Uses of Package
co.ankatech.ankasecure.keymanagement

Package
Description
 
  • Class
    Description
    Factory / entry point for the AnkaSecure© Key Management SDK.
    An authenticated Key Management SDK instance: one administrative workload's DPoP-bound session in its tenant.
    The tenant's explicit capability grants: which actor may use which key for which operation, under which constraints.
    The tenant's constraint policies: the usage, time and payload bounds a capability grant can carry.
    Destruction requests for keys and key versions.
    Read-only lookups of the tenant's applications, cryptographic actors and counterparty types: what a key management automation needs to name the grantees and counterparties of the resources it manages.
    The tenant's exchange contexts: the bounded settings in which an application's actors exchange protected data with a counterparty.
    The tenant's cryptographic exchanges: drafts, validation, activation and the lifecycle of an active exchange.
    The tenant's internal cryptographic use cases: a runtime identity (an actor and its credential), the grants and constraints it uses, provisioned and governed as one unit.
    The keys of the workload's tenant: listing and reading, creation and import, export of the public part, the metadata update, and the key lifecycle (suspend, reactivate, revoke, archive).
    The material versions of a key: every version the key has had, with its status, and the revocation of one version.
    The workload's own quorum requests: the destruction requests and gated key changes it made.
    The rotation of a key: an immediate rotation, whether a rotation is admissible now, the key's automatic-rotation schedule and the history of its scheduled executions.
    How an administrative workload proves its identity to the platform's token endpoint.