Index

A B C D E F G H I J K L M N O P Q R S T U V W Z
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

accessToken() - Method in class co.ankatech.ankasecure.sdk.auth.CachingTokenSource

accessToken() - Method in class co.ankatech.ankasecure.sdk.auth.SuppliedTokenSource

accessToken() - Method in interface co.ankatech.ankasecure.sdk.auth.TokenSource

Returns a token that is valid now, minting one if none is cached or the cached one is inside the refresh window, and binding whatever it returns to the transport.

ACTOR_KEY_FILE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

A private JWK file for the registered key pair.

ACTOR_KEY_PAIR - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

AuthSetting.ACTOR_KEY_FILE plus AuthSetting.EXPECTED_AUDIENCE.

ADDRESS_NOT_ROUTABLE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule

At least one resolved address is in the egress reject set.

addWarning(CryptoWarning) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Adds a single warning.

addWarning(CryptoWarning) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Adds a single warning.

admit(String) - Static method in class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmission

Admits an external issuer, or refuses it locally.

AdmittedIssuer - Class in co.ankatech.ankasecure.sdk.auth

An external issuer that passed admission, together with the addresses it resolved to at that moment.

AlgorithmCatalogOperations - Class in co.ankatech.ankasecure.sdk.operations

Algorithm catalog operations facade.

AlgorithmCatalogOperations(InternalServiceFactory, TokenSource, BooleanSupplier, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.AlgorithmCatalogOperations

AlgorithmFilter - Class in co.ankatech.ankasecure.sdk.model

Filter criteria for querying supported algorithms from the AnkaSecure platform.

AlgorithmFilter.Builder - Class in co.ankatech.ankasecure.sdk.model

Builder for constructing AlgorithmFilter instances.

AlgorithmInfo - Class in co.ankatech.ankasecure.sdk.model

Immutable value object representing a supported algorithm profile.

AlgorithmInfo() - Constructor for class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

Zero-arg constructor for deserialization frameworks.

AlgorithmInfo.Category - Enum Class in co.ankatech.ankasecure.sdk.model

Category of the algorithm: classical vs. post-quantum vs. hybrid.

AlgorithmInfo.Status - Enum Class in co.ankatech.ankasecure.sdk.model

Lifecycle status as defined by the platform.

AlgorithmPair - Class in co.ankatech.ankasecure.sdk.model

Immutable pair of classical and post-quantum algorithm identifiers.

AlgorithmPair(String, String) - Constructor for class co.ankatech.ankasecure.sdk.model.AlgorithmPair

Creates a new algorithm pair.

algorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Sets the algorithm used.

algorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Sets the algorithm used.

ALLOW_ENV_VALUE - Static variable in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

The one value that enables execution.

ALLOW_ENV_VARIABLE - Static variable in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

The environment variable that must be set to 1 before any command will be executed.

ALLOW_PRIVATE_ENV_VALUE - Static variable in class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmission

The one value that enables it.

ALLOW_PRIVATE_ENV_VARIABLE - Static variable in class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmission

The one variable that admits a loopback issuer.

ALLOW_PROXY_ENV_VALUE - Static variable in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient

The one value that enables it.

ALLOW_PROXY_ENV_VARIABLE - Static variable in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient

The one variable that admits an issuer reached through a proxy, and with it the loss of the address screening.

analyzePkcs7(Pkcs7AnalysisRequest) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Analyzes a PKCS#7 file to extract metadata and certificate information.

analyzePkcs7(Pkcs7AnalysisRequest) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

analyzePkcs7(Pkcs7AnalysisRequest) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations

Analyzes a PKCS#7 structure (compact mode).

analyzePkcs7Stream(Pkcs7AnalysisStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Analyzes a PKCS#7 file using streaming to avoid loading the entire file into memory.

analyzePkcs7Stream(Pkcs7AnalysisStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

analyzePkcs7Stream(Pkcs7AnalysisStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations

Analyzes a PKCS#7 structure (streaming mode for large files).

AnkaJoseUtil - Class in co.ankatech.ankasecure.sdk.jose

Pure client-side conversion helpers between the JOSE Compact Serialization (RFC 7516 §7.1 for JWE / RFC 7515 §7.1 for JWS) and the General JSON Serialization (RFC 7516 §7.2 / RFC 7515 §7.2) used by ANKASecure on the wire.

AnkaSecureSdk - Class in co.ankatech.ankasecure.sdk

Factory for creating authenticated SDK instances.

AnkaSecureSdk(Properties) - Constructor for class co.ankatech.ankasecure.sdk.AnkaSecureSdk

Constructs the SDK factory using the provided CLI properties.

AnkaSecureSdkException - Exception in co.ankatech.ankasecure.sdk.exception

A uniform, localization-ready exception thrown by all public AnkaSecure SDK APIs.

AnkaSecureSdkException(String, int, String, Throwable, Map<String, String>) - Constructor for exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Constructs a new SDK exception with the specified message, HTTP status, response body, cause, and context.

AnkaSecureSdkException(String, int, String, Throwable, Map<String, String>, SdkErrorCode, Long) - Constructor for exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Constructs a new SDK exception with the specified message, HTTP status, response body, cause, context, a specific SDK error code, and the server-provided Retry-After hint.

ApiClientFactory - Class in co.ankatech.ankasecure.sdk.client

Factory for creating configured ApiClient instances.

ApiClientFactory.ClientMode - Enum Class in co.ankatech.ankasecure.sdk.client

argv() - Method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

The exact argv this provider will execute.

authenticate() - Method in class co.ankatech.ankasecure.sdk.AnkaSecureSdk

Authenticates using whatever credential the deployment configured, without being told which.

authenticate(AuthSettings) - Method in class co.ankatech.ankasecure.sdk.AnkaSecureSdk

Authenticates using a caller-supplied configuration view.

authenticate(Properties) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Authenticates using encrypted credentials stored in cli.properties and returns an AuthenticatedSdk.

authenticateApplication(String, SecretChars) - Method in class co.ankatech.ankasecure.sdk.AnkaSecureSdk

Authenticates as an application and returns an authenticated SDK instance.

authenticateApplicationWithKeyPair(String, ClientAssertionSigner, String) - Method in class co.ankatech.ankasecure.sdk.AnkaSecureSdk

Authenticates an application that proves itself with a registered key pair.

AuthenticatedSdk - Class in co.ankatech.ankasecure.sdk

Authenticated SDK instance with immutable JWT token.

authenticateUser(String, SecretChars, String) - Method in class co.ankatech.ankasecure.sdk.AnkaSecureSdk

Authenticates as a user and returns an authenticated SDK instance.

AuthMechanism - Enum Class in co.ankatech.ankasecure.sdk.auth

The credential kind a TokenSource presents at the ANKASecure token endpoint.

AuthSetting - Enum Class in co.ankatech.ankasecure.sdk.auth

Every configuration value the resolution chain reads, and the two names each one answers to.

AuthSettings - Interface in co.ankatech.ankasecure.sdk.auth

A read-only view of the configuration the resolution chain consults.

AuthSettings.Builder - Class in co.ankatech.ankasecure.sdk.auth

Assembles an immutable AuthSettings.

B

BearerToken - Class in co.ankatech.ankasecure.sdk.security

Holder for a JWT bearer token represented as char[] rather than String, with a redacted BearerToken.toString() so accidental log statements do not leak the token verbatim.

BearerToken(char[]) - Constructor for class co.ankatech.ankasecure.sdk.security.BearerToken

Takes ownership of the supplied char array.

build() - Method in class co.ankatech.ankasecure.sdk.auth.AuthSettings.Builder

build() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Builds the AlgorithmFilter instance.

build() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

build() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult.Builder

Builds an immutable DecryptResult instance.

build() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Builds an immutable EncryptResult instance.

build() - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Builds an immutable SignResult instance.

builder() - Static method in interface co.ankatech.ankasecure.sdk.auth.AuthSettings

A builder for callers that hold some values in hand - a decrypted secret, a token they were given - and want the rest resolved from properties and the environment.

builder() - Static method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

Creates a new builder for constructing an AlgorithmFilter.

builder() - Static method in class co.ankatech.ankasecure.sdk.model.DecryptResult

Creates a new builder for constructing DecryptResult instances.

builder() - Static method in class co.ankatech.ankasecure.sdk.model.EncryptResult

Creates a new builder for constructing EncryptResult instances.

builder() - Static method in class co.ankatech.ankasecure.sdk.model.SignResult

Creates a new builder for constructing SignResult instances.

Builder() - Constructor for class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

bytes() - Method in class co.ankatech.ankasecure.sdk.security.SecretBuffer

C

cachedExpiry() - Method in class co.ankatech.ankasecure.sdk.auth.CachingTokenSource

The instant the currently cached token expires.

CachingTokenSource - Class in co.ankatech.ankasecure.sdk.auth

The caching, single-flight, fail-without-poisoning half of every TokenSource, so the three mechanisms differ in exactly one method and cannot drift apart in the parts that are not about the credential at all.

CALL_TIMEOUT - Static variable in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient

The whole-call budget, which is the one that matters here: it covers name resolution, the TLS handshake and every read, so a server that accepts a connection and then stalls the handshake cannot hold this thread indefinitely.

carriesIpv4InLow32(InetAddress) - Static method in class co.ankatech.ankasecure.sdk.auth.RejectedEgressAddresses

The IPv4-COMPATIBLE form (::a.b.c.d, RFC 4291 2.5.5.1, deprecated): an IPv6 address whose high 96 bits are zero, so its low 32 bits ARE an IPv4 address.

chars() - Method in class co.ankatech.ankasecure.sdk.security.BearerToken

chars() - Method in class co.ankatech.ankasecure.sdk.security.SecretChars

CIPHER_INPUT_STREAM_BUFFER_SIZE - Static variable in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

CLASSICAL - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category

Traditional algorithms vulnerable to quantum computers.

clear() - Method in class co.ankatech.ankasecure.sdk.security.BearerToken

Zeroizes the underlying token via Zeroization.zeroize(char[]) (space-fill).

CLIENT_ASSERTION_TYPE - Static variable in class co.ankatech.ankasecure.sdk.security.ClientAssertionSigner

The client_assertion_type form value that selects this credential kind at the token endpoint, as fixed by RFC 7523 §2.2.

CLIENT_CREDENTIALS - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalTokenSourceKind

The workload's own client-credentials grant against its own authorization server.

CLIENT_ID - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

The ANKASecure actor UUID.

CLIENT_SECRET - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

The ANKASecure-issued client secret.

ClientAssertionSigner - Class in co.ankatech.ankasecure.sdk.security

Mints the RFC 7523 §2.2 client assertion that proves an actor's identity with a registered key pair instead of a shared secret.

ClientAssertionSigner(UUID, JWK) - Constructor for class co.ankatech.ankasecure.sdk.security.ClientAssertionSigner

Binds this signer to one actor and one private key.

ClientCredentialsExchangeException - Exception in co.ankatech.ankasecure.sdk.auth

A client-credentials exchange with an external authorization server failed, and this names the PHASE it failed in.

ClientCredentialsExchangeException(ClientCredentialsExchangeException.Phase, String) - Constructor for exception co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException

ClientCredentialsExchangeException(ClientCredentialsExchangeException.Phase, String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException

ClientCredentialsExchangeException.Phase - Enum Class in co.ankatech.ankasecure.sdk.auth

Where in the exchange the failure happened.

ClientCredentialsExternalTokenProvider - Class in co.ankatech.ankasecure.sdk.auth

Obtains an external token by performing the OAuth 2.0 client-credentials grant against the workload's OWN authorization server, and hands it to the federated assertion path.

ClientCredentialsExternalTokenProvider(IssuerHttpClient, String, SecretChars, String, String, Clock) - Constructor for class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider

close() - Method in class co.ankatech.ankasecure.sdk.auth.CachingTokenSource

Discards the cached token.

close() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider

Zeroizes the external client secret and any cached token, and releases the issuer client.

close() - Method in interface co.ankatech.ankasecure.sdk.auth.ExternalTokenProvider

Releases whatever credential material this provider retains.

close() - Method in class co.ankatech.ankasecure.sdk.auth.FederatedAssertionTokenSource

Closes the provider, then this source.

close() - Method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient

Releases this client's connection pool and dispatcher.

close() - Method in class co.ankatech.ankasecure.sdk.auth.NativeSecretTokenSource

close() - Method in class co.ankatech.ankasecure.sdk.auth.SuppliedTokenSource

close() - Method in interface co.ankatech.ankasecure.sdk.auth.TokenSource

Releases any credential this source retains for re-minting, and discards the cached token.

close() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

SDK-006 (secure-memory-cutover Slice 4): clears the bearer token from the underlying AnkaSecureOpenApiClient's HttpBearerAuth.

close() - Method in class co.ankatech.ankasecure.sdk.security.SecretBuffer

Zeroizes the underlying byte[] (overwrites every element with 0x00), nulls the internal field, and marks this wrapper as closed.

close() - Method in class co.ankatech.ankasecure.sdk.security.SecretChars

Zeroizes the underlying char[] (space-fill ' '), nulls the internal field, and marks this wrapper as closed.

close() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession

Best-effort destruction of the underlying AES SecretKey.

co.ankatech.ankasecure.sdk - package co.ankatech.ankasecure.sdk

co.ankatech.ankasecure.sdk.auth - package co.ankatech.ankasecure.sdk.auth

co.ankatech.ankasecure.sdk.client - package co.ankatech.ankasecure.sdk.client

co.ankatech.ankasecure.sdk.examples - package co.ankatech.ankasecure.sdk.examples

co.ankatech.ankasecure.sdk.exception - package co.ankatech.ankasecure.sdk.exception

co.ankatech.ankasecure.sdk.internal - package co.ankatech.ankasecure.sdk.internal

co.ankatech.ankasecure.sdk.internal.service.impl - package co.ankatech.ankasecure.sdk.internal.service.impl

co.ankatech.ankasecure.sdk.jose - package co.ankatech.ankasecure.sdk.jose

co.ankatech.ankasecure.sdk.meta - package co.ankatech.ankasecure.sdk.meta

co.ankatech.ankasecure.sdk.model - package co.ankatech.ankasecure.sdk.model

co.ankatech.ankasecure.sdk.model.warning - package co.ankatech.ankasecure.sdk.model.warning

Structured warning types for cryptographic operations.

co.ankatech.ankasecure.sdk.operations - package co.ankatech.ankasecure.sdk.operations

co.ankatech.ankasecure.sdk.security - package co.ankatech.ankasecure.sdk.security

The ANKASecure SDK secure-memory layer.

co.ankatech.ankasecure.sdk.transport - package co.ankatech.ankasecure.sdk.transport

co.ankatech.ankasecure.sdk.util - package co.ankatech.ankasecure.sdk.util

combinedOperations() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

CombinedOperations - Class in co.ankatech.ankasecure.sdk.operations

Combined cryptographic operations facade.

CombinedOperations(InternalServiceFactory, TokenSource, BooleanSupplier, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.CombinedOperations

CombinedOperationsServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl

Thread-safe implementation of CombinedOperationsService.

CombinedOperationsServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

Convenience constructor using the default OverwritePolicy.FAIL_IF_EXISTS policy.

CombinedOperationsServiceImpl(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

Constructor with dependency injection.

COMMAND - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalTokenSourceKind

A command the operator configured, executed to produce a token on stdout.

CommandExternalTokenProvider - Class in co.ankatech.ankasecure.sdk.auth

Runs a command the operator configured and takes its standard output as the external token.

CommandExternalTokenProvider(List<String>, Duration) - Constructor for class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

COMPACT - Enum constant in enum class co.ankatech.ankasecure.sdk.model.JwsSerialization

RFC 7515 §7.1 Compact Serialization (three dot-separated segments).

compactJweToGeneral(String) - Static method in class co.ankatech.ankasecure.sdk.jose.AnkaJoseUtil

Converts a Compact JWE (5 dot-separated base64url segments) into the General JSON Serialization form as a JSON string.

compactJwsToGeneral(String) - Static method in class co.ankatech.ankasecure.sdk.jose.AnkaJoseUtil

Converts a Compact JWS (3 dot-separated base64url segments) into the General JSON Serialization form as a JSON string.

companions() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

Every companion, required first.

COMPOSITE_KEM_COMBINE - Enum constant in enum class co.ankatech.ankasecure.sdk.model.CompositeMode

The component secrets are combined into a single shared secret through the key derivation function named by KeyMetadata.getKdf().

COMPOSITE_SIGNATURE - Enum constant in enum class co.ankatech.ankasecure.sdk.model.CompositeMode

The components sign independently, and the results are adjudicated by the key's verification policy.

CompositeMode - Enum Class in co.ankatech.ankasecure.sdk.model

How the components of a composite (hybrid) key are combined.

configuredCredential() - Method in class co.ankatech.ankasecure.sdk.AnkaSecureSdk

Reports which credential AnkaSecureSdk.authenticate() would use, without using it.

configuredLinks(AuthSettings) - Static method in class co.ankatech.ankasecure.sdk.auth.TokenSourceChain

Reports which links the given settings configure, in chain order, without building anything.

ConfiguredOriginInterceptor - Class in co.ankatech.ankasecure.sdk.transport

Refuses any request bound for an origin other than the one the SDK was configured with.

ConfiguredOriginInterceptor(String) - Constructor for class co.ankatech.ankasecure.sdk.transport.ConfiguredOriginInterceptor

configureForHighThroughput(ApiClient) - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory

Applies high-throughput configuration to an existing ApiClient.

configureForStreaming(ApiClient) - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory

Applies streaming configuration to an existing ApiClient.

CONNECT_TIMEOUT - Static variable in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient

TCP connect budget.

content() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Returns the value of the content record component.

convertPkcs7ToJose(Pkcs7ConversionRequest) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Converts a PKCS#7 signature to JOSE (JWS) format.

convertPkcs7ToJose(Pkcs7ConversionRequest) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

convertPkcs7ToJose(Pkcs7ConversionRequest) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations

Converts PKCS#7 signed-data to JOSE JWS format (compact mode).

convertPkcs7ToJoseStream(Pkcs7ConversionStreamRequest, File, File) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Converts a PKCS#7 signature to JOSE using streaming.

convertPkcs7ToJoseStream(Pkcs7ConversionStreamRequest, File, File) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

convertPkcs7ToJoseStream(Pkcs7ConversionStreamRequest, File, File) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations

Converts PKCS#7 signed-data to JOSE JWS format (streaming mode for large files).

createClient(ApiClientFactory.ClientMode) - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory

Creates an ApiClient based on the specified mode.

createCustomClient(int, int, int, int, int) - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory

Creates a custom configured ApiClient.

createStandardClient() - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory

Creates a standard ApiClient with default configuration.

credential() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

CREDENTIALS_REFUSED - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase

The token endpoint answered, and refused the external credential.

CRITICAL - Enum constant in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity

Immediate action required to prevent service disruption.

crypto() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

CryptoOperationException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown when a cryptographic operation fails due to local processing errors.

CryptoOperationException(String) - Constructor for exception co.ankatech.ankasecure.sdk.exception.CryptoOperationException

Constructs a new crypto operation exception with the specified message.

CryptoOperationException(String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.CryptoOperationException

Constructs a new crypto operation exception with the specified message and cause.

CryptoPolicyInfo - Class in co.ankatech.ankasecure.sdk.model

Immutable representation of the Crypto-Policy-Info response header.

CryptoPolicyInfo(String, String, int, int, String, String, int, int, boolean) - Constructor for class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

Constructs an instance from the JSON-mapped fields.

CryptoPolicyInfo.Builder - Class in co.ankatech.ankasecure.sdk.model

Fluent builder that mirrors the legacy API, preserving existing unit tests and client code.

CryptoPolicyInfoDecoder - Class in co.ankatech.ankasecure.sdk.meta

Decodes the Base64URL-encoded value of the Crypto-Policy-Info response header into a CryptoPolicyInfo.

CryptoRandomProvider - Class in co.ankatech.ankasecure.sdk.util

Centralized provider for cryptographically secure random number generation.

CryptoServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl

Thread-safe concrete implementation of CryptoService.

CryptoServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

Convenience constructor using the default OverwritePolicy.FAIL_IF_EXISTS policy.

CryptoServiceImpl(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

CryptoWarning - Interface in co.ankatech.ankasecure.sdk.model.warning

Represents a structured cryptographic operation warning.

currentKeyAlgorithm() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

currentKeyAlgorithm(String) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

currentKeyExpWarnDays() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

currentKeyExpWarnDays(int) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

currentKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

currentKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

currentKeyUsageWarn() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

currentKeyUsageWarn(int) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

currentTokenExpiry() - Method in class co.ankatech.ankasecure.sdk.auth.CachingTokenSource

currentTokenExpiry() - Method in interface co.ankatech.ankasecure.sdk.auth.TokenSource

When the token currently in force expires, if this source knows.

D

daysRemaining() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

Returns the value of the daysRemaining record component.

decapsulateKem(PrivateKey, String, byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

Decapsulates and decrypts a ciphertext using the provided PrivateKey.

decode(String) - Static method in class co.ankatech.ankasecure.sdk.meta.CryptoPolicyInfoDecoder

decrypt(String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts a compact JWE (RFC 7516) token to recover the original plaintext.

decrypt(String) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

Decrypts a compact JWE token string.

decryptBytes(String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

Decrypt a Compact JWE that is already in RAM.

decryptDataRaw(byte[], byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

decryptDataRaw(SecretBuffer, byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

SecretBuffer overload of PqcClientCryptoUtil.decryptDataRaw(byte[], byte[]).

decryptedData(byte[]) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult.Builder

Sets the decrypted data (will be defensively copied).

decryptFile(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts a file.

decryptFile(Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

decryptFileCompact(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts a file with forced compact format.

decryptFileCompact(Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

Decrypts a file containing a compact JWE token.

decryptFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts a file with forced streaming format.

decryptFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

Decrypts a JWET multipart file via streaming API.

decryptFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

Decrypts a file in streaming mode (designed for large files >100 MB).

DecryptResult - Class in co.ankatech.ankasecure.sdk.model

Immutable result returned by decryption operations.

DecryptResult.Builder - Class in co.ankatech.ankasecure.sdk.model

Builder for constructing immutable DecryptResult instances.

DecryptResultMetadata - Class in co.ankatech.ankasecure.sdk.model

DecryptResultMetadata

DecryptResultMetadata() - Constructor for class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

decryptThenVerify(String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts a JWE then verifies the inner JWS signature.

decryptThenVerify(String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

decryptThenVerify(String) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

decryptThenVerifyFile(Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

decryptThenVerifyFileCompact(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts and verifies a nested JWE(JWS) file with forced compact format.

decryptThenVerifyFileCompact(Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

decryptThenVerifyFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Decrypts a nested JWE(JWS) file then verifies the inner signature in streaming mode — the large-file counterpart of AuthenticatedSdk.decryptThenVerifyFileCompact(Path, Path), and the inverse of AuthenticatedSdk.signThenEncryptFileStream(String, String, Path, Path).

decryptThenVerifyFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

decryptThenVerifyFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

DecryptVerifyResult - Class in co.ankatech.ankasecure.sdk.model

Result of a decrypt-then-verify combined operation.

DecryptVerifyResult() - Constructor for class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Default constructor initializing empty warning lists.

DEFAULT_TIMEOUT - Static variable in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

Applied when the configuration names no timeout.

describe() - Method in class co.ankatech.ankasecure.sdk.auth.AdmittedIssuer

An operator-facing description of the issuer, safe to log and to put in a diagnostic context map: the origin and the path, and nothing else.

describe() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider

The issuer, which is the diagnostic an operator needs; never the client id or the secret.

describe() - Method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

describe() - Method in class co.ankatech.ankasecure.sdk.auth.ExplicitExternalTokenProvider

describe() - Method in interface co.ankatech.ankasecure.sdk.auth.ExternalTokenProvider

A short operator-facing description of WHERE the token comes from - a path, a command name, an issuer - for diagnostics.

describe() - Method in class co.ankatech.ankasecure.sdk.auth.FileExternalTokenProvider

DestinationExistsException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown when a file-output operation cannot commit its result because a file already exists at the destination and FAIL_IF_EXISTS (the default) is in effect.

DestinationExistsException(Path, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.DestinationExistsException

Constructs a new destination-collision exception.

destroyIfPossible(Object) - Static method in class co.ankatech.ankasecure.sdk.security.Zeroization

Calls Destroyable.destroy() if the supplied object implements Destroyable and is not yet destroyed.

disabledByConfiguration() - Static method in exception co.ankatech.ankasecure.sdk.exception.Http2RequiredException

The configuration-refusal form: HTTP/2 was disabled by configuration, so a streaming request cannot be honoured.

DISCOVERY_MALFORMED - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase

A response arrived but is not a usable discovery document: a non-200 status, a redirect, a body that is not JSON, a missing member, an issuer that is not the configured one, or a token_endpoint that is absent or not an absolute https URL.

DISCOVERY_UNREACHABLE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase

The discovery document could not be fetched at all - no HTTP status was obtained.

E

encrypt(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Encrypts raw bytes using the key identified by kid.

encrypt(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

Encrypts raw bytes using the key identified by kid.

encryptBytes(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

Encrypt raw bytes with a server-side **public** key.

EncryptCredentials - Class in co.ankatech.ankasecure.sdk.examples

One-shot utility: encrypts a clientId + clientSecret using the same PBKDF2 + AES-GCM scheme as ExampleUtil and prints the four lines that must be pasted into cli.properties.

encryptDataRaw(byte[], byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

encryptDataRaw(SecretBuffer, byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

SecretBuffer overload of PqcClientCryptoUtil.encryptDataRaw(byte[], byte[]).

encryptFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Encrypts a file.

encryptFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

encryptFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Encrypts a file with forced compact format.

encryptFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

Encrypts a file using the key identified by kid.

encryptFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Encrypts a file with forced streaming format.

encryptFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

encryptFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

Encrypts a file in streaming mode (designed for large files >100 MB).

encryptFileUtilityStream(String, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Encrypts a file using a provided public key (without requiring key in ANKASecure).

encryptFileUtilityStream(String, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

encryptFileUtilityStream(String, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

EncryptionOperations - Class in co.ankatech.ankasecure.sdk.operations

Encryption and decryption operations facade.

EncryptionOperations(InternalServiceFactory, TokenSource, BooleanSupplier, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.EncryptionOperations

EncryptResult - Class in co.ankatech.ankasecure.sdk.model

Immutable result returned by encryption operations.

EncryptResult.Builder - Class in co.ankatech.ankasecure.sdk.model

Builder for constructing immutable EncryptResult instances.

encryptWithExternalPublicKey(String, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

ensure() - Static method in class co.ankatech.ankasecure.sdk.internal.RuntimeGuard

ensureTempDir() - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Ensures that the ExampleUtil.TEMP_DIR directory exists, creating it (and any parent directories) if necessary.

ensureTempDir(Path) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Ensures that the given directory exists, creating it (and any parent directories) if necessary.

envelopedDataBase64() - Static method in class co.ankatech.ankasecure.sdk.examples.Pkcs7ExampleFixture

Returns the fixture as a Base64 string, suitable for the compact-mode request fields Pkcs7AnalysisRequest.pkcs7Data / Pkcs7ConversionRequest.pkcs7Data.

envelopedDataBytes() - Static method in class co.ankatech.ankasecure.sdk.examples.Pkcs7ExampleFixture

Loads the raw DER bytes of the packaged EnvelopedData fixture from the classpath.

environment(UnaryOperator<String>) - Method in class co.ankatech.ankasecure.sdk.auth.AuthSettings.Builder

Replaces the environment lookup.

environmentVariable() - Method in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

The environment variable this setting answers to.

EnvScrubber - Class in co.ankatech.ankasecure.sdk.security

Best-effort removal of an environment variable from the JVM's process environment map after the variable has been read.

equals(Object) - Method in record class co.ankatech.ankasecure.sdk.auth.MintedToken

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult

Constant-time equality check on sessionId only.

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Indicates whether some other object is "equal to" this one.

ExampleComplete - Class in co.ankatech.ankasecure.sdk.examples

Runs all SDK example scenarios in sequence and provides a comprehensive summary.

ExampleFailedException - Exception in co.ankatech.ankasecure.sdk.examples

Signals that an example scenario could not complete.

ExampleFailedException(String) - Constructor for exception co.ankatech.ankasecure.sdk.examples.ExampleFailedException

Creates a new instance with no cause, no stack trace and no suppression.

ExampleMenu - Class in co.ankatech.ankasecure.sdk.examples

Console entry-point that lets you run any of the sample scenarios packaged with the AnkaSecure SDK.

ExamplePlaygroundKeys - Class in co.ankatech.ankasecure.sdk.examples

Resolves PRE-PROVISIONED playground key ids for the realigned data-plane examples.

ExampleScenario1 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 1 — End-to-End ML-KEM-512 Encryption (Streaming).

ExampleScenario10 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 10 — ML-KEM-1024 Bulk Helpers (Compact JWE).

ExampleScenario11 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 11 — ML-DSA-87 Bulk Helpers (Compact JWS).

ExampleScenario12 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 12 — ML-DSA-65 → SLH-DSA-SHA2-128S Streaming Re-sign (Detached JWS).

ExampleScenario13 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 13 — Runtime Discovery of PQC Algorithms.

ExampleScenario14 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 14 — In-Memory Post-Quantum Crypto (Compact JWE/JWS).

ExampleScenario15 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 15 — Compact-Token Rotation (RSA-3072 → ML-KEM-768).

ExampleScenario16 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 16 — XMSS Streaming Detached JWS Verification.

ExampleScenario17 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 17 — Sign-Then-Encrypt Nested Operations, Compact (data-plane).

ExampleScenario18 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 18 — Use Composite Hybrid Keys for Quantum-Resistant Security (data-plane).

ExampleScenario19 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 19 — PKCS#7/CMS Structural Analysis (data-plane).

ExampleScenario2 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 2 — RSA-2048 Streaming Sign / Verify.

ExampleScenario20 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 20 — PKCS#7 → JOSE Conversion / Migration (data-plane).

ExampleScenario21 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 21 — Sign-Then-Encrypt Nested Operations, Streaming (data-plane).

ExampleScenario3 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 3 — AES-256 Streaming Encrypt / Decrypt.

ExampleScenario4 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 4 — Streaming Re-encrypt (RSA-3072 → ML-KEM-768).

ExampleScenario5 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 5 — ML-KEM-512 Bulk Helpers (Compact JWE).

ExampleScenario6 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 6 — ML-DSA-87 Bulk Helpers (Compact JWS).

ExampleScenario7 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 7 — AES-256 Compact JWE Helpers.

ExampleScenario8 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 8 — ML-KEM-768 → ML-KEM-1024 Bulk Re-encryption (auto-detect / Compact JWE).

ExampleScenario9 - Class in co.ankatech.ankasecure.sdk.examples

Scenario 9 — RSA-3072 → ML-DSA-87 Bulk Re-sign (Compact JWS).

ExampleUtil - Class in co.ankatech.ankasecure.sdk.examples

Shared utilities for all ANKASecure© SDK example scenarios.

executionAllowed() - Static method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

True when the process environment carries the opt-in.

EXPECTED_AUDIENCE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

The audience the deployment returned when that key pair was registered.

EXPERIMENTAL - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status

Preview or beta algorithm not ready for production use.

EXPLICIT_VALUE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalTokenSourceKind

The token itself, supplied directly by the consumer or by configuration.

ExplicitExternalTokenProvider - Class in co.ankatech.ankasecure.sdk.auth

The token itself, held in memory.

ExplicitExternalTokenProvider(SecretChars) - Constructor for class co.ankatech.ankasecure.sdk.auth.ExplicitExternalTokenProvider

Takes a defensive copy of the supplied token so the caller's own close does not empty this provider.

EXTERNAL_AUDIENCE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

The audience the external authorization server must mint the token for.

EXTERNAL_CLIENT_CREDENTIALS - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

AuthSetting.EXTERNAL_ISSUER - the workload's own authorization server, at which this SDK performs the client-credentials grant with the workload's own secret.

EXTERNAL_CLIENT_ID - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

The client id registered at that external authorization server.

EXTERNAL_CLIENT_SECRET - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

The client secret for that registration - the workload's own credential at its own issuer, never anything of ANKASecure's.

EXTERNAL_ISSUER - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

The workload's OWN authorization server, as an https origin and path.

EXTERNAL_SCOPE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

The scope to request from the external authorization server, when it needs one.

EXTERNAL_TOKEN - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

An externally minted token supplied verbatim.

EXTERNAL_TOKEN - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

AuthSetting.EXTERNAL_TOKEN - the token, supplied verbatim.

EXTERNAL_TOKEN_COMMAND - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

A command that prints the current token to standard output.

EXTERNAL_TOKEN_COMMAND - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

AuthSetting.EXTERNAL_TOKEN_COMMAND - a command that prints the token.

EXTERNAL_TOKEN_COMMAND_TIMEOUT_MILLIS - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

How long that command may take, in milliseconds.

EXTERNAL_TOKEN_FILE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

A file an external agent writes the current token into.

EXTERNAL_TOKEN_FILE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

AuthSetting.EXTERNAL_TOKEN_FILE - a file holding the current token.

ExternalIssuerAdmission - Class in co.ankatech.ankasecure.sdk.auth

Decides whether this process may talk to an external authorization server at all, and refuses locally - before a socket exists - when it may not.

ExternalIssuerAdmissionException - Exception in co.ankatech.ankasecure.sdk.auth

An external issuer was refused before any connection was opened, and this names the rule that refused it.

ExternalIssuerAdmissionException(ExternalIssuerAdmissionException.Rule, String) - Constructor for exception co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException

ExternalIssuerAdmissionException(ExternalIssuerAdmissionException.Rule, String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException

The same refusal, carrying the failure that produced it.

ExternalIssuerAdmissionException.Rule - Enum Class in co.ankatech.ankasecure.sdk.auth

The admission rules, one per way an issuer can be refused.

externalKind() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

Which external source kind this link names, if any - a declared mapping, never a name correspondence.

ExternalTokenException - Exception in co.ankatech.ankasecure.sdk.auth

An externally minted token could not be obtained from its configured source.

ExternalTokenException(String) - Constructor for exception co.ankatech.ankasecure.sdk.auth.ExternalTokenException

ExternalTokenException(String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.auth.ExternalTokenException

ExternalTokenProvider - Interface in co.ankatech.ankasecure.sdk.auth

Supplies an externally minted token that some OTHER authorization server issued to this workload.

ExternalTokenSourceKind - Enum Class in co.ankatech.ankasecure.sdk.auth

Where an externally minted token comes from.

F

FAIL_IF_EXISTS - Enum constant in enum class co.ankatech.ankasecure.sdk.model.OverwritePolicy

Default: refuse to clobber an existing destination (atomic-rename is the TOCTOU guard).

fatal(String, Throwable) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Reports a fatal error on stderr and aborts the scenario by throwing ExampleFailedException.

FEDERATED_ASSERTION - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthMechanism

An externally minted token - issued by Auth0, Entra, Okta, Keycloak, Cognito or any other OAuth 2.0 / OIDC authorization server the deployment trusts - presented as a client_assertion under the federated assertion type.

FederatedAssertionTokenSource - Class in co.ankatech.ankasecure.sdk.auth

Presents a token some OTHER authorization server issued to this workload - Auth0, Entra, Okta, Keycloak, Cognito, or anything else the deployment has declared it trusts.

FederatedAssertionTokenSource(AnkaSecureOpenApiClient, String, ExternalTokenProvider) - Constructor for class co.ankatech.ankasecure.sdk.auth.FederatedAssertionTokenSource

fetchExternalToken() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider

fetchExternalToken() - Method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

fetchExternalToken() - Method in class co.ankatech.ankasecure.sdk.auth.ExplicitExternalTokenProvider

fetchExternalToken() - Method in interface co.ankatech.ankasecure.sdk.auth.ExternalTokenProvider

Produces the current external token.

fetchExternalToken() - Method in class co.ankatech.ankasecure.sdk.auth.FileExternalTokenProvider

FILE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalTokenSourceKind

A file an external agent writes and refreshes; the SDK reads it on every mint.

FileExternalTokenProvider - Class in co.ankatech.ankasecure.sdk.auth

Reads an externally minted token from a file the operator named.

FileExternalTokenProvider(Path) - Constructor for class co.ankatech.ankasecure.sdk.auth.FileExternalTokenProvider

FileIO - Class in co.ankatech.ankasecure.sdk.util

Centralised UTF-8 file I/O utility for the ANKASecure SDK.

forIssuer(AdmittedIssuer) - Static method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient

Builds the issuer client for an admitted issuer, trusting the platform's certificate authorities and nothing else.

FRAGMENT_PRESENT - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule

Carries a fragment.

from(QualifiedTimestamp) - Static method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

Maps a generated OpenAPI QualifiedTimestamp to this public view.

from(Properties, AuthenticatedSdk) - Static method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys

Builds a resolver from the loaded cli.properties and an authenticated SDK.

fromLevel(int) - Static method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Parses a security level from its numeric value.

G

generalJweToCompact(String) - Static method in class co.ankatech.ankasecure.sdk.jose.AnkaJoseUtil

Converts a General JSON Serialization JWE (as a JSON string) into the Compact Serialization (5 dot-separated segments).

generalJwsToCompact(String) - Static method in class co.ankatech.ankasecure.sdk.jose.AnkaJoseUtil

Converts a General JSON Serialization JWS (as a JSON string) into the Compact Serialization (3 dot-separated segments).

GENERATED - Enum constant in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin

Key natively created by AnkaSecure platform using generate-key endpoint.

GeneratedKeyPair(PublicKey, PrivateKey, String) - Constructor for record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Creates an instance of a GeneratedKeyPair record class.

generateKeyPair(String) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil

Generates an asymmetric key pair for a specified algorithm, potentially referencing PQC or classical algorithms.

GenericWarning - Record Class in co.ankatech.ankasecure.sdk.model.warning

Generic warning for messages that don't match known patterns.

GenericWarning(String) - Constructor for record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

Creates an instance of a GenericWarning record class.

get() - Static method in class co.ankatech.ankasecure.sdk.util.CryptoRandomProvider

Returns the singleton SecureRandom instance.

getAdvisory() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

getAesKey() - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult

Returns a direct reference to the AES-256 key bytes.

getAesKey() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession

getAlg() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getAlg() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

getAlg() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the algorithm identifier.

getAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

getAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult

Returns the algorithm negotiated by the server for this encryption operation (e.g.

getAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.SignResult

Returns the signature algorithm negotiated by the service (e.g.

getAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

getAnalysis() - Method in class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult

Returns the complete PKCS#7 analysis response.

getBitSecurity() - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Returns the equivalent symmetric key strength in bits.

getCategory() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getCategory() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

Returns the algorithm category.

getClassicalAlgorithm() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair

Returns the classical algorithm in this pair.

getCompositeMode() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

Returns the composite constructions to match (OR logic), as wire tokens.

getCompositeMode() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

Returns how this entry's components are combined, for a hybrid algorithm.

getCompositeMode() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns how a composite key's components are combined.

getContext() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Returns additional context information provided with this exception.

getCorrelationId() - Method in exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException

Returns the request correlation id, for cross-service tracing.

getCreatedAt() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the key creation timestamp.

getCreatedAt() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession

getDecryptAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets the algorithm used for decryption.

getDecryptedData() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult

Returns the raw decrypted bytes.

getDecryptedData() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Returns the decrypted plaintext bytes.

getDecryptKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets the key identifier requested for decryption.

getDecryptMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets the key-material version (ank_kv) that performed the decryption under the requested Stable KID.

getDecryptWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets structured warnings related to the decryption operation.

getDescription() - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Returns a human-readable description of this security level.

getDestination() - Method in exception co.ankatech.ankasecure.sdk.exception.DestinationExistsException

Returns the destination path that already exists.

getDestination() - Method in exception co.ankatech.ankasecure.sdk.exception.StaleSidecarException

Returns the final destination the blocked write targeted.

getEncryptAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets the algorithm used for encryption.

getEncryptKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets the key identifier requested for encryption.

getEncryptMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets the key-material version (ank_kv) that performed the encryption operation under the requested Stable KID.

getEncryptWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets structured warnings related to the encryption operation.

getErrorCode() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Returns the specific SDK error code categorizing this failure.

getExpiresAt() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the hard expiration timestamp.

getExportable() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns whether the key can be exported.

getGcmTagVerdict() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Returns the outer AES-GCM tag integrity dimension of the streaming decrypt-verify result.

getGenTime() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

getHandshakeEndpoint() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

getHttpStatus() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Returns the HTTP status code returned by the remote service.

getJoseOutput() - Method in class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult

Returns the output file containing converted JOSE data.

getJweToken() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult

Returns the raw Compact JWE exactly as emitted by the server.

getJweToken() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the new compact JWE token after re-encryption.

getJweToken() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Returns the nested JWE(JWS) token.

getJwsToken() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the new compact JWS token after re-signing.

getJwsToken() - Method in class co.ankatech.ankasecure.sdk.model.SignResult

Returns the raw Compact JWS exactly as issued by the server.

getKdf() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the key derivation function for composite KEM keys.

getKeyMetadata(String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Retrieves metadata for a specific key.

getKeyMetadata(String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl

getKeyMetadata(String) - Method in class co.ankatech.ankasecure.sdk.operations.KeyManagementOperations

Retrieves complete metadata for a specific key.

getKeyOps() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getKeyOps() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

Returns an unmodifiable copy to protect internal state.

getKeyOps() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the permitted key operations.

getKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

getKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult

Returns the key identifier originally supplied by the client.

getKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.SignResult

Returns the key identifier originally requested by the client.

getKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

getKid() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the unique key identifier.

getKty() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getKty() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

getKty() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the key type.

getLevel() - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Returns the numeric security level.

getMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

getMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult

Returns the key-material version (ank_kv) that performed the operation under the requested Stable KID; null when not resolvable (e.g. utility mode) — never 0.

getMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.SignResult

Returns the key-material version (ank_kv) that performed the operation under the requested Stable KID; null when not resolvable (e.g. utility mode) — never 0.

getMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

getMaxSecurityLevel() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getMaxUsageLimit() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the hard usage limit.

getMeta() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult

Returns the full metadata returned by the service.

getMinSecurityLevel() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getNewKeyAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the hybrid algorithm used for encryption.

getNewKeyAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the algorithm used for signing.

getNewKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the original key identifier requested for encryption.

getNewKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the key identifier originally requested for signing.

getOldKeyAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the hybrid algorithm used for decryption.

getOldKeyAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the algorithm used for verification.

getOldKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the original key identifier requested for decryption.

getOldKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the key identifier originally requested for verification.

getOperation() - Method in exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException

Returns the operation whose end-of-stream verdict failed.

getOrigin() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the key origin.

getPolicyOid() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

getPqcAlgorithm() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair

Returns the PQC algorithm in this pair.

getProviderInfo() - Static method in class co.ankatech.ankasecure.sdk.util.CryptoRandomProvider

Returns information about the underlying random provider.

getQualifiedTimestamp() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Returns the embedded RFC 3161 qualified timestamp from the inner JWS, when present.

getQualifiedTimestamp() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

Returns the embedded RFC 3161 qualified timestamp, when present.

getReason() - Method in exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException

Returns the server's oracle-safe reason for the failing verdict.

getResponseBody() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Returns the full response body returned by the remote service.

getRestricted() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns whether the key is restricted (legacy format).

getRetryAfterSeconds() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Returns the server-provided Retry-After hint, in integer seconds.

getSecurityLevel() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

getSerialNumber() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

getSession() - Method in class co.ankatech.ankasecure.sdk.transport.PqcSessionManager

Returns an active session, or performs a new handshake if none exists or TTL expired.

getSessionId() - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult

Returns the opaque session identifier for follow-up calls.

getSessionId() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession

getSessionTtl() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

getSidecar() - Method in exception co.ankatech.ankasecure.sdk.exception.StaleSidecarException

Returns the stale sidecar path that blocked the write.

getSignAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets the algorithm used for signing (from JWS header).

getSignAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets the algorithm used for signing.

getSignatureResults() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

Per-signature verification results — see VerifySignatureResult.signatureResults.

getSignatureVerdict() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Returns the inner JWS signature integrity dimension of the streaming decrypt-verify result.

getSignerInfo() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets additional signer information (if present in JWS claims).

getSigningKey() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets the key identifier used for signing (from JWS header).

getSignKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets the key identifier requested for signing.

getSignMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets the key-material version (ank_kv) that performed the signing operation under the requested Stable KID.

getSignWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Gets structured warnings related to the signing operation.

getSoftLimitExpiration() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the soft expiration (warning threshold) timestamp.

getSoftUsageLimit() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the soft usage limit (warning threshold).

getSourceMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the key-material version that decrypted the original payload under the source Stable KID.

getSourceMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the key-material version that verified the original signature under the source Stable KID.

getStandards() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getStandards() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

Returns an unmodifiable copy to protect internal state.

getStatus() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

getStatus() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

getStatus() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the current lifecycle status, as the published key-status token.

getSunsetDate() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

getSupportedAlgorithms() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Retrieves the complete list of cryptographic algorithms supported by the server.

getSupportedAlgorithms() - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl

getSupportedAlgorithms() - Method in class co.ankatech.ankasecure.sdk.operations.AlgorithmCatalogOperations

Retrieves the complete catalog of cryptographic algorithms supported by the server.

getSupportedAlgorithms(AlgorithmFilter) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Retrieves cryptographic algorithms matching the specified filter criteria.

getSupportedAlgorithms(AlgorithmFilter) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl

getSupportedAlgorithms(AlgorithmFilter) - Method in class co.ankatech.ankasecure.sdk.operations.AlgorithmCatalogOperations

Retrieves supported algorithms matching the specified filter criteria.

getTargetMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns the PRIMARY key-material version that encrypted the new payload under the target Stable KID.

getTargetMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns the PRIMARY key-material version that signed the new payload under the target Stable KID.

getTokenExpiration() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Extracts the expiration time from the JWT token.

getTotalElements() - Method in exception co.ankatech.ankasecure.sdk.exception.PaginationCeilingExceededException

getTotalPages() - Method in exception co.ankatech.ankasecure.sdk.exception.PaginationCeilingExceededException

getTrustStatus() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

getUsageCount() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Returns the current usage counter.

getVerdict() - Method in exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException

Returns the verdict outcome.

getVerifyMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets the key-material version (ank_kv) that performed the signature verification under the requested Stable KID.

getVerifyWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Gets structured warnings related to the signature verification operation.

getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

Returns structured warnings encountered during the decryption operation.

getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult

Returns structured warnings encountered during the encryption operation.

getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Returns non-fatal warnings encountered during the re-encryption operation.

getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult

Returns non-fatal warnings encountered during the re-signing operation.

getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignResult

Returns structured warnings encountered during the signing operation.

getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

Returns structured warnings encountered during signature verification.

H

HARD_PAGE_CAP - Static variable in exception co.ankatech.ankasecure.sdk.exception.PaginationCeilingExceededException

Defensive hard cap on auto-pagination (10,000 pages × 200 = 2,000,000 keys).

hasAnyWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Checks if there are any warnings (decrypt or verify).

hasAnyWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Checks if there are any warnings (sign or encrypt).

hasCachedToken() - Method in class co.ankatech.ankasecure.sdk.auth.CachingTokenSource

Whether a token is currently cached.

hasCachedToken() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider

Whether a token is currently cached.

hasDecryptWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Checks if decryption operation produced warnings.

hasEncryptWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Checks if encryption operation produced warnings.

hasFilters() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

Checks if any filter criteria are set.

hashCode() - Method in record class co.ankatech.ankasecure.sdk.auth.MintedToken

Returns a hash code value for this object.

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Returns a hash code value for this object.

hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Returns a hash code value for this object.

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

hashCode() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

Returns a hash code value for this object.

hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

Returns a hash code value for this object.

hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

Returns a hash code value for this object.

hashCode() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Returns a hash code value for this object.

hasSignWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Checks if signing operation produced warnings.

hasVerifyWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Checks if verification operation produced warnings.

HEADER_KEM - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor

Header that tells the server which KEM algorithm to use.

HEADER_SESSION - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor

Header that carries the PQC session identifier.

HEADER_TRANSPORT - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor

Header that indicates the payload is PQC-encrypted.

HeaderMetaParser - Class in co.ankatech.ankasecure.sdk.meta

Utility class that converts the Crypto-Policy-Info response header emitted by all streaming endpoints into the immutable SDK metadata objects required by client code.

HIGH_THROUGHPUT - Enum constant in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode

host() - Method in class co.ankatech.ankasecure.sdk.auth.AdmittedIssuer

The host the pinned addresses belong to, as a resolver key: an IPv6 literal appears here WITHOUT its brackets, because that is the form a Dns implementation is asked for.

HOST_DOES_NOT_RESOLVE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule

The host does not resolve, so there is nothing that could be pinned.

HTTP - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Remote endpoint replied with an HTTP 4xx (client error) or 5xx (server error).

Http2RequiredException - Exception in co.ankatech.ankasecure.sdk.exception

A streaming request that requires HTTP/2 was about to be sent over a connection that negotiated something else, and was refused before any request byte was written.

Http2RequiredException(String) - Constructor for exception co.ankatech.ankasecure.sdk.exception.Http2RequiredException

HYBRID - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category

Composite algorithms combining classical and post-quantum components.

I

IMPORTED - Enum constant in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin

Key imported from external source (PKCS#12, JWK, PEM, etc.).

INFO - Enum constant in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity

Informational message, no action required.

intercept(Interceptor.Chain) - Method in class co.ankatech.ankasecure.sdk.transport.ConfiguredOriginInterceptor

intercept(Interceptor.Chain) - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor

InternalServiceFactory - Class in co.ankatech.ankasecure.sdk.internal

InternalServiceFactory(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

Convenience factory using the default OverwritePolicy.FAIL_IF_EXISTS write policy.

InternalServiceFactory(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

invalidate() - Method in class co.ankatech.ankasecure.sdk.auth.CachingTokenSource

Discards the cached token and unbinds it from the transport.

invalidate() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider

Discards the cached token so the next call fetches a fresh one.

invalidate() - Method in interface co.ankatech.ankasecure.sdk.auth.ExternalTokenProvider

Discards anything this provider has cached, so the next call produces a fresh token.

invalidate() - Method in class co.ankatech.ankasecure.sdk.auth.FederatedAssertionTokenSource

Discards this source's ANKASecure token AND anything the provider cached.

invalidate() - Method in class co.ankatech.ankasecure.sdk.auth.SuppliedTokenSource

invalidate() - Method in interface co.ankatech.ankasecure.sdk.auth.TokenSource

Discards the cached token and unbinds it from the transport, so the next TokenSource.accessToken() mints a fresh one.

invalidateSession() - Method in class co.ankatech.ankasecure.sdk.transport.PqcSessionManager

Invalidates the current session, forcing handshake on next request.

InvalidInputException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown when input validation fails for SDK operations.

InvalidInputException(String) - Constructor for exception co.ankatech.ankasecure.sdk.exception.InvalidInputException

Constructs a new invalid input exception with the specified message.

InvalidInputException(String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.InvalidInputException

Constructs a new invalid input exception with the specified message and cause.

invocationsRemaining() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

Returns the value of the invocationsRemaining record component.

IO - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Generic I/O problem during HTTP communication.

isCarrierGradeNat(InetAddress) - Static method in class co.ankatech.ankasecure.sdk.auth.RejectedEgressAddresses

Carrier-grade NAT (100.64.0.0/10, RFC 6598).

isCleared() - Method in class co.ankatech.ankasecure.sdk.security.BearerToken

isClosed() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

isClosed() - Method in class co.ankatech.ankasecure.sdk.security.SecretBuffer

isClosed() - Method in class co.ankatech.ankasecure.sdk.security.SecretChars

isClosed() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession

isCompleteSuccess() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Checks if operation completed successfully with no issues.

isComposite() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Checks if this is a composite key.

isCompositeKem() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Checks if this is a composite KEM key.

isCompositeSignature() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata

Checks if this is a composite signature key.

isEnabled() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

isExternalTokenSource() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

isIpv4TransitionPrefix(InetAddress) - Static method in class co.ankatech.ankasecure.sdk.auth.RejectedEgressAddresses

The fixed, well-known IPv6 prefixes that CARRY or ALIAS an IPv4 address - the transition mechanisms.

isMigrationMode() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult

Indicates whether the operation ran in migration mode.

isNonRoutable(InetAddress) - Static method in class co.ankatech.ankasecure.sdk.auth.RejectedEgressAddresses

Loopback, any-local, link-local (including the 169.254.169.254 cloud metadata address), site-local (RFC 1918), IPv6 unique-local (fc00::/7) or multicast.

isPresent() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

isPresent(AuthSetting) - Method in interface co.ankatech.ankasecure.sdk.auth.AuthSettings

Whether a setting is configured, WITHOUT producing its value.

isRejectedEgressTarget(InetAddress) - Static method in class co.ankatech.ankasecure.sdk.auth.RejectedEgressAddresses

The EGRESS reject set - the FOUR disjuncts, composed once.

isSignatureValid() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Checks if the signature verification succeeded.

issuer() - Method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient

IssuerHttpClient - Class in co.ankatech.ankasecure.sdk.auth

The SECOND HTTP client: the one that talks to the external authorization server, and to nothing else.

isTokenExpiredLocally() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Checks whether the access token has expired, or is about to, according to its local exp claim only.

isValid() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

Indicates whether verification succeeded both cryptographically and against server-side policy checks.

J

JSON - Enum constant in enum class co.ankatech.ankasecure.sdk.model.JwsSerialization

RFC 7515 §7.2 JWS JSON Serialization (able to carry a JAdES timestamp).

jweToken(String) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Sets the JWE token (required).

JwsSerialization - Enum Class in co.ankatech.ankasecure.sdk.model

JWS serialization representation requested for an attached signing operation (PRD §60).

jwsToken(String) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Sets the JWS token (required).

K

KEY_ENABLED - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

KEY_HANDSHAKE_ENDPOINT - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

KEY_SESSION_TTL - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

KEY_TYPE - Static variable in enum class co.ankatech.ankasecure.sdk.model.CompositeMode

The single coarse key type every composite key and every hybrid catalogue entry publishes.

KeyExpirationWarning - Record Class in co.ankatech.ankasecure.sdk.model.warning

Warning indicating that a cryptographic key is approaching expiration.

KeyExpirationWarning(int) - Constructor for record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

Creates an instance of a KeyExpirationWarning record class.

KeyFilters - Record Class in co.ankatech.ankasecure.sdk.model

Server-side filters for the key listing endpoints.

KeyFilters(String, Boolean, String, String) - Constructor for record class co.ankatech.ankasecure.sdk.model.KeyFilters

Creates an instance of a KeyFilters record class.

KeyManagementOperations - Class in co.ankatech.ankasecure.sdk.operations

Key management operations facade.

KeyManagementOperations(InternalServiceFactory, TokenSource, BooleanSupplier, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.KeyManagementOperations

KeyManagementServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl

Thread-safe implementation of KeyManagementService.

KeyManagementServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl

KeyMetadata - Class in co.ankatech.ankasecure.sdk.model

Metadata for a cryptographic key in the ANKASecure platform.

KeyMetadata(String, String, CompositeMode, String, String, List<String>, Boolean, KeyOrigin, Boolean, String, ZonedDateTime, ZonedDateTime, ZonedDateTime, Integer, Integer, Integer) - Constructor for class co.ankatech.ankasecure.sdk.model.KeyMetadata

Constructor for internal SDK use.

KeyOrigin - Enum Class in co.ankatech.ankasecure.sdk.model

Indicates how a cryptographic key was created or acquired.

KeyPage - Record Class in co.ankatech.ankasecure.sdk.model

One page of a key listing, mirroring the server's paginated envelope.

KeyPage(List<KeyMetadata>, long, int, int) - Constructor for record class co.ankatech.ankasecure.sdk.model.KeyPage

Creates an instance of a KeyPage record class.

keyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Sets the requested key identifier.

keyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Sets the requested key identifier.

keys() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

kidForAlgorithm(String) - Method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys

Returns the first pre-provisioned kid whose algorithm equals alg (case-insensitive).

kidForAlgorithmAndOp(String, String) - Method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys

Returns the first pre-provisioned kid whose algorithm equals alg AND whose keyOps include keyOp — for picking between keys that share an algorithm but differ in operation (e.g. distinct cross-kid endpoints).

kids() - Method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys

The pre-provisioned playground kids, in file order.

kind() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider

The source kind this provider presents, as a declared mapping rather than a name.

kind() - Method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

kind() - Method in class co.ankatech.ankasecure.sdk.auth.ExplicitExternalTokenProvider

kind() - Method in interface co.ankatech.ankasecure.sdk.auth.ExternalTokenProvider

Which of the configured source kinds this provider is, or null for a consumer-supplied provider that is none of them.

kind() - Method in class co.ankatech.ankasecure.sdk.auth.FileExternalTokenProvider

kty() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Returns the value of the kty record component.

L

last() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

true when this is the last page (or the listing is empty).

LEGACY - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status

Deprecated algorithm maintained for backward compatibility only.

length() - Method in class co.ankatech.ankasecure.sdk.security.SecretBuffer

length() - Method in class co.ankatech.ankasecure.sdk.security.SecretChars

LEVEL_1 - Enum constant in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

NIST Security Level 1 - Equivalent to AES-128 (128-bit security).

LEVEL_3 - Enum constant in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

NIST Security Level 3 - Equivalent to AES-192 (192-bit security).

LEVEL_5 - Enum constant in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

NIST Security Level 5 - Equivalent to AES-256 (256-bit security).

lifetime() - Method in record class co.ankatech.ankasecure.sdk.auth.MintedToken

Returns the value of the lifetime record component.

listAllKeys(KeyFilters) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Lists ALL keys matching the filters by auto-paginating through the server's paginated listing (the AWS-CLI pattern: the API pages, the client iterates).

listAllKeys(KeyFilters) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl

listAllKeys(KeyFilters) - Method in class co.ankatech.ankasecure.sdk.operations.KeyManagementOperations

Lists ALL keys matching the filters via client-side auto-pagination (bounded; throws PaginationCeilingExceededException beyond the hard cap).

listKeys(KeyFilters, int, int) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Lists ONE PAGE of the keys accessible to the authenticated client.

listKeys(KeyFilters, int, int) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl

listKeys(KeyFilters, int, int) - Method in class co.ankatech.ankasecure.sdk.operations.KeyManagementOperations

Lists ONE PAGE of keys with optional server-side filters (applied BEFORE pagination — the page totals are filtered, tenant-scoped counts).

loadProperties() - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Loads CLI properties using the following look-up order: A cli.properties file in the current working directory. The file pointed to by the cli.config system property. A /cli.properties resource on the classpath.

LOOPBACK_WITHOUT_OPT_IN - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule

Every resolved address is loopback and the environment opt-in is not set.

M

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.EncryptCredentials

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleComplete

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleMenu

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario1

Runs the ML-KEM-512 streaming encryption scenario on a pre-provisioned key.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario10

Runs the ML-KEM-1024 compact JWE encrypt/decrypt scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario11

Runs the ML-DSA-87 compact JWS sign/verify scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario12

Runs the ML-DSA-65 to SLH-DSA-SHA2-128S streaming re-sign scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario13

Runs the runtime PQC algorithm discovery scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario14

Runs the in-memory post-quantum crypto scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario15

Runs the compact-token rotation scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario16

Runs the XMSS streaming detached JWS verification scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario17

Runs the sign-then-encrypt nested operations scenario on pre-provisioned keys.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario18

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario19

Runs the PKCS#7/CMS structural-analysis scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario2

Runs the RSA-2048 streaming sign/verify scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario20

Runs the PKCS#7 → JOSE conversion / migration scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario21

Runs the streaming sign-then-encrypt / decrypt-then-verify scenario on pre-provisioned keys.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario3

Runs the AES-256 streaming encrypt/decrypt scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario4

Runs the RSA-3072 to ML-KEM-768 streaming re-encryption scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario5

Runs the ML-KEM-512 compact JWE encrypt/decrypt scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario6

Runs the ML-DSA-87 compact JWS sign/verify scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario7

Runs the AES-256 compact JWE encrypt/decrypt scenario.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario8

Runs the ML-KEM-768 to ML-KEM-1024 re-encryption scenario on the granted pair.

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario9

Runs the RSA-3072 to ML-DSA-87 compact JWS re-sign scenario.

materializeToTempFile() - Static method in class co.ankatech.ankasecure.sdk.examples.Pkcs7ExampleFixture

Materializes the fixture to a temporary File under ExampleUtil.TEMP_DIR, for the streaming APIs that take a java.io.File.

materialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Sets the key-material version that performed the operation.

materialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Sets the key-material version that performed the operation.

MAX_TIMEOUT - Static variable in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

A configured timeout above this is lowered to it.

mechanism() - Method in class co.ankatech.ankasecure.sdk.auth.FederatedAssertionTokenSource

mechanism() - Method in class co.ankatech.ankasecure.sdk.auth.NativeSecretTokenSource

mechanism() - Method in class co.ankatech.ankasecure.sdk.auth.PrivateKeyJwtTokenSource

mechanism() - Method in class co.ankatech.ankasecure.sdk.auth.SuppliedTokenSource

mechanism() - Method in interface co.ankatech.ankasecure.sdk.auth.TokenSource

Names the credential kind this source presents.

mechanism() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

meetsMinimum(NistSecurityLevel) - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Checks if this security level meets or exceeds a minimum required level.

message() - Method in interface co.ankatech.ankasecure.sdk.model.warning.CryptoWarning

Returns a human-readable warning message.

message() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

message() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

message() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

meta(DecryptResultMetadata) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult.Builder

Sets the metadata.

migration() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

migrationMode() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

migrationMode(boolean) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

MigrationServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl

MigrationServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

Convenience constructor using the default OverwritePolicy.FAIL_IF_EXISTS policy.

MigrationServiceImpl(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

MigrationWorkflowResult - Class in co.ankatech.ankasecure.sdk.model

Immutable response model returned by combined PKCS#7 migration workflows.

MigrationWorkflowResult() - Constructor for class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult

Default constructor for SDK internal use.

MigrationWorkflowResult(Pkcs7AnalysisResponse, File) - Constructor for class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult

Constructs a new migration workflow result with the specified analysis and JOSE output.

MIN_TIMEOUT - Static variable in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

A configured timeout below this is raised to it; a command needs some room to start.

MintedToken - Record Class in co.ankatech.ankasecure.sdk.auth

One ANKASecure access token together with the lifetime the issuer stated for it.

MintedToken(BearerToken, Duration) - Constructor for record class co.ankatech.ankasecure.sdk.auth.MintedToken

Creates an instance of a MintedToken record class.

MULTIRECIPIENT_NOT_COMPACT_REPRESENTABLE - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Multi-recipient JWE / multi-signature JWS rejected by the SDK's Compact-format public API surface (architect D-A2).

N

NATIVE_CLIENT_SECRET - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthMechanism

RFC 6749 §4.4 client credentials: an ANKASecure-issued client_secret posted with grant_type=client_credentials.

NATIVE_CLIENT_SECRET - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

AuthSetting.CLIENT_SECRET - the platform's own credential.

NativeSecretTokenSource - Class in co.ankatech.ankasecure.sdk.auth

Presents an ANKASecure-issued client_secret - the platform's own credential, and the last link of the resolution chain.

NativeSecretTokenSource(AnkaSecureOpenApiClient, String, SecretChars) - Constructor for class co.ankatech.ankasecure.sdk.auth.NativeSecretTokenSource

newKeyAlgorithm() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

newKeyAlgorithm(String) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

newKeyExpWarnDays() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

newKeyExpWarnDays(int) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

newKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

newKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

newKeyUsageWarn() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

newKeyUsageWarn(int) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder

NistSecurityLevel - Enum Class in co.ankatech.ankasecure.sdk.model

NIST security levels for post-quantum cryptographic algorithms.

none() - Static method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

An unfiltered listing (all keys of the tenant).

NOT_A_URL - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule

Absent, blank, or not parseable as an HTTP URL at all.

NOTICE - Enum constant in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity

User should be aware and plan for future action.

nullSafe(String) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Returns the input string if it is non-null and non-blank; otherwise returns the literal "(none)".

number() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Returns the value of the number record component.

O

of(Properties) - Static method in interface co.ankatech.ankasecure.sdk.auth.AuthSettings

Settings backed by a properties object with the process environment as fallback.

okHttpClient() - Method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient

The underlying client.

optionalCompanions() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

ORDER - Static variable in class co.ankatech.ankasecure.sdk.auth.TokenSourceChain

The chain, in the order it is evaluated.

origin() - Method in class co.ankatech.ankasecure.sdk.auth.AdmittedIssuer

The origin the issuer client is pinned to.

origin() - Method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient

origin() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Returns the value of the origin record component.

origin() - Method in class co.ankatech.ankasecure.sdk.transport.ConfiguredOriginInterceptor

The origin this interceptor pins to, for diagnostics.

overlay(Properties) - Method in class co.ankatech.ankasecure.sdk.auth.AuthSettings.Builder

Uses these properties as the middle precedence tier.

OVERWRITE - Enum constant in enum class co.ankatech.ankasecure.sdk.model.OverwritePolicy

Opt-in: atomically replace an existing destination (REPLACE_EXISTING, Windows fallback).

overwritePolicy() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Returns the file-output overwrite policy in effect for this instance.

OverwritePolicy - Enum Class in co.ankatech.ankasecure.sdk.model

Governs how a file-output operation promotes its result onto an already-existing destination (PRD §64).

P

PaginationCeilingExceededException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown by the auto-paginating listAllKeys(filters) when the server reports more pages than the SDK's defensive ceiling allows (ceil(totalElements/size)+1 iterations, hard-capped at 10000 pages).

PaginationCeilingExceededException(long, int) - Constructor for exception co.ankatech.ankasecure.sdk.exception.PaginationCeilingExceededException

path() - Method in class co.ankatech.ankasecure.sdk.auth.FileExternalTokenProvider

The file this provider reads.

performMigrationWorkflow(File, Pkcs7ConversionStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Performs a complete PKCS#7-to-JOSE migration workflow with analysis and conversion.

performMigrationWorkflow(File, Pkcs7ConversionStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

performMigrationWorkflow(File, Pkcs7ConversionStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations

Performs a complete PKCS#7-to-JOSE migration workflow with analysis and conversion.

permits(HttpUrl) - Method in class co.ankatech.ankasecure.sdk.transport.ConfiguredOriginInterceptor

Whether a URL is on the configured origin.

phase() - Method in exception co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException

The phase that failed.

pinnedAddresses() - Method in class co.ankatech.ankasecure.sdk.auth.AdmittedIssuer

The addresses admission resolved and screened.

Pkcs7ExampleFixture - Class in co.ankatech.ankasecure.sdk.examples

Classpath loader for the PKCS#7/CMS example fixture used by the data-plane migration scenarios (ExampleScenario19, ExampleScenario20).

POST_QUANTUM - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category

Quantum-resistant algorithms standardized by NIST.

PqcClientCryptoUtil - Class in co.ankatech.ankasecure.sdk.util

PqcClientCryptoUtil

PqcClientCryptoUtil.GeneratedKeyPair - Record Class in co.ankatech.ankasecure.sdk.util

A record containing both raw key objects (public, private) and their Base64-encoded forms.

PqcHandshakeResult - Class in co.ankatech.ankasecure.sdk.model

Immutable value object returned by PQC hybrid handshake endpoints.

PqcHandshakeResult(byte[], String) - Constructor for class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult

PqcSessionManager - Class in co.ankatech.ankasecure.sdk.transport

Manages PQC transport sessions: generates PQC key pairs, performs handshake, unwraps AES keys, and caches sessions until TTL expires.

PqcSessionManager(AnkaSecureOpenApiClient, PqcTransportConfig, String) - Constructor for class co.ankatech.ankasecure.sdk.transport.PqcSessionManager

Constructs manager with the given client, config, and KEM algorithm.

PqcTransportConfig - Class in co.ankatech.ankasecure.sdk.transport

Configuration holder for PQC transport encryption settings.

PqcTransportConfig(Properties) - Constructor for class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

Reads PQC transport settings from provided CLI properties.

PqcTransportInterceptor - Class in co.ankatech.ankasecure.sdk.transport

OkHttp Interceptor that transparently encrypts request bodies and decrypts response bodies when PQC transport encryption is enabled.

PqcTransportInterceptor(PqcTransportConfig, PqcSessionManager) - Constructor for class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor

PqcTransportSession - Class in co.ankatech.ankasecure.sdk.transport

Internal representation of a PQC transport session: holds sessionId, AES key, and creation timestamp.

prepareWorkingDir() - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prepares the shared working directory for the current JVM.

printDecryptMeta(DecryptResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints decryption metadata extracted from a full DecryptResult, preceded by a section header.

printDecryptMeta(DecryptResultMetadata) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints decryption operation metadata to stdout.

printDecryptVerifyMeta(DecryptVerifyResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints metadata for a decrypt-then-verify combined operation, showing both the decryption layer and the verification layer.

printEncryptMeta(EncryptResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints encryption operation metadata to stdout.

printReencryptMeta(ReencryptResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints re-encryption metadata showing both the old and new key and algorithm details.

printResignMeta(ResignResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints re-signature metadata showing both the old and new key and algorithm details.

printSignEncryptMeta(SignEncryptResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints metadata for a sign-then-encrypt combined operation, showing both the signature layer and the encryption layer.

printSignMeta(SignResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints signature operation metadata to stdout.

printSignMeta(String, SignResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints signature metadata preceded by a contextual heading.

printVerifyMeta(VerifySignatureResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints signature verification metadata to stdout.

printVerifyMeta(String, VerifySignatureResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints signature verification metadata preceded by a contextual heading and including the validity flag.

printWarnings(List<CryptoWarning>) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Prints a list of warning messages to stdout.

PRIVATE_KEY_JWT - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthMechanism

RFC 7523 §2.2 private-key JWT: an assertion this process signs with a key pair whose public half the platform holds.

privateIssuerAllowed() - Static method in class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmission

Whether this process environment permits a loopback external issuer.

privateKey() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Returns the value of the privateKey record component.

PrivateKeyJwtTokenSource - Class in co.ankatech.ankasecure.sdk.auth

Signs an RFC 7523 §2.2 assertion with a key pair this process holds and presents that.

PrivateKeyJwtTokenSource(AnkaSecureOpenApiClient, String, ClientAssertionSigner, String) - Constructor for class co.ankatech.ankasecure.sdk.auth.PrivateKeyJwtTokenSource

propertyKey() - Method in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

The key this setting answers to in a properties file.

provider() - Method in class co.ankatech.ankasecure.sdk.auth.FederatedAssertionTokenSource

Where this source reads its external token.

proxiedIssuerAllowed() - Static method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient

Whether this process environment permits reaching an external issuer through a proxy.

publicKey() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Returns the value of the publicKey record component.

publicKeyBase64() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Returns the value of the publicKeyBase64 record component.

put(AuthSetting, String) - Method in class co.ankatech.ankasecure.sdk.auth.AuthSettings.Builder

Supplies a value directly, taking precedence over properties and the environment.

putLazySecret(AuthSetting, Supplier<SecretChars>) - Method in class co.ankatech.ankasecure.sdk.auth.AuthSettings.Builder

Registers a credential that is EXPENSIVE or FALLIBLE to produce - one that has to be decrypted, unsealed or fetched - so that it is produced only if something actually needs it.

putSecret(AuthSetting, SecretChars) - Method in class co.ankatech.ankasecure.sdk.auth.AuthSettings.Builder

Supplies a credential directly.

Q

QualifiedTimestampInfo - Class in co.ankatech.ankasecure.sdk.model

Informational view of an embedded RFC 3161 qualified timestamp (JAdES sigTst) reported by a verification operation (PRD §60).

QualifiedTimestampInfo(boolean, String, String, String, String) - Constructor for class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

Creates an immutable qualified-timestamp view.

QUERY_PRESENT - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule

Carries a query string.

R

rawMessage() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

Returns the value of the rawMessage record component.

READ_TIMEOUT - Static variable in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient

Per-read budget once a connection exists.

readBytes(Path) - Static method in class co.ankatech.ankasecure.sdk.util.FileIO

readUtf8(Path) - Static method in class co.ankatech.ankasecure.sdk.util.FileIO

Reads the entire file as UTF-8 and trims trailing line breaks exactly like String.trim().

RECOMMENDED - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status

Production-ready algorithm actively maintained and recommended for new keys.

recommendedAction() - Method in interface co.ankatech.ankasecure.sdk.model.warning.CryptoWarning

Returns the recommended action to address this warning.

recommendedAction() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

recommendedAction() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

recommendedAction() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

reencrypt(String, String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-encrypts data with a different key without decrypting to plaintext.

reencrypt(String, String) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

REENCRYPT_DEGENERATE_SAME_KID - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Degenerate same-kid rotation rejected by the SDK's ReencryptInvariantGuard (defense-in-depth on top of the server-side REENCRYPT-as-first-class invariant).

reencryptBytes(String, String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

Re-encrypt a JWE in memory so it becomes protected by newKid.

reencryptFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-encrypts a file.

reencryptFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

reencryptFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-encrypts a file with forced compact format.

reencryptFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

reencryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-encrypts a file with forced streaming format.

reencryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl

Server-side re-encryption of a ciphertext with a new key.

reencryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

ReencryptResult - Class in co.ankatech.ankasecure.sdk.model

Result of a re-encryption operation.

ReencryptResult() - Constructor for class co.ankatech.ankasecure.sdk.model.ReencryptResult

RejectedEgressAddresses - Class in co.ankatech.ankasecure.sdk.auth

The addresses this SDK will never open a connection to, whatever names a configuration or a response supplies.

requiredCompanions() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

The settings this credential cannot be used without.

requireKid(String) - Method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys

Returns the named pre-provisioned kid, asserting it is present in the ankasecure.demo.kids catalogue.

requiresKeyImport() - Method in class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult

Checks if the analyzed PKCS#7 file requires private key imports.

resetTempDir() - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

resign(String, String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-signs data with a different key without verifying the original signature.

resign(String, String) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

resign(String, String, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-signs a JWS, explicitly selecting the JWS serialization (PRD §60).

resign(String, String, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

Re-signs a JWS with an explicit JWS serialization selection (PRD §60).

resignBytes(String, String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

Re-sign a Compact JWS switching to newKid.

resignBytes(String, String, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

resignFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

resignFile(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

resignFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-signs a compact JWS file with forced compact format.

resignFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

resignFileCompact(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-signs a JWS file (attached), explicitly selecting the JWS serialization (PRD §60).

resignFileCompact(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

Re-signs a file with an explicit JWS serialization selection (PRD §60).

resignFileStream(Path, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Re-signs a detached JWS signature with forced streaming format.

resignFileStream(Path, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

resignFileStream(Path, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

ResignResult - Class in co.ankatech.ankasecure.sdk.model

Result of a re-signature operation.

ResignResult() - Constructor for class co.ankatech.ankasecure.sdk.model.ResignResult

resolve(AnkaSecureOpenApiClient, AuthSettings) - Static method in class co.ankatech.ankasecure.sdk.auth.TokenSourceChain

Builds the token source the configuration calls for.

restricted() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Returns the value of the restricted record component.

rule() - Method in exception co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException

The rule that refused the issuer.

RuntimeGuard - Class in co.ankatech.ankasecure.sdk.internal

RuntimeGuard() - Constructor for class co.ankatech.ankasecure.sdk.internal.RuntimeGuard

S

SCHEME_NOT_HTTPS - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule

Parseable, but not https.

screenIssuerText(String) - Static method in class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmission

Applies the literal rules -- everything decidable from the text -- and nothing else.

SdkErrorCode - Enum Class in co.ankatech.ankasecure.sdk.exception

High-level, protocol-agnostic error categories recognised by the SDK.

secret(AuthSetting) - Method in interface co.ankatech.ankasecure.sdk.auth.AuthSettings

Returns a setting whose value is a credential, wrapped so the caller can close it.

SecretBuffer - Class in co.ankatech.ankasecure.sdk.security

Owning wrapper for a sensitive byte[].

SecretBuffer(byte[]) - Constructor for class co.ankatech.ankasecure.sdk.security.SecretBuffer

Takes ownership of the supplied array.

SecretChars - Class in co.ankatech.ankasecure.sdk.security

Owning wrapper for a sensitive char[] (typically passwords, passphrases, or other character-secret material returned by System.console().readPassword() or by JCA APIs that operate on char[]).

SecretChars(char[]) - Constructor for class co.ankatech.ankasecure.sdk.security.SecretChars

Takes ownership of the supplied array.

selected(AuthSettings) - Static method in class co.ankatech.ankasecure.sdk.auth.TokenSourceChain

The link that would answer, applying the order and the ambiguity rule.

setAdvisory(String) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setAlg(String) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

setCategory(AlgorithmInfo.Category) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setCompositeMode(CompositeMode) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setDecryptAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the algorithm used for decryption.

setDecryptedData(byte[]) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the decrypted plaintext bytes.

setDecryptKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the key identifier requested for decryption.

setDecryptMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the key-material version that performed the decryption.

setDecryptWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets warnings related to the decryption operation.

setEncryptAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the algorithm used for encryption.

setEncryptKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the key identifier requested for encryption.

setEncryptMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the key-material version that performed the encryption operation.

setEncryptWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets warnings related to the encryption operation.

setGcmTagVerdict(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the outer AES-GCM tag integrity dimension.

setJweToken(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the nested JWE(JWS) token.

setKeyOps(List<String>) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

setKty(String) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

setQualifiedTimestamp(QualifiedTimestampInfo) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the embedded qualified timestamp from the inner JWS.

setSecurityLevel(Integer) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setSignAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the algorithm used for signing.

setSignAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the algorithm used for signing.

setSignatureValid(boolean) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets whether signature verification succeeded.

setSignatureVerdict(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the inner JWS signature integrity dimension.

setSignerInfo(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets additional signer information.

setSigningKey(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the key identifier used for signing.

setSignKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the key identifier requested for signing.

setSignMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets the key-material version that performed the signing operation.

setSignWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Sets warnings related to the signing operation.

setStandards(List<String>) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setStatus(AlgorithmInfo.Status) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setSunsetDate(LocalDate) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

setVerifyMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets the key-material version that performed the signature verification.

setVerifyWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Sets warnings related to the signature verification operation.

setWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

severity() - Method in interface co.ankatech.ankasecure.sdk.model.warning.CryptoWarning

Returns the severity level of this warning.

severity() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

severity() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

severity() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

sig() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory

sign(String) - Method in class co.ankatech.ankasecure.sdk.security.ClientAssertionSigner

Mints a fresh assertion for the given audience.

sign(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs raw bytes using the key identified by kid.

sign(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Signs raw bytes using the key identified by kid.

sign(String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs raw bytes, explicitly selecting the JWS serialization (PRD §60).

sign(String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Signs raw bytes with an explicit JWS serialization selection (PRD §60).

SignatureOperations - Class in co.ankatech.ankasecure.sdk.operations

Signature and verification operations facade.

SignatureOperations(InternalServiceFactory, TokenSource, BooleanSupplier, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.SignatureOperations

SignatureServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl

Thread-safe implementation of SignatureService.

SignatureServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

Convenience constructor using the default OverwritePolicy.FAIL_IF_EXISTS policy.

SignatureServiceImpl(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

signBytes(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

Sign an in-memory payload with a server-side **private** key.

signBytes(String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

SignEncryptResult - Class in co.ankatech.ankasecure.sdk.model

Result of a sign-then-encrypt combined operation.

SignEncryptResult() - Constructor for class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Default constructor initializing empty warning lists.

signFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs a file.

signFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

signFile(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

signFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs a file with forced compact format.

signFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Signs a file using the key identified by kid.

signFileCompact(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs a file (attached), explicitly selecting the JWS serialization (PRD §60).

signFileCompact(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Signs a file with an explicit JWS serialization selection (PRD §60).

signFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs a file with forced streaming format.

signFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

signFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Signs a file in streaming mode (designed for large files >100 MB).

SignResult - Class in co.ankatech.ankasecure.sdk.model

Immutable result returned by signing operations.

SignResult.Builder - Class in co.ankatech.ankasecure.sdk.model

Builder for constructing immutable SignResult instances.

signThenEncrypt(String, String, byte[]) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs then encrypts data in a single operation (nested JWE containing JWS).

signThenEncrypt(String, String, byte[]) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

signThenEncrypt(String, String, byte[]) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

signThenEncrypt(String, String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs then encrypts, explicitly selecting the inner-JWS serialization (PRD §60).

signThenEncrypt(String, String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

signThenEncrypt(String, String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

Signs then encrypts with an explicit inner-JWS serialization selection (PRD §60).

signThenEncryptFile(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

signThenEncryptFile(String, String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

signThenEncryptFileCompact(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs then encrypts a file with forced compact format.

signThenEncryptFileCompact(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

signThenEncryptFileCompact(String, String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs a file then encrypts it, explicitly selecting the inner-JWS serialization (PRD §60).

signThenEncryptFileCompact(String, String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

Signs a file then encrypts it with an explicit inner-JWS serialization selection (PRD §60).

signThenEncryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Signs a file then encrypts it in streaming mode (nested JWE(JWS), bounded memory) — the large-file counterpart of AuthenticatedSdk.signThenEncryptFileCompact(String, String, Path, Path).

signThenEncryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl

signThenEncryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

StaleSidecarException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown when a streaming / atomic file-output operation cannot create its quarantine sidecar (<destination>.part) because a file already exists at the sidecar path — the signature of a stale sidecar orphaned by a prior crashed or force-killed operation (the CREATE_NEW sidecar is normally deleted on BOTH the success and the fail-closed paths, so a surviving one indicates an earlier abnormal termination).

StaleSidecarException(Path, Path, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.StaleSidecarException

Constructs a new stale-sidecar exception.

STANDARD - Enum constant in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode

status() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Returns the value of the status record component.

STREAMING - Enum constant in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode

StreamIntegrityException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown when a streaming file-output operation cannot commit its result because the server-emitted end-of-stream integrity verdict did not pass (fail-closed).

StreamIntegrityException(String, String, String, String, String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException

Constructs a new streaming-integrity exception.

streamsAreEqual(InputStream, InputStream) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Compares two input streams byte-by-byte to determine whether they contain identical content.

StreamWriteFailedException - Exception in co.ankatech.ankasecure.sdk.exception

The request body could not be written to completion, so nothing was committed.

StreamWriteFailedException(String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.StreamWriteFailedException

SUPPLIED_TOKEN - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthMechanism

No credential at all: an ANKASecure access token the caller obtained elsewhere and handed to the SDK.

SuppliedTokenSource - Class in co.ankatech.ankasecure.sdk.auth

An ANKASecure access token the caller already holds, presented as a token source so that everything above TokenSource works identically whether the SDK obtained the token or was handed one.

SuppliedTokenSource(AnkaSecureOpenApiClient, String) - Constructor for class co.ankatech.ankasecure.sdk.auth.SuppliedTokenSource

T

TEMP_DIR - Static variable in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Working directory for the temporary artefacts produced by examples.

TENANT - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

The tenant this session belongs to.

timeout() - Method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

The bounded budget actually in force after clamping.

TIMEOUT - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Network stack detected a connect, read, or write timeout.

toDualMeta(Headers) - Static method in class co.ankatech.ankasecure.sdk.meta.HeaderMetaParser

Converts response headers from a dual-key streaming operation (re-encrypt, re-sign) into a DualKeyMeta.

toJson(Object) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Serialises an object to its JSON string representation using the SDK's internal JSON mapper (ISO-8601 dates, pretty-print).

token() - Method in record class co.ankatech.ankasecure.sdk.auth.MintedToken

Returns the value of the token record component.

TOKEN_ENDPOINT_OFF_ORIGIN - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase

The document named a token_endpoint on an origin other than the issuer's own.

TOKEN_ENDPOINT_UNREACHABLE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase

The token endpoint could not be reached - no HTTP status was obtained.

TOKEN_RESPONSE_MALFORMED - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase

The token endpoint answered 200 with something that is not a usable token response: not JSON, no access_token, a token_type other than Bearer, or a non-positive expires_in.

tokenize(String) - Static method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

Splits a configured command line into an argv array WITHOUT involving a shell.

TokenRevokedException - Exception in co.ankatech.ankasecure.sdk.exception

Thrown when the server rejects a previously-issued access token with HTTP 401 on a data-plane operation.

TokenRevokedException(String, int, String, Throwable, Map<String, String>, SdkErrorCode, Long) - Constructor for exception co.ankatech.ankasecure.sdk.exception.TokenRevokedException

Constructs a token-revoked exception carrying the full HTTP diagnostic context, delegating to AnkaSecureSdkException's canonical constructor.

TokenSource - Interface in co.ankatech.ankasecure.sdk.auth

The one seam between "how this workload proves who it is" and "everything the SDK does".

TokenSourceChain - Class in co.ankatech.ankasecure.sdk.auth

Decides which credential the workload will present, from configuration alone.

TokenSourceChain.Link - Enum Class in co.ankatech.ankasecure.sdk.auth

One resolvable credential configuration, in the order they are considered.

toSingleMeta(Headers) - Static method in class co.ankatech.ankasecure.sdk.meta.HeaderMetaParser

Converts response headers from a single-key streaming operation (encrypt, decrypt, sign, verify) into a SingleKeyMeta.

toString() - Method in class co.ankatech.ankasecure.sdk.auth.AdmittedIssuer

toString() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider

toString() - Method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider

Names the configured command and the budget; carries nothing the command produced.

toString() - Method in class co.ankatech.ankasecure.sdk.auth.ExplicitExternalTokenProvider

Names the kind and reveals nothing, so an accidental log statement leaks nothing.

toString() - Method in class co.ankatech.ankasecure.sdk.auth.FederatedAssertionTokenSource

Names the actor and the SOURCE of the token, never the token.

toString() - Method in class co.ankatech.ankasecure.sdk.auth.FileExternalTokenProvider

The path is the diagnostic an operator needs and is not itself a secret.

toString() - Method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient

toString() - Method in record class co.ankatech.ankasecure.sdk.auth.MintedToken

Redacted: the wrapper's own toString shows at most a six-character prefix.

toString() - Method in class co.ankatech.ankasecure.sdk.auth.NativeSecretTokenSource

Names the mechanism and the actor.

toString() - Method in class co.ankatech.ankasecure.sdk.auth.PrivateKeyJwtTokenSource

Names the actor and the audience; the signer's own toString reveals no key.

toString() - Method in class co.ankatech.ankasecure.sdk.auth.SuppliedTokenSource

The wrapper redacts; at most a six-character prefix of the token can appear.

toString() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter

toString() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo

toString() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair

toString() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo

toString() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata

toString() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult

Returns string representation for debugging.

toString() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters

Returns a string representation of this record class.

toString() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Returns a string representation of this record class.

toString() - Method in class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult

Returns a human-readable summary of the migration workflow results.

toString() - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

toString() - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult

toString() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo

toString() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult

Returns string representation for debugging.

toString() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

toString() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning

Returns a string representation of this record class.

toString() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning

Returns a string representation of this record class.

toString() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

Returns a string representation of this record class.

toString() - Method in class co.ankatech.ankasecure.sdk.security.BearerToken

Returns a redacted representation of the token.

toString() - Method in class co.ankatech.ankasecure.sdk.security.ClientAssertionSigner

Returns a description that names the actor and the algorithm and reveals nothing about the key, so an accidental log statement cannot leak signing material.

toString() - Method in class co.ankatech.ankasecure.sdk.transport.ConfiguredOriginInterceptor

toString() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair

Returns a string representation of this record class.

totalElements() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Returns the value of the totalElements record component.

totalPages() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage

Returns the value of the totalPages record component.

tryUnset(String) - Static method in class co.ankatech.ankasecure.sdk.security.EnvScrubber

Attempts to remove the named environment variable from the JVM's in-memory environment map(s).

U

UNKNOWN - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Failure that cannot be classified into SdkErrorCode.TIMEOUT, SdkErrorCode.IO, or SdkErrorCode.HTTP.

url() - Method in class co.ankatech.ankasecure.sdk.auth.AdmittedIssuer

The admitted issuer URL.

UsageLimitWarning - Record Class in co.ankatech.ankasecure.sdk.model.warning

Warning indicating that a cryptographic key is approaching its usage limit.

UsageLimitWarning(int) - Constructor for record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning

Creates an instance of a UsageLimitWarning record class.

USERINFO_PRESENT - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule

Carries a username or a password.

UtilityOperations - Class in co.ankatech.ankasecure.sdk.operations

Utility operations facade for PKCS#7 analysis, conversion, and migration.

UtilityOperations(InternalServiceFactory, TokenSource, BooleanSupplier, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.UtilityOperations

V

value() - Method in record class co.ankatech.ankasecure.sdk.auth.MintedToken

Renders the token for the wire.

value(AuthSetting) - Method in interface co.ankatech.ankasecure.sdk.auth.AuthSettings

Returns the configured value of a setting.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.auth.AuthMechanism

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.auth.ExternalTokenSourceKind

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.CompositeMode

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.JwsSerialization

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.OverwritePolicy

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity

Returns the enum constant of this class with the specified name.

values() - Static method in enum class co.ankatech.ankasecure.sdk.auth.AuthMechanism

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.auth.ExternalTokenSourceKind

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.CompositeMode

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.JwsSerialization

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.OverwritePolicy

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity

Returns an array containing the constants of this enum class, in the order they are declared.

verifySignature(String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Verifies a compact JWS (RFC 7515) signature.

verifySignature(String) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Verifies a compact JWS signature string.

verifySignature(Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Verifies a JWS signature from a file, accepting either the compact form or the JWS-JSON form (serialization-agnostic; PRD §60).

verifySignature(Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

verifySignatureBytes(String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl

Verify a Compact JWS that is fully in memory.

verifySignatureFile(Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Verifies a JWS signature from a file (compact or JWS-JSON).

VerifySignatureResult - Class in co.ankatech.ankasecure.sdk.model

VerifySignatureResult

VerifySignatureResult() - Constructor for class co.ankatech.ankasecure.sdk.model.VerifySignatureResult

verifySignatureStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Verifies a detached JWS signature with forced streaming format.

verifySignatureStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

verifySignatureStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Verifies a detached signature in streaming mode (designed for large files >100 MB).

verifySignatureUtilityStream(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Verifies a signature using a provided public key (without requiring key in ANKASecure).

verifySignatureUtilityStream(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

verifySignatureUtilityStream(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations

verifySignatureUtilityStream(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations

Verifies a signature using an external public key (utility operation).

verifyWithExternalPublicKey(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl

versionSafe(Integer) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil

Returns the material version as a string if it is non-null; otherwise returns the literal "n/a" (e.g. utility mode, or streaming flows where the version rides the JOSE artefact).

W

WARNING - Enum constant in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity

Action should be taken soon to avoid potential issues.

warnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder

Sets the list of warnings.

warnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder

Sets the list of warnings.

WarningSeverity - Enum Class in co.ankatech.ankasecure.sdk.model.warning

Severity levels for cryptographic warnings.

withAlg(String...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by algorithm names (OR logic).

withCategory(AlgorithmInfo.Category) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by algorithm category.

withCompositeMode(CompositeMode...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by composite construction (OR logic).

withKeyOps(String...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by required key operations (AND logic).

withKty(String...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by key types (OR logic).

withMaxSecurityLevel(int) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by maximum NIST security level (inclusive).

withMinSecurityLevel(int) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by minimum NIST security level (inclusive).

withOverwrite() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Convenience wither equivalent to withOverwritePolicy(OverwritePolicy.OVERWRITE): returns a NEW immutable AuthenticatedSdk whose file-output operations atomically replace an existing destination.

withOverwritePolicy(OverwritePolicy) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk

Returns a NEW immutable AuthenticatedSdk that applies overwritePolicy to every file-output operation, sharing this instance's JWT and HTTP client.

withSecurityLevel(int) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by exact NIST security level.

withStandards(String...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by required standards compliance (AND logic).

withStatus(AlgorithmInfo.Status) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder

Filter by lifecycle status.

writeBytes(Path, byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.FileIO

writeUtf8(Path, String) - Static method in class co.ankatech.ankasecure.sdk.util.FileIO

Writes the text to the given path using UTF-8, replacing any existing file (same semantics as StandardOpenOption.TRUNCATE_EXISTING).

Z

Zeroization - Class in co.ankatech.ankasecure.sdk.security

Centralized zeroization helpers for the ANKASecure secure-memory layer.

zeroize(byte[]) - Static method in class co.ankatech.ankasecure.sdk.security.Zeroization

Overwrites every element with 0x00.

zeroize(char[]) - Static method in class co.ankatech.ankasecure.sdk.security.Zeroization

Overwrites every element with the space character ' '.

A B C D E F G H I J K L M N O P Q R S T U V W Z
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form