureOpenApiClient, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.UtilityOperations

V

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.JwsSerialization

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.OverwritePolicy

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity

Returns the enum constant of this class with the specified name.

values() - Static method in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.JwsSerialization

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.OverwritePolicy

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity

Returns an array containing the constants of this enum class, in the order they are declared.

verifySignature(String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Verifies a compact JWS (RFC 7515) signature.

verifySignature(String) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Verifies a compact JWS signature string.

verifySignature(Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Verifies a JWS signature from a file, accepting either the compact form or the JWS-JSON form (serialization-agnostic; PRD §60).

verifySignature(Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

verifySignatureBytes(String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

Verify a Compact JWS that is fully in memory.

verifySignatureFile(Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Verifies a JWS signature from a file (compact or JWS-JSON).

VerifySignatureResult - Class in co.ankatech.ankasecure.sdk.model

VerifySignatureResult

VerifySignatureResult() - Constructor for class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

verifySignatureStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Verifies a detached JWS signature with forced streaming format.

verifySignatureStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

verifySignatureStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Verifies a detached signature in streaming mode (designed for large files >100 MB).

verifySignatureUtilityStream(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Verifies a signature using a provided public key (without requiring key in ANKASecure).

verifySignatureUtilityStream(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

verifySignatureUtilityStream(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

verifySignatureUtilityStream(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Verifies a signature using an external public key (utility operation).

verifyWithExternalPublicKey(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

versionSafe(Integer) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Returns the material version as a string if it is non-null; otherwise returns the literal "n/a" (e.g. utility mode, or streaming flows where the version rides the JOSE artefact).

W

WARNING - Enum constant in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity

Action should be taken soon to avoid potential issues.

warnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Sets the list of warnings.

warnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Sets the list of warnings.

WarningSeverity - Enum Class in co.ankatech.ankasecure.sdk.model.warning

Severity levels for cryptographic warnings.

withAlg(String...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by algorithm names (OR logic).

withCategory(AlgorithmInfo.Category) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by algorithm category.

withKeyOps(String...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by required key operations (AND logic).

withKty(String...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by key types (OR logic).

withMaxSecurityLevel(int) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by maximum NIST security level (inclusive).

withMinSecurityLevel(int) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by minimum NIST security level (inclusive).

withOverwrite() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Convenience wither equivalent to withOverwritePolicy(OverwritePolicy.OVERWRITE): returns a NEW immutable AuthenticatedSdk whose file-output operations atomically replace an existing destination.

withOverwritePolicy(OverwritePolicy) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Returns a NEW immutable AuthenticatedSdk that applies overwritePolicy to every file-output operation, sharing this instance's JWT and HTTP client.

withSecurityLevel(int) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by exact NIST security level.

withStandards(String...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by required standards compliance (AND logic).

withStatus(AlgorithmInfo.Status) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by lifecycle status.

writeBytes(Path, byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.FileIO

writeUtf8(Path, String) - Static method in class co.ankatech.ankasecure.sdk.util.FileIO

Writes the text to the given path using UTF-8, replacing any existing file (same semantics as StandardOpenOption.TRUNCATE_EXISTING).

Z

Zeroization - Class in co.ankatech.ankasecure.sdk.security

Centralized zeroization helpers for the ANKASecure secure-memory layer.

zeroize(byte[]) - Static method in class co.ankatech.ankasecure.sdk.security.Zeroization

Overwrites every element with 0x00.

zeroize(char[]) - Static method in class co.ankatech.ankasecure.sdk.security.Zeroization

Overwrites every element with the space character ' '.

A B C D E F G H I J K L M N O P Q R S T U V W Z
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form