Index (ANKASecure SDK 3.3.0 API)

A B C D E F G H I J K L M N O P Q R S T U V W Z
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

accessToken() - Method in class co.ankatech.ankasecure.sdk.auth.CachingTokenSource
accessToken() - Method in class co.ankatech.ankasecure.sdk.auth.SuppliedTokenSource
accessToken() - Method in interface co.ankatech.ankasecure.sdk.auth.TokenSource: Returns a token that is valid now, minting one if none is cached or the cached one is inside the refresh window, and binding whatever it returns to the transport.
ACTOR_KEY_FILE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: A private JWK file for the registered key pair.
ACTOR_KEY_PAIR - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link: AuthSetting.ACTOR_KEY_FILE plus AuthSetting.EXPECTED_AUDIENCE.
ADDRESS_NOT_ROUTABLE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule: At least one resolved address is in the egress reject set.
addWarning(CryptoWarning) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder: Adds a single warning.
addWarning(CryptoWarning) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder: Adds a single warning.
admit(String) - Static method in class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmission: Admits an external issuer, or refuses it locally.
AdmittedIssuer - Class in co.ankatech.ankasecure.sdk.auth: An external issuer that passed admission, together with the addresses it resolved to at that moment.
AlgorithmCatalogOperations - Class in co.ankatech.ankasecure.sdk.operations: Algorithm catalog operations facade.
AlgorithmCatalogOperations(InternalServiceFactory, TokenSource, BooleanSupplier, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.AlgorithmCatalogOperations
AlgorithmFilter - Class in co.ankatech.ankasecure.sdk.model: Filter criteria for querying supported algorithms from the ANKASecure platform.
AlgorithmFilter.Builder - Class in co.ankatech.ankasecure.sdk.model: Builder for constructing AlgorithmFilter instances.
AlgorithmInfo - Class in co.ankatech.ankasecure.sdk.model: Immutable value object representing a supported algorithm profile.
AlgorithmInfo() - Constructor for class co.ankatech.ankasecure.sdk.model.AlgorithmInfo: Zero-arg constructor for deserialization frameworks.
AlgorithmInfo.Category - Enum Class in co.ankatech.ankasecure.sdk.model: Category of the algorithm: classical vs. post-quantum vs. hybrid.
AlgorithmInfo.Status - Enum Class in co.ankatech.ankasecure.sdk.model: Lifecycle status as defined by the platform.
AlgorithmPair - Class in co.ankatech.ankasecure.sdk.model: Immutable pair of classical and post-quantum algorithm identifiers.
AlgorithmPair(String, String) - Constructor for class co.ankatech.ankasecure.sdk.model.AlgorithmPair: Creates a new algorithm pair.
algorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder: Sets the algorithm used.
algorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder: Sets the algorithm used.
ALLOW_ENV_VALUE - Static variable in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider: The one value that enables execution.
ALLOW_ENV_VARIABLE - Static variable in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider: The environment variable that must be set to 1 before any command will be executed.
ALLOW_PRIVATE_ENV_VALUE - Static variable in class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmission: The one value that enables it.
ALLOW_PRIVATE_ENV_VARIABLE - Static variable in class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmission: The one variable that admits a loopback issuer.
ALLOW_PROXY_ENV_VALUE - Static variable in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient: The one value that enables it.
ALLOW_PROXY_ENV_VARIABLE - Static variable in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient: The one variable that admits an issuer reached through a proxy, and with it the loss of the address screening.
analyzePkcs7(Pkcs7AnalysisRequest) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Analyzes a PKCS#7 file to extract metadata and certificate information.
analyzePkcs7(Pkcs7AnalysisRequest) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl
analyzePkcs7(Pkcs7AnalysisRequest) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations: Analyzes a PKCS#7 structure (compact mode).
analyzePkcs7Stream(File) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Analyzes a PKCS#7 file using streaming to avoid loading the entire file into memory.
analyzePkcs7Stream(File) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl
analyzePkcs7Stream(File) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations: Analyzes a PKCS#7 structure (streaming mode for large files).
AnkaJoseUtil - Class in co.ankatech.ankasecure.sdk.jose: Pure client-side conversion helpers between the JOSE Compact Serialization (RFC 7516 Section 7.1 for JWE / RFC 7515 Section 7.1 for JWS) and the General JSON Serialization (RFC 7516 Section 7.2 / RFC 7515 Section 7.2) used by ANKASecure on the wire.
AnkaSecureSdk - Class in co.ankatech.ankasecure.sdk: Factory for creating authenticated SDK instances.
AnkaSecureSdk(Properties) - Constructor for class co.ankatech.ankasecure.sdk.AnkaSecureSdk: Constructs the SDK factory using the provided CLI properties.
AnkaSecureSdkException - Exception in co.ankatech.ankasecure.sdk.exception: A uniform, localization-ready exception thrown by all public ANKASecure SDK APIs.
AnkaSecureSdkException(String, int, String, Throwable, Map<String, String>) - Constructor for exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException: Constructs a new SDK exception with the specified message, HTTP status, response body, cause, and context.
AnkaSecureSdkException(String, int, String, Throwable, Map<String, String>, SdkErrorCode, Long) - Constructor for exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException: Constructs a new SDK exception with the specified message, HTTP status, response body, cause, context, a specific SDK error code, and the server-provided Retry-After hint.
ApiClientFactory - Class in co.ankatech.ankasecure.sdk.client: Factory for creating configured ApiClient instances.
ApiClientFactory.ClientMode - Enum Class in co.ankatech.ankasecure.sdk.client
argv() - Method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider: The exact argv this provider will execute.
authenticate() - Method in class co.ankatech.ankasecure.sdk.AnkaSecureSdk: Authenticates using whatever credential the deployment configured, without being told which.
authenticate(AuthSettings) - Method in class co.ankatech.ankasecure.sdk.AnkaSecureSdk: Authenticates using a caller-supplied configuration view.
authenticate(Properties) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Authenticates using encrypted credentials stored in cli.properties and returns an AuthenticatedSdk.
authenticateApplication(String, SecretChars) - Method in class co.ankatech.ankasecure.sdk.AnkaSecureSdk: Authenticates as an application and returns an authenticated SDK instance.
authenticateApplicationWithKeyPair(String, ClientAssertionSigner, String) - Method in class co.ankatech.ankasecure.sdk.AnkaSecureSdk: Authenticates a Cryptographic ACTOR that proves itself with a registered key pair.
AuthenticatedSdk - Class in co.ankatech.ankasecure.sdk: Authenticated SDK instance with immutable JWT token.
AuthMechanism - Enum Class in co.ankatech.ankasecure.sdk.auth: The credential kind a TokenSource presents at the ANKASecure token endpoint.
AuthSetting - Enum Class in co.ankatech.ankasecure.sdk.auth: Every configuration value the resolution chain reads, and the two names each one answers to.
AuthSettings - Interface in co.ankatech.ankasecure.sdk.auth: A read-only view of the configuration the resolution chain consults.
AuthSettings.Builder - Class in co.ankatech.ankasecure.sdk.auth: Assembles an immutable AuthSettings.

B

BearerToken - Class in co.ankatech.ankasecure.sdk.security: Holder for a JWT bearer token represented as char[] rather than String, with a redacted BearerToken.toString() so accidental log statements do not leak the token verbatim.
BearerToken(char[]) - Constructor for class co.ankatech.ankasecure.sdk.security.BearerToken: Takes ownership of the supplied char array.
build() - Method in class co.ankatech.ankasecure.sdk.auth.AuthSettings.Builder
build() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder: Builds the AlgorithmFilter instance.
build() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder
build() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult.Builder: Builds an immutable DecryptResult instance.
build() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder: Builds an immutable EncryptResult instance.
build() - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder: Builds an immutable SignResult instance.
builder() - Static method in interface co.ankatech.ankasecure.sdk.auth.AuthSettings: A builder for callers that hold some values in hand - a decrypted secret, a token they were given - and want the rest resolved from properties and the environment.
builder() - Static method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter: Creates a new builder for constructing an AlgorithmFilter.
builder() - Static method in class co.ankatech.ankasecure.sdk.model.DecryptResult: Creates a new builder for constructing DecryptResult instances.
builder() - Static method in class co.ankatech.ankasecure.sdk.model.EncryptResult: Creates a new builder for constructing EncryptResult instances.
builder() - Static method in class co.ankatech.ankasecure.sdk.model.SignResult: Creates a new builder for constructing SignResult instances.
Builder() - Constructor for class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder
bytes() - Method in class co.ankatech.ankasecure.sdk.security.SecretBuffer

C

cachedExpiry() - Method in class co.ankatech.ankasecure.sdk.auth.CachingTokenSource: The instant the currently cached token expires.
CachingTokenSource - Class in co.ankatech.ankasecure.sdk.auth: The caching, single-flight, fail-without-poisoning half of every TokenSource, so the three mechanisms differ in exactly one method and cannot drift apart in the parts that are not about the credential at all.
CALL_TIMEOUT - Static variable in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient: The whole-call budget, which is the one that matters here: it covers name resolution, the TLS handshake and every read, so a server that accepts a connection and then stalls the handshake cannot hold this thread indefinitely.
carriesIpv4InLow32(InetAddress) - Static method in class co.ankatech.ankasecure.sdk.auth.RejectedEgressAddresses: The IPv4-COMPATIBLE form (::a.b.c.d, RFC 4291 2.5.5.1, deprecated): an IPv6 address whose high 96 bits are zero, so its low 32 bits ARE an IPv4 address.
chars() - Method in class co.ankatech.ankasecure.sdk.security.BearerToken
chars() - Method in class co.ankatech.ankasecure.sdk.security.SecretChars
CIPHER_INPUT_STREAM_BUFFER_SIZE - Static variable in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil
CLASSICAL - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category: Traditional algorithms vulnerable to quantum computers.
clear() - Method in class co.ankatech.ankasecure.sdk.security.BearerToken: Zeroizes the underlying token via Zeroization.zeroize(char[]) (space-fill).
CLIENT_ASSERTION_TYPE - Static variable in class co.ankatech.ankasecure.sdk.security.ClientAssertionSigner: The client_assertion_type form value that selects this credential kind at the token endpoint, as fixed by RFC 7523 §2.2.
CLIENT_CREDENTIALS - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalTokenSourceKind: The workload's own client-credentials grant against its own authorization server.
CLIENT_ID - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: The ANKASecure actor UUID.
CLIENT_SECRET - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: The ANKASecure-issued client secret.
ClientAssertionSigner - Class in co.ankatech.ankasecure.sdk.security: Mints the RFC 7523 §2.2 client assertion that proves an actor's identity with a registered key pair instead of a shared secret.
ClientAssertionSigner(UUID, JWK) - Constructor for class co.ankatech.ankasecure.sdk.security.ClientAssertionSigner: Binds this signer to one actor and one private key.
ClientCredentialsExchangeException - Exception in co.ankatech.ankasecure.sdk.auth: A client-credentials exchange with an external authorization server failed, and this names the PHASE it failed in.
ClientCredentialsExchangeException(ClientCredentialsExchangeException.Phase, String) - Constructor for exception co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException
ClientCredentialsExchangeException(ClientCredentialsExchangeException.Phase, String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException
ClientCredentialsExchangeException.Phase - Enum Class in co.ankatech.ankasecure.sdk.auth: Where in the exchange the failure happened.
ClientCredentialsExternalTokenProvider - Class in co.ankatech.ankasecure.sdk.auth: Obtains an external token by performing the OAuth 2.0 client-credentials grant against the workload's OWN authorization server, and hands it to the federated assertion path.
ClientCredentialsExternalTokenProvider(IssuerHttpClient, String, SecretChars, String, String, Clock) - Constructor for class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider
close() - Method in class co.ankatech.ankasecure.sdk.auth.CachingTokenSource: Discards the cached token.
close() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider: Zeroizes the external client secret and any cached token, and releases the issuer client.
close() - Method in interface co.ankatech.ankasecure.sdk.auth.ExternalTokenProvider: Releases whatever credential material this provider retains.
close() - Method in class co.ankatech.ankasecure.sdk.auth.FederatedAssertionTokenSource: Closes the provider, then this source.
close() - Method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient: Releases this client's connection pool and dispatcher.
close() - Method in class co.ankatech.ankasecure.sdk.auth.NativeSecretTokenSource
close() - Method in class co.ankatech.ankasecure.sdk.auth.SuppliedTokenSource
close() - Method in interface co.ankatech.ankasecure.sdk.auth.TokenSource: Releases any credential this source retains for re-minting, and discards the cached token.
close() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Clears the bearer token from the underlying AnkaSecureOpenApiClient's HttpBearerAuth.
close() - Method in class co.ankatech.ankasecure.sdk.security.SecretBuffer: Zeroizes the underlying byte[] (overwrites every element with 0x00), nulls the internal field, and marks this wrapper as closed.
close() - Method in class co.ankatech.ankasecure.sdk.security.SecretChars: Zeroizes the underlying char[] (space-fill ' '), nulls the internal field, and marks this wrapper as closed.
close() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession: Best-effort destruction of the underlying AES SecretKey.
co.ankatech.ankasecure.sdk - package co.ankatech.ankasecure.sdk
co.ankatech.ankasecure.sdk.auth - package co.ankatech.ankasecure.sdk.auth
co.ankatech.ankasecure.sdk.client - package co.ankatech.ankasecure.sdk.client
co.ankatech.ankasecure.sdk.examples - package co.ankatech.ankasecure.sdk.examples
co.ankatech.ankasecure.sdk.exception - package co.ankatech.ankasecure.sdk.exception
co.ankatech.ankasecure.sdk.internal - package co.ankatech.ankasecure.sdk.internal
co.ankatech.ankasecure.sdk.internal.service.impl - package co.ankatech.ankasecure.sdk.internal.service.impl
co.ankatech.ankasecure.sdk.jose - package co.ankatech.ankasecure.sdk.jose
co.ankatech.ankasecure.sdk.meta - package co.ankatech.ankasecure.sdk.meta
co.ankatech.ankasecure.sdk.model - package co.ankatech.ankasecure.sdk.model
co.ankatech.ankasecure.sdk.model.warning - package co.ankatech.ankasecure.sdk.model.warning: Structured warning types for cryptographic operations.
co.ankatech.ankasecure.sdk.operations - package co.ankatech.ankasecure.sdk.operations
co.ankatech.ankasecure.sdk.security - package co.ankatech.ankasecure.sdk.security: The ANKASecure SDK secure-memory layer.
co.ankatech.ankasecure.sdk.transport - package co.ankatech.ankasecure.sdk.transport
co.ankatech.ankasecure.sdk.util - package co.ankatech.ankasecure.sdk.util
combinedOperations() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory
CombinedOperations - Class in co.ankatech.ankasecure.sdk.operations: Combined cryptographic operations facade.
CombinedOperations(InternalServiceFactory, TokenSource, BooleanSupplier, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.CombinedOperations
CombinedOperationsServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl: Thread-safe implementation of CombinedOperationsService.
CombinedOperationsServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl: Convenience constructor using the default OverwritePolicy.FAIL_IF_EXISTS policy.
CombinedOperationsServiceImpl(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl: Constructor with dependency injection.
COMMAND - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalTokenSourceKind: A command the operator configured, executed to produce a token on stdout.
CommandExternalTokenProvider - Class in co.ankatech.ankasecure.sdk.auth: Runs a command the operator configured and takes its standard output as the external token.
CommandExternalTokenProvider(List<String>, Duration) - Constructor for class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider
COMPACT - Enum constant in enum class co.ankatech.ankasecure.sdk.model.JwsSerialization: RFC 7515 Section 7.1 Compact Serialization (three dot-separated segments).
compactJweToGeneral(String) - Static method in class co.ankatech.ankasecure.sdk.jose.AnkaJoseUtil: Converts a Compact JWE (5 dot-separated base64url segments) into the General JSON Serialization form as a JSON string.
compactJwsToGeneral(String) - Static method in class co.ankatech.ankasecure.sdk.jose.AnkaJoseUtil: Converts a Compact JWS (3 dot-separated base64url segments) into the General JSON Serialization form as a JSON string.
companions() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link: Every companion, required first.
COMPOSITE_KEM_COMBINE - Enum constant in enum class co.ankatech.ankasecure.sdk.model.CompositeMode: The component secrets are combined into a single shared secret through the key derivation function named by KeyMetadata.getKdf().
COMPOSITE_SIGNATURE - Enum constant in enum class co.ankatech.ankasecure.sdk.model.CompositeMode: One signature under a composite alg: the ML-DSA and the traditional component each sign the composite message representative M', and the value is valid only if both verify.
CompositeMode - Enum Class in co.ankatech.ankasecure.sdk.model: How the components of a composite (hybrid) key are combined.
configuredCredential() - Method in class co.ankatech.ankasecure.sdk.AnkaSecureSdk: Reports which credential AnkaSecureSdk.authenticate() would use, without using it.
configuredLinks(AuthSettings) - Static method in class co.ankatech.ankasecure.sdk.auth.TokenSourceChain: Reports which links the given settings configure, in chain order, without building anything.
ConfiguredOriginInterceptor - Class in co.ankatech.ankasecure.sdk.transport: Refuses any request bound for an origin other than the one the SDK was configured with.
ConfiguredOriginInterceptor(String) - Constructor for class co.ankatech.ankasecure.sdk.transport.ConfiguredOriginInterceptor
configureForHighThroughput(ApiClient) - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory: Applies high-throughput configuration to an existing ApiClient.
configureForStreaming(ApiClient) - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory: Applies streaming configuration to an existing ApiClient.
CONNECT_TIMEOUT - Static variable in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient: TCP connect budget.
content() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage: Returns the value of the content record component.
convertPkcs7ToJose(Pkcs7ConversionRequest) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Converts a PKCS#7 signature to JOSE (JWS) format.
convertPkcs7ToJose(Pkcs7ConversionRequest) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl
convertPkcs7ToJose(Pkcs7ConversionRequest) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations: Converts PKCS#7 signed-data to JOSE JWS format (compact mode).
convertPkcs7ToJoseStream(Pkcs7ConversionStreamRequest, File, File) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Converts a PKCS#7 signature to JOSE using streaming.
convertPkcs7ToJoseStream(Pkcs7ConversionStreamRequest, File, File) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl
convertPkcs7ToJoseStream(Pkcs7ConversionStreamRequest, File, File) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations: Converts PKCS#7 signed-data to JOSE JWS format (streaming mode for large files).
createClient(ApiClientFactory.ClientMode) - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory: Creates an ApiClient based on the specified mode.
createCustomClient(int, int, int, int, int) - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory: Creates a custom configured ApiClient.
createStandardClient() - Static method in class co.ankatech.ankasecure.sdk.client.ApiClientFactory: Creates a standard ApiClient with default configuration.
credential() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link
CREDENTIALS_REFUSED - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase: The token endpoint answered, and refused the external credential.
CRITICAL - Enum constant in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity: Immediate action required to prevent service disruption.
crypto() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory
CryptoOperationException - Exception in co.ankatech.ankasecure.sdk.exception: Thrown when a cryptographic operation fails due to local processing errors.
CryptoOperationException(String) - Constructor for exception co.ankatech.ankasecure.sdk.exception.CryptoOperationException: Constructs a new crypto operation exception with the specified message.
CryptoOperationException(String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.CryptoOperationException: Constructs a new crypto operation exception with the specified message and cause.
CryptoPolicyInfo - Class in co.ankatech.ankasecure.sdk.model: Immutable representation of the Crypto-Policy-Info response header.
CryptoPolicyInfo(String, String, int, int, String, String, int, int, boolean) - Constructor for class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo: Constructs an instance from the JSON-mapped fields.
CryptoPolicyInfo.Builder - Class in co.ankatech.ankasecure.sdk.model: Fluent builder for constructing instances.
CryptoPolicyInfoDecoder - Class in co.ankatech.ankasecure.sdk.meta: Decodes the Base64URL-encoded value of the Crypto-Policy-Info response header into a CryptoPolicyInfo.
CryptoRandomProvider - Class in co.ankatech.ankasecure.sdk.util: Centralized provider for cryptographically secure random number generation.
CryptoServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl: Thread-safe concrete implementation of CryptoService.
CryptoServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl: Convenience constructor using the default OverwritePolicy.FAIL_IF_EXISTS policy.
CryptoServiceImpl(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl
CryptoWarning - Interface in co.ankatech.ankasecure.sdk.model.warning: Represents a structured cryptographic operation warning.
currentKeyAlgorithm() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo
currentKeyAlgorithm(String) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder
currentKeyExpWarnDays() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo
currentKeyExpWarnDays(int) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder
currentKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo
currentKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder
currentKeyUsageWarn() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo
currentKeyUsageWarn(int) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder
currentTokenExpiry() - Method in class co.ankatech.ankasecure.sdk.auth.CachingTokenSource
currentTokenExpiry() - Method in interface co.ankatech.ankasecure.sdk.auth.TokenSource: When the token currently in force expires, if this source knows.

D

daysRemaining() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning: Returns the value of the daysRemaining record component.
decapsulateKem(PrivateKey, String, byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil: Decapsulates and decrypts a ciphertext using the provided PrivateKey.
decode(String) - Static method in class co.ankatech.ankasecure.sdk.meta.CryptoPolicyInfoDecoder
decrypt(String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts a JWE (RFC 7516) token to recover the original plaintext.
decrypt(String, String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts a JWE token string with the recipient the caller names.
decrypt(String, String) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations: Decrypts a JWE token string, Compact or General JSON.
decryptBytes(String, String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl: Decrypt a JWE (Compact or General JSON) that is already in RAM.
decryptDataRaw(byte[], byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil
decryptDataRaw(SecretBuffer, byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil: SecretBuffer overload of PqcClientCryptoUtil.decryptDataRaw(byte[], byte[]).
decryptedData(byte[]) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult.Builder: Sets the decrypted data (will be defensively copied).
decryptFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts a file of any format with the recipient the caller names, selecting the path from the input's actual format exactly as AuthenticatedSdk.decryptFile(Path, Path) does.
decryptFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl
decryptFile(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts a file.
decryptFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts a Compact or General JSON JWE file with the recipient the caller names.
decryptFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations: Decrypts a file containing a JWE token, Compact or General JSON.
decryptFileCompact(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts a file with forced compact format.
decryptFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts a streaming JWET file with the recipient the caller names; sent as the recipientKid query parameter of /crypto/stream/decrypt.
decryptFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl: Decrypts a JWET multipart file via streaming API.
decryptFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations: Decrypts a file in streaming mode (designed for large files >100 MB).
decryptFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts a file with forced streaming format.
DecryptResult - Class in co.ankatech.ankasecure.sdk.model: Immutable result returned by decryption operations.
DecryptResult.Builder - Class in co.ankatech.ankasecure.sdk.model: Builder for constructing immutable DecryptResult instances.
DecryptResultMetadata - Class in co.ankatech.ankasecure.sdk.model: DecryptResultMetadata
DecryptResultMetadata() - Constructor for class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata
decryptThenVerify(String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts a JWE then verifies the inner JWS signature.
decryptThenVerify(String, String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts a nested JWE(JWS) token with the recipient the caller names, then verifies every signature of the inner JWS.
decryptThenVerify(String, String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl
decryptThenVerify(String, String) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
decryptThenVerifyFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl
decryptThenVerifyFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts a nested JWE(JWS) file with the recipient the caller names, then verifies every signature of the inner JWS.
decryptThenVerifyFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
decryptThenVerifyFileCompact(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts and verifies a nested JWE(JWS) file with forced compact format.
decryptThenVerifyFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts a nested JWE(JWS) streaming artifact with the recipient the caller names, then verifies every signature of the inner JWS; recipientKid is sent as the query parameter of /crypto/stream/decrypt-verify.
decryptThenVerifyFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl
decryptThenVerifyFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
decryptThenVerifyFileStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Decrypts a nested JWE(JWS) file then verifies the inner signature in streaming mode — the large-file counterpart of AuthenticatedSdk.decryptThenVerifyFileCompact(Path, Path), and the inverse of AuthenticatedSdk.signThenEncryptFileStream(String, String, Path, Path).
DecryptVerifyIntegrityException - Exception in co.ankatech.ankasecure.sdk.exception: The fail-closed outcome of a streaming decrypt-then-verify whose two-verdict trailing part is INVALID: the decrypted plaintext was discarded and no file exists at the destination.
DecryptVerifyIntegrityException(String, String, String, String, String, String, String, List<SignatureResult>) - Constructor for exception co.ankatech.ankasecure.sdk.exception.DecryptVerifyIntegrityException: Constructs the exception for an INVALID two-verdict decrypt-verify part.
DecryptVerifyResult - Class in co.ankatech.ankasecure.sdk.model: Result of a decrypt-then-verify combined operation.
DecryptVerifyResult() - Constructor for class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Default constructor initializing empty warning lists.
DEFAULT_KEM_ALGORITHM - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig: The KEM used when "pqc.kem.algorithm" is absent.
DEFAULT_TIMEOUT - Static variable in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider: Applied when the configuration names no timeout.
describe() - Method in class co.ankatech.ankasecure.sdk.auth.AdmittedIssuer: An operator-facing description of the issuer, safe to log and to put in a diagnostic context map: the origin and the path, and nothing else.
describe() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider: The issuer, which is the diagnostic an operator needs; never the client id or the secret.
describe() - Method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider
describe() - Method in class co.ankatech.ankasecure.sdk.auth.ExplicitExternalTokenProvider
describe() - Method in interface co.ankatech.ankasecure.sdk.auth.ExternalTokenProvider: A short operator-facing description of WHERE the token comes from - a path, a command name, an issuer - for diagnostics.
describe() - Method in class co.ankatech.ankasecure.sdk.auth.FileExternalTokenProvider
DestinationExistsException - Exception in co.ankatech.ankasecure.sdk.exception: Thrown when a file-output operation cannot commit its result because a file already exists at the destination and FAIL_IF_EXISTS (the default) is in effect.
DestinationExistsException(Path, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.DestinationExistsException: Constructs a new destination-collision exception.
destroyIfPossible(Object) - Static method in class co.ankatech.ankasecure.sdk.security.Zeroization: Calls Destroyable.destroy() if the supplied object implements Destroyable and is not yet destroyed.
disabledByConfiguration() - Static method in exception co.ankatech.ankasecure.sdk.exception.Http2RequiredException: The configuration-refusal form: HTTP/2 was disabled by configuration, so a streaming request cannot be honoured.
DISCOVERY_MALFORMED - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase: A response arrived but is not a usable discovery document: a non-200 status, a redirect, a body that is not JSON, a missing member, an issuer that is not the configured one, or a token_endpoint that is absent or not an absolute https URL.
DISCOVERY_UNREACHABLE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase: The discovery document could not be fetched at all - no HTTP status was obtained.

E

encrypt(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Encrypts raw bytes using the key identified by kid.
encrypt(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations: Encrypts raw bytes using the key identified by kid.
encryptBytes(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl: Encrypt raw bytes with a server-side **public** key.
EncryptCredentials - Class in co.ankatech.ankasecure.sdk.examples: One-shot utility: encrypts a clientId + clientSecret using the same PBKDF2 + AES-GCM scheme as ExampleUtil and prints the four lines that must be pasted into cli.properties.
encryptDataRaw(byte[], byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil
encryptDataRaw(SecretBuffer, byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil: SecretBuffer overload of PqcClientCryptoUtil.encryptDataRaw(byte[], byte[]).
encryptFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Encrypts a file.
encryptFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl
encryptFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Encrypts a file with forced compact format, i.e. in one non-streaming request.
encryptFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations: Encrypts a file using the key identified by kid.
encryptFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Encrypts a file with forced streaming format.
encryptFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl
encryptFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.EncryptionOperations: Encrypts a file in streaming mode (designed for large files >100 MB).
encryptFileUtilityStream(String, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Encrypts a file using a provided public key (without requiring key in ANKASecure).
encryptFileUtilityStream(String, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl
encryptFileUtilityStream(String, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
EncryptionOperations - Class in co.ankatech.ankasecure.sdk.operations: Encryption and decryption operations facade.
EncryptionOperations(InternalServiceFactory, TokenSource, BooleanSupplier, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.EncryptionOperations
EncryptResult - Class in co.ankatech.ankasecure.sdk.model: Immutable result returned by encryption operations.
EncryptResult.Builder - Class in co.ankatech.ankasecure.sdk.model: Builder for constructing immutable EncryptResult instances.
encryptWithExternalPublicKey(String, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl
ensure() - Static method in class co.ankatech.ankasecure.sdk.internal.RuntimeGuard
ensureTempDir() - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Ensures that the ExampleUtil.TEMP_DIR directory exists, creating it (and any parent directories) if necessary.
ensureTempDir(Path) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Ensures that the given directory exists, creating it (and any parent directories) if necessary.
envelopedDataBase64() - Static method in class co.ankatech.ankasecure.sdk.examples.Pkcs7ExampleFixture: Returns the fixture as a Base64 string, suitable for the compact-mode request fields Pkcs7AnalysisRequest.pkcs7Data / Pkcs7ConversionRequest.pkcs7Data.
envelopedDataBytes() - Static method in class co.ankatech.ankasecure.sdk.examples.Pkcs7ExampleFixture: Loads the raw DER bytes of the packaged EnvelopedData fixture from the classpath.
environment(UnaryOperator<String>) - Method in class co.ankatech.ankasecure.sdk.auth.AuthSettings.Builder: Replaces the environment lookup.
environmentVariable() - Method in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: The environment variable this setting answers to.
EnvScrubber - Class in co.ankatech.ankasecure.sdk.security: Best-effort removal of an environment variable from the JVM's process environment map after the variable has been read.
equals(Object) - Method in record class co.ankatech.ankasecure.sdk.auth.MintedToken: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair
equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo
equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata
equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult: Constant-time equality check on sessionId only.
equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo
equals(Object) - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult
equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning: Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair: Indicates whether some other object is "equal to" this one.
ExampleComplete - Class in co.ankatech.ankasecure.sdk.examples: Runs all SDK example scenarios in sequence and provides a comprehensive summary.
ExampleFailedException - Exception in co.ankatech.ankasecure.sdk.examples: Signals that an example scenario could not complete.
ExampleFailedException(String) - Constructor for exception co.ankatech.ankasecure.sdk.examples.ExampleFailedException: Creates a new instance with no cause, no stack trace and no suppression.
ExampleMenu - Class in co.ankatech.ankasecure.sdk.examples: Console entry-point that lets you run any of the sample scenarios packaged with the ANKASecure SDK.
ExamplePlaygroundKeys - Class in co.ankatech.ankasecure.sdk.examples: Resolves PRE-PROVISIONED playground key ids for the data-plane examples.
ExampleScenario1 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 1 — End-to-End ML-KEM-512 Encryption (Streaming).
ExampleScenario10 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 10 — ML-KEM-1024 Bulk Helpers (Compact JWE).
ExampleScenario11 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 11 — ML-DSA-87 Bulk Helpers (Compact JWS).
ExampleScenario12 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 12 — ML-DSA-65 → SLH-DSA-SHA2-128S Streaming Re-sign (Detached JWS).
ExampleScenario13 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 13 — Runtime Discovery of PQC Algorithms.
ExampleScenario14 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 14 — In-Memory Post-Quantum Crypto (Compact JWE/JWS).
ExampleScenario15 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 15 — Compact-Token Rotation (RSA-3072 → ML-KEM-768).
ExampleScenario16 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 16 — XMSS Streaming Detached JWS Verification.
ExampleScenario17 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 17 — Sign-Then-Encrypt Nested Operations, Compact (data-plane).
ExampleScenario18 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 18 — Use Composite Hybrid Keys for Quantum-Resistant Security (data-plane).
ExampleScenario19 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 19 — PKCS#7/CMS Structural Analysis (data-plane).
ExampleScenario2 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 2 — RSA-2048 Streaming Sign / Verify.
ExampleScenario20 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 20 — PKCS#7 → JOSE Conversion / Migration (data-plane).
ExampleScenario21 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 21 — Sign-Then-Encrypt Nested Operations, Streaming (data-plane).
ExampleScenario3 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 3 — AES-256 Streaming Encrypt / Decrypt.
ExampleScenario4 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 4 — Streaming Re-encrypt (RSA-3072 → ML-KEM-768).
ExampleScenario5 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 5 — ML-KEM-512 Bulk Helpers (Compact JWE).
ExampleScenario6 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 6 — ML-DSA-87 Bulk Helpers (Compact JWS).
ExampleScenario7 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 7 — AES-256 Compact JWE Helpers.
ExampleScenario8 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 8 — ML-KEM-768 → ML-KEM-1024 Bulk Re-encryption (auto-detect / Compact JWE).
ExampleScenario9 - Class in co.ankatech.ankasecure.sdk.examples: Scenario 9 — RSA-3072 → ML-DSA-87 Bulk Re-sign (Compact JWS).
ExampleUtil - Class in co.ankatech.ankasecure.sdk.examples: Shared utilities for all ANKASecure© SDK example scenarios.
executionAllowed() - Static method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider: True when the process environment carries the opt-in.
EXPECTED_AUDIENCE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: The audience the deployment returned when that key pair was registered.
EXPERIMENTAL - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status: Preview or beta algorithm not ready for production use.
EXPLICIT_VALUE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalTokenSourceKind: The token itself, supplied directly by the consumer or by configuration.
ExplicitExternalTokenProvider - Class in co.ankatech.ankasecure.sdk.auth: The token itself, held in memory.
ExplicitExternalTokenProvider(SecretChars) - Constructor for class co.ankatech.ankasecure.sdk.auth.ExplicitExternalTokenProvider: Takes a defensive copy of the supplied token so the caller's own close does not empty this provider.
EXTERNAL_AUDIENCE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: The audience the external authorization server must mint the token for.
EXTERNAL_CLIENT_CREDENTIALS - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link: AuthSetting.EXTERNAL_ISSUER - the workload's own authorization server, at which this SDK performs the client-credentials grant with the workload's own secret.
EXTERNAL_CLIENT_ID - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: The client id registered at that external authorization server.
EXTERNAL_CLIENT_SECRET - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: The client secret for that registration - the workload's own credential at its own issuer, never anything of ANKASecure's.
EXTERNAL_ISSUER - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: The workload's OWN authorization server, as an https origin and path.
EXTERNAL_SCOPE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: The scope to request from the external authorization server, when it needs one.
EXTERNAL_TOKEN - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: An externally minted token supplied verbatim.
EXTERNAL_TOKEN - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link: AuthSetting.EXTERNAL_TOKEN - the token, supplied verbatim.
EXTERNAL_TOKEN_COMMAND - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: A command that prints the current token to standard output.
EXTERNAL_TOKEN_COMMAND - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link: AuthSetting.EXTERNAL_TOKEN_COMMAND - a command that prints the token.
EXTERNAL_TOKEN_COMMAND_TIMEOUT_MILLIS - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: How long that command may take, in milliseconds.
EXTERNAL_TOKEN_FILE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: A file an external agent writes the current token into.
EXTERNAL_TOKEN_FILE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link: AuthSetting.EXTERNAL_TOKEN_FILE - a file holding the current token.
ExternalIssuerAdmission - Class in co.ankatech.ankasecure.sdk.auth: Decides whether this process may talk to an external authorization server at all, and refuses locally - before a socket exists - when it may not.
ExternalIssuerAdmissionException - Exception in co.ankatech.ankasecure.sdk.auth: An external issuer was refused before any connection was opened, and this names the rule that refused it.
ExternalIssuerAdmissionException(ExternalIssuerAdmissionException.Rule, String) - Constructor for exception co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException
ExternalIssuerAdmissionException(ExternalIssuerAdmissionException.Rule, String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException: The same refusal, carrying the failure that produced it.
ExternalIssuerAdmissionException.Rule - Enum Class in co.ankatech.ankasecure.sdk.auth: The admission rules, one per way an issuer can be refused.
externalKind() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link: Which external source kind this link names, if any - a declared mapping, never a name correspondence.
ExternalTokenException - Exception in co.ankatech.ankasecure.sdk.auth: An externally minted token could not be obtained from its configured source.
ExternalTokenException(String) - Constructor for exception co.ankatech.ankasecure.sdk.auth.ExternalTokenException
ExternalTokenException(String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.auth.ExternalTokenException
ExternalTokenProvider - Interface in co.ankatech.ankasecure.sdk.auth: Supplies an externally minted token that some OTHER authorization server issued to this workload.
ExternalTokenSourceKind - Enum Class in co.ankatech.ankasecure.sdk.auth: Where an externally minted token comes from.

F

FAIL_IF_EXISTS - Enum constant in enum class co.ankatech.ankasecure.sdk.model.OverwritePolicy: Default: refuse to clobber an existing destination (atomic-rename is the TOCTOU guard).
fatal(String, Throwable) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Reports a fatal error on stderr and aborts the scenario by throwing ExampleFailedException.
FEDERATED_ASSERTION - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthMechanism: An externally minted token - issued by Auth0, Entra, Okta, Keycloak, Cognito or any other OAuth 2.0 / OIDC authorization server the deployment trusts - presented as a client_assertion under the federated assertion type.
FederatedAssertionTokenSource - Class in co.ankatech.ankasecure.sdk.auth: Presents a token some OTHER authorization server issued to this workload - Auth0, Entra, Okta, Keycloak, Cognito, or anything else the deployment has declared it trusts.
FederatedAssertionTokenSource(AnkaSecureOpenApiClient, String, ExternalTokenProvider) - Constructor for class co.ankatech.ankasecure.sdk.auth.FederatedAssertionTokenSource
fetchExternalToken() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider
fetchExternalToken() - Method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider
fetchExternalToken() - Method in class co.ankatech.ankasecure.sdk.auth.ExplicitExternalTokenProvider
fetchExternalToken() - Method in interface co.ankatech.ankasecure.sdk.auth.ExternalTokenProvider: Produces the current external token.
fetchExternalToken() - Method in class co.ankatech.ankasecure.sdk.auth.FileExternalTokenProvider
FILE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalTokenSourceKind: A file an external agent writes and refreshes; the SDK reads it on every mint.
FileExternalTokenProvider - Class in co.ankatech.ankasecure.sdk.auth: Reads an externally minted token from a file the operator named.
FileExternalTokenProvider(Path) - Constructor for class co.ankatech.ankasecure.sdk.auth.FileExternalTokenProvider
FileIO - Class in co.ankatech.ankasecure.sdk.util: Centralised UTF-8 file I/O utility for the ANKASecure SDK.
forIssuer(AdmittedIssuer) - Static method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient: Builds the issuer client for an admitted issuer, trusting the platform's certificate authorities and nothing else.
FRAGMENT_PRESENT - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule: Carries a fragment.
from(QualifiedTimestamp) - Static method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo: Maps a generated OpenAPI QualifiedTimestamp to this public view.
from(Properties, AuthenticatedSdk) - Static method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys: Builds a resolver from the loaded cli.properties and an authenticated SDK.
fromLevel(int) - Static method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel: Parses a security level from its numeric value.

G

generalJweToCompact(String) - Static method in class co.ankatech.ankasecure.sdk.jose.AnkaJoseUtil: Converts a General JSON Serialization JWE (as a JSON string) into the Compact Serialization (5 dot-separated segments).
generalJwsToCompact(String) - Static method in class co.ankatech.ankasecure.sdk.jose.AnkaJoseUtil: Converts a General JSON Serialization JWS (as a JSON string) into the Compact Serialization (3 dot-separated segments).
GENERATED - Enum constant in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin: Key natively created by ANKASecure platform using generate-key endpoint.
GeneratedKeyPair(PublicKey, PrivateKey, String) - Constructor for record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair: Creates an instance of a GeneratedKeyPair record class.
generateKeyPair(String) - Static method in class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil: Generates a key pair for one of the PQC transport KEMs (AsymmetricAlgorithmRegistry.supportedKems()).
GenericWarning - Record Class in co.ankatech.ankasecure.sdk.model.warning: Generic warning for messages that don't match known patterns.
GenericWarning(String) - Constructor for record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning: Creates an instance of a GenericWarning record class.
get() - Static method in class co.ankatech.ankasecure.sdk.util.CryptoRandomProvider: Returns the singleton SecureRandom instance.
getAccess() - Method in exception co.ankatech.ankasecure.sdk.exception.LocalFileException: Returns what the operation needed of the file.
getAdvisory() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
getAesKey() - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult: Returns a direct reference to the AES-256 key bytes.
getAesKey() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession
getAlg() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter
getAlg() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
getAlg() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the algorithm identifier.
getAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata
getAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult: Returns the catalogue algorithm of the key that performed this encryption (e.g.
getAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.SignResult: Returns the catalogue algorithm of the key that signed (e.g.
getAnalysis() - Method in class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult: Returns the complete PKCS#7 analysis response.
getBitSecurity() - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel: Returns the equivalent symmetric key strength in bits.
getCategory() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter
getCategory() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo: Returns the algorithm category.
getClassicalAlgorithm() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair: Returns the classical algorithm in this pair.
getCompositeMode() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter: Returns the composite constructions to match (OR logic), as wire tokens.
getCompositeMode() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo: Returns how this entry's components are combined, for a hybrid algorithm.
getCompositeMode() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns how a composite key's components are combined.
getContext() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException: Returns additional context information provided with this exception.
getCorrelationId() - Method in exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException: Returns the request correlation id, for cross-service tracing.
getCreatedAt() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the key creation timestamp.
getCreatedAt() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession
getDecryptAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Gets the algorithm used for decryption.
getDecryptedData() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult: Returns the raw decrypted bytes.
getDecryptedData() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Returns the decrypted plaintext bytes.
getDecryptKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Gets the key identifier requested for decryption.
getDecryptMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Gets the key-material version (ank_kv) that performed the decryption under the requested Stable KID.
getDecryptWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Gets structured warnings from the decryption and from the verification of every inner signature.
getDeletedAt() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns when the key was destroyed.
getDescription() - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel: Returns a human-readable description of this security level.
getDestination() - Method in exception co.ankatech.ankasecure.sdk.exception.DestinationExistsException: Returns the destination path that already exists.
getDestination() - Method in exception co.ankatech.ankasecure.sdk.exception.StaleSidecarException: Returns the final destination the blocked write targeted.
getEncryptAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Gets the algorithm used for encryption.
getEncryptKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Gets the key identifier requested for encryption.
getEncryptMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Gets the key-material version (ank_kv) that performed the encryption operation under the requested Stable KID.
getEncryptWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Gets structured warnings related to the encryption operation.
getErrorCode() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException: Returns the specific SDK error code categorizing this failure.
getExpiresAt() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the hard expiration timestamp.
getExportable() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns whether the key can be exported.
getGcmTagVerdict() - Method in exception co.ankatech.ankasecure.sdk.exception.DecryptVerifyIntegrityException: Returns the outer AES-GCM tag outcome.
getGcmTagVerdict() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Returns the outer AES-GCM tag integrity dimension of the streaming decrypt-verify result.
getGenTime() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo
getHandshakeEndpoint() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig
getHttpStatus() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException: Returns the HTTP status code returned by the remote service.
getJoseOutput() - Method in class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult: Returns the output file containing converted JOSE data.
getJweToken() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult: Returns the JWE emitted by the server: Compact for a single-recipient key, General JSON for a composite KEM key.
getJweToken() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult: Returns the new JWE token after re-encryption.
getJweToken() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Returns the nested JWE(JWS) token.
getJwsToken() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult: Returns the new JWS after re-signing.
getJwsToken() - Method in class co.ankatech.ankasecure.sdk.model.SignResult: Returns the JWS as persisted: the Compact Serialization, or the JWS JSON Serialization when the result carries more than Compact can (a JAdES qualified timestamp).
getKdf() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the key derivation function for composite KEM keys.
getKemAlgorithm() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig
getKeyMetadata(String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Retrieves metadata for a specific key.
getKeyMetadata(String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl
getKeyMetadata(String) - Method in class co.ankatech.ankasecure.sdk.operations.KeyManagementOperations: Retrieves complete metadata for a specific key.
getKeyOps() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter
getKeyOps() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo: Returns an unmodifiable copy to protect internal state.
getKeyOps() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the permitted key operations.
getKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata
getKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult: Returns the key identifier originally supplied by the client.
getKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.SignResult: Returns the key identifier originally requested by the client.
getKid() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the key identifier (kid) the key is addressed by.
getKty() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter
getKty() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
getKty() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the key type.
getLevel() - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel: Returns the numeric security level.
getMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata
getMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult: Returns the key-material version (ank_kv) that performed the operation under the requested Stable KID; null when not resolvable (e.g. utility mode) — never 0.
getMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.SignResult: Returns the key-material version (ank_kv) that performed the operation under the requested Stable KID; null when not resolvable (e.g. utility mode) — never 0.
getMaxSecurityLevel() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter
getMaxUsageLimit() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the hard usage limit.
getMeta() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult: Returns the full metadata returned by the service.
getMinSecurityLevel() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter
getNewKeyAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult: Returns the hybrid algorithm used for encryption.
getNewKeyAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult: Returns the algorithm used for signing.
getNewKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult: Returns the original key identifier requested for encryption.
getNewKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult: Returns the key identifier originally requested for signing.
getOldKeyAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult: Returns the hybrid algorithm used for decryption.
getOldKeyAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult: Returns the algorithm used for verification.
getOldKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult: Returns the original key identifier requested for decryption.
getOldKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult: Returns the key identifier originally requested for verification.
getOperation() - Method in exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException: Returns the operation whose end-of-stream verdict failed.
getOrigin() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the key origin.
getPath() - Method in exception co.ankatech.ankasecure.sdk.exception.LocalFileException: Returns the file the failed operation targeted.
getPolicyOid() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo
getPqcAlgorithm() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair: Returns the PQC algorithm in this pair.
getProviderInfo() - Static method in class co.ankatech.ankasecure.sdk.util.CryptoRandomProvider: Returns information about the underlying random provider.
getQualifiedTimestamp() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Returns the embedded RFC 3161 qualified timestamp from the inner JWS, when present.
getQualifiedTimestamp() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult: Returns the embedded RFC 3161 qualified timestamp, when present.
getReason() - Method in exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException: Returns the server's oracle-safe reason for the failing verdict.
getRecipients() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult: Returns every recipient of the re-encrypted JWE, in the JWE's recipient order: the key each one names (kid), the key-material version its content-encryption key was wrapped to (materialVersion), and that key's catalogue algorithm (algorithm).
getResponseBody() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException: Returns the full response body returned by the remote service.
getRestricted() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns whether the key is restricted (legacy format).
getRetryAfterSeconds() - Method in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException: Returns the server-provided Retry-After hint, in integer seconds.
getSecurityLevel() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
getSerialNumber() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo
getSession() - Method in class co.ankatech.ankasecure.sdk.transport.PqcSessionManager: Returns an active session, or performs a new handshake if none exists or TTL expired.
getSessionId() - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult: Returns the opaque session identifier for follow-up calls.
getSessionId() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession
getSessionTtl() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig
getSidecar() - Method in exception co.ankatech.ankasecure.sdk.exception.StaleSidecarException: Returns the stale sidecar path that blocked the write.
getSignAlgorithmUsed() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Gets the algorithm used for signing.
getSignatureResults() - Method in exception co.ankatech.ankasecure.sdk.exception.DecryptVerifyIntegrityException: Returns the server's per-signature detail of the inner JWS, one entry per signature in token order; an entry with verified == false names a signer that did not verify or was refused.
getSignatureResults() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Returns the verification detail of every signature of the inner JWS, in token order (RFC 7515 §7.2.1): the key each signature names, that key's catalogue algorithm, the key-material version it resolved to, and whether it verified.
getSignatureResults() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult: Returns every signature of the input JWS, in token order (RFC 7515 §7.2.1): the key it names, that key's catalogue algorithm, the key-material version it resolved to, and whether it verified.
getSignatureResults() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult: Returns the verification detail of every signature of the JWS, in token order - see VerifySignatureResult.signatureResults.
getSignatureVerdict() - Method in exception co.ankatech.ankasecure.sdk.exception.DecryptVerifyIntegrityException: Returns the inner JWS signature outcome.
getSignatureVerdict() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Returns the inner JWS signature integrity dimension of the streaming decrypt-verify result.
getSignKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Gets the key identifier requested for signing.
getSignMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Gets the key-material version (ank_kv) that performed the signing operation under the requested Stable KID.
getSignWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Gets structured warnings related to the signing operation.
getSoftLimitExpiration() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the soft expiration (warning threshold) timestamp.
getSoftUsageLimit() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the soft usage limit (warning threshold).
getSourceMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult: Returns the key-material version that decrypted the original payload under the source Stable KID.
getSourceMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult: Returns the key-material version that verified the original signature under the source Stable KID.
getStandards() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter
getStandards() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo: Returns an unmodifiable copy to protect internal state.
getStatus() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter
getStatus() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
getStatus() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the current lifecycle status, as the published key-status token.
getSunsetDate() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
getSupportedAlgorithms() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Retrieves the complete list of cryptographic algorithms supported by the server.
getSupportedAlgorithms() - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl
getSupportedAlgorithms() - Method in class co.ankatech.ankasecure.sdk.operations.AlgorithmCatalogOperations: Retrieves the complete catalog of cryptographic algorithms supported by the server.
getSupportedAlgorithms(AlgorithmFilter) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Retrieves cryptographic algorithms matching the specified filter criteria.
getSupportedAlgorithms(AlgorithmFilter) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl
getSupportedAlgorithms(AlgorithmFilter) - Method in class co.ankatech.ankasecure.sdk.operations.AlgorithmCatalogOperations: Retrieves supported algorithms matching the specified filter criteria.
getTargetMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult: Returns the PRIMARY key-material version that encrypted the new payload under the target Stable KID.
getTargetMaterialVersion() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult: Returns the PRIMARY key-material version that signed the new payload under the target Stable KID.
getTokenExpiration() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Extracts the expiration time from the JWT token.
getTotalElements() - Method in exception co.ankatech.ankasecure.sdk.exception.PaginationCeilingExceededException
getTotalPages() - Method in exception co.ankatech.ankasecure.sdk.exception.PaginationCeilingExceededException
getTrustStatus() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo
getUsageCount() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the current usage counter.
getUuid() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Returns the key's own identity.
getVerdict() - Method in exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException: Returns the verdict outcome.
getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata: Returns structured warnings encountered during the decryption operation.
getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult: Returns structured warnings encountered during the encryption operation.
getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult: Returns non-fatal warnings encountered during the re-encryption operation.
getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.ResignResult: Returns non-fatal warnings encountered during the re-signing operation.
getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignResult: Returns structured warnings encountered during the signing operation.
getWarnings() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult: Returns structured warnings encountered during signature verification.

H

HARD_PAGE_CAP - Static variable in exception co.ankatech.ankasecure.sdk.exception.PaginationCeilingExceededException: Defensive hard cap on auto-pagination (10,000 pages × 200 = 2,000,000 keys).
hasAnyWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Checks if the operation produced any warning (decryption or verification).
hasAnyWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Checks if there are any warnings (sign or encrypt).
hasCachedToken() - Method in class co.ankatech.ankasecure.sdk.auth.CachingTokenSource: Whether a token is currently cached.
hasCachedToken() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider: Whether a token is currently cached.
hasDecryptWarnings() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Checks if the warning list is non-empty.
hasEncryptWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Checks if encryption operation produced warnings.
hasFilters() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter: Checks if any filter criteria are set.
hashCode() - Method in record class co.ankatech.ankasecure.sdk.auth.MintedToken: Returns a hash code value for this object.
hashCode() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
hashCode() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair
hashCode() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo
hashCode() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata
hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters: Returns a hash code value for this object.
hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage: Returns a hash code value for this object.
hashCode() - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult
hashCode() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo
hashCode() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult
hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning: Returns a hash code value for this object.
hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning: Returns a hash code value for this object.
hashCode() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning: Returns a hash code value for this object.
hashCode() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair: Returns a hash code value for this object.
hasSignWarnings() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Checks if signing operation produced warnings.
HEADER_KEM - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor: Header that tells the server which KEM algorithm to use.
HEADER_SESSION - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor: Header that carries the PQC session identifier.
HEADER_TRANSPORT - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor: Header that indicates the payload is PQC-encrypted.
HeaderMetaParser - Class in co.ankatech.ankasecure.sdk.meta: Utility class that converts the Crypto-Policy-Info response header emitted by all streaming endpoints into the immutable SDK metadata objects required by client code.
HIGH_THROUGHPUT - Enum constant in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode
host() - Method in class co.ankatech.ankasecure.sdk.auth.AdmittedIssuer: The host the pinned addresses belong to, as a resolver key: an IPv6 literal appears here WITHOUT its brackets, because that is the form a Dns implementation is asked for.
HOST_DOES_NOT_RESOLVE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule: The host does not resolve, so there is nothing that could be pinned.
HTTP - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode: Remote endpoint replied with an HTTP 4xx (client error) or 5xx (server error).
Http2RequiredException - Exception in co.ankatech.ankasecure.sdk.exception: A streaming request that requires HTTP/2 was about to be sent over a connection that negotiated something else, and was refused before any request byte was written.
Http2RequiredException(String) - Constructor for exception co.ankatech.ankasecure.sdk.exception.Http2RequiredException
HYBRID - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category: Composite algorithms combining classical and post-quantum components.

I

IMPORTED - Enum constant in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin: Key imported from external source (PKCS#12, JWK, PEM, etc.).
INFO - Enum constant in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity: Informational message, no action required.
intercept(Interceptor.Chain) - Method in class co.ankatech.ankasecure.sdk.transport.ConfiguredOriginInterceptor
intercept(Interceptor.Chain) - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor
InternalServiceFactory - Class in co.ankatech.ankasecure.sdk.internal
InternalServiceFactory(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory: Convenience factory using the default OverwritePolicy.FAIL_IF_EXISTS write policy.
InternalServiceFactory(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory
invalidate() - Method in class co.ankatech.ankasecure.sdk.auth.CachingTokenSource: Discards the cached token and unbinds it from the transport.
invalidate() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider: Discards the cached token so the next call fetches a fresh one.
invalidate() - Method in interface co.ankatech.ankasecure.sdk.auth.ExternalTokenProvider: Discards anything this provider has cached, so the next call produces a fresh token.
invalidate() - Method in class co.ankatech.ankasecure.sdk.auth.FederatedAssertionTokenSource: Discards this source's ANKASecure token AND anything the provider cached.
invalidate() - Method in class co.ankatech.ankasecure.sdk.auth.SuppliedTokenSource
invalidate() - Method in interface co.ankatech.ankasecure.sdk.auth.TokenSource: Discards the cached token and unbinds it from the transport, so the next TokenSource.accessToken() mints a fresh one.
invalidateSession() - Method in class co.ankatech.ankasecure.sdk.transport.PqcSessionManager: Invalidates the current session, forcing handshake on next request.
InvalidInputException - Exception in co.ankatech.ankasecure.sdk.exception: Thrown when input validation fails for SDK operations.
InvalidInputException(String) - Constructor for exception co.ankatech.ankasecure.sdk.exception.InvalidInputException: Constructs a new invalid input exception with the specified message.
InvalidInputException(String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.InvalidInputException: Constructs a new invalid input exception with the specified message and cause.
invocationsRemaining() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning: Returns the value of the invocationsRemaining record component.
IO - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode: Generic I/O problem during HTTP communication.
isCarrierGradeNat(InetAddress) - Static method in class co.ankatech.ankasecure.sdk.auth.RejectedEgressAddresses: Carrier-grade NAT (100.64.0.0/10, RFC 6598).
isCleared() - Method in class co.ankatech.ankasecure.sdk.security.BearerToken
isClosed() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk
isClosed() - Method in class co.ankatech.ankasecure.sdk.security.SecretBuffer
isClosed() - Method in class co.ankatech.ankasecure.sdk.security.SecretChars
isClosed() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportSession
isCompleteSuccess() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Checks if operation completed successfully with no issues.
isComposite() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Checks if this is a composite key.
isCompositeKem() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Checks if this is a composite KEM key.
isCompositeSignature() - Method in class co.ankatech.ankasecure.sdk.model.KeyMetadata: Checks if this is a composite signature key.
isEnabled() - Method in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig
isExternalTokenSource() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link
isIpv4TransitionPrefix(InetAddress) - Static method in class co.ankatech.ankasecure.sdk.auth.RejectedEgressAddresses: The fixed, well-known IPv6 prefixes that CARRY or ALIAS an IPv4 address - the transition mechanisms.
isMigrationMode() - Method in class co.ankatech.ankasecure.sdk.model.ReencryptResult: Indicates whether the operation ran in migration mode.
isNonRoutable(InetAddress) - Static method in class co.ankatech.ankasecure.sdk.auth.RejectedEgressAddresses: Loopback, any-local, link-local (including the 169.254.169.254 cloud metadata address), site-local (RFC 1918), IPv6 unique-local (fc00::/7) or multicast.
isPresent() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo
isPresent(AuthSetting) - Method in interface co.ankatech.ankasecure.sdk.auth.AuthSettings: Whether a setting is configured, WITHOUT producing its value.
isRejectedEgressTarget(InetAddress) - Static method in class co.ankatech.ankasecure.sdk.auth.RejectedEgressAddresses: The EGRESS reject set - the FOUR disjuncts, composed once.
isSignatureValid() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Checks if the signature verification succeeded.
issuer() - Method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient
IssuerHttpClient - Class in co.ankatech.ankasecure.sdk.auth: The SECOND HTTP client: the one that talks to the external authorization server, and to nothing else.
isTokenExpiredLocally() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Checks whether the access token has expired, or is about to, according to its local exp claim only.
isValid() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult: Indicates whether verification succeeded both cryptographically and against server-side policy checks.

J

JSON - Enum constant in enum class co.ankatech.ankasecure.sdk.model.JwsSerialization: RFC 7515 Section 7.2 JWS JSON Serialization (able to carry a JAdES timestamp).
jweToken(String) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder: Sets the JWE token (required).
JwsSerialization - Enum Class in co.ankatech.ankasecure.sdk.model: JWS serialization representation requested for an attached signing operation.
jwsToken(String) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder: Sets the JWS token (required).

K

KEY_ENABLED - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig
KEY_HANDSHAKE_ENDPOINT - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig
KEY_KEM_ALGORITHM - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig
KEY_SESSION_TTL - Static variable in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig
KEY_TYPE - Static variable in enum class co.ankatech.ankasecure.sdk.model.CompositeMode: The single coarse key type every composite key and every hybrid catalogue entry publishes.
KeyExpirationWarning - Record Class in co.ankatech.ankasecure.sdk.model.warning: Warning indicating that a cryptographic key is approaching expiration.
KeyExpirationWarning(int) - Constructor for record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning: Creates an instance of a KeyExpirationWarning record class.
KeyFilters - Record Class in co.ankatech.ankasecure.sdk.model: Server-side filters for the key listing endpoints.
KeyFilters(String, Boolean, String, String) - Constructor for record class co.ankatech.ankasecure.sdk.model.KeyFilters: Refuses the SDK's read-only unknown tokens as filter values.
KeyManagementOperations - Class in co.ankatech.ankasecure.sdk.operations: Key management operations facade.
KeyManagementOperations(InternalServiceFactory, TokenSource, BooleanSupplier, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.KeyManagementOperations
KeyManagementServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl: Thread-safe implementation of KeyManagementService.
KeyManagementServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl
KeyMetadata - Class in co.ankatech.ankasecure.sdk.model: Metadata for a cryptographic key in the ANKASecure platform.
KeyMetadata(String, String, String, CompositeMode, String, String, List<String>, Boolean, KeyOrigin, Boolean, String, ZonedDateTime, ZonedDateTime, ZonedDateTime, ZonedDateTime, Integer, Integer, Integer) - Constructor for class co.ankatech.ankasecure.sdk.model.KeyMetadata: Constructor for internal SDK use.
KeyOrigin - Enum Class in co.ankatech.ankasecure.sdk.model: Indicates how a cryptographic key was created or acquired.
KeyPage - Record Class in co.ankatech.ankasecure.sdk.model: One page of a key listing, mirroring the server's paginated envelope.
KeyPage(List<KeyMetadata>, long, int, int) - Constructor for record class co.ankatech.ankasecure.sdk.model.KeyPage: Creates an instance of a KeyPage record class.
keyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder: Sets the requested key identifier.
keyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder: Sets the requested key identifier.
keys() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory
kidForAlgorithm(String) - Method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys: Returns the first pre-provisioned kid whose algorithm equals alg (case-insensitive).
kidForAlgorithmAndOp(String, String) - Method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys: Returns the first pre-provisioned kid whose algorithm equals alg AND whose keyOps include keyOp — for picking between keys that share an algorithm but differ in operation (e.g. distinct cross-kid endpoints).
kids() - Method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys: The pre-provisioned playground kids, in file order.
kind() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider: The source kind this provider presents, as a declared mapping rather than a name.
kind() - Method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider
kind() - Method in class co.ankatech.ankasecure.sdk.auth.ExplicitExternalTokenProvider
kind() - Method in interface co.ankatech.ankasecure.sdk.auth.ExternalTokenProvider: Which of the configured source kinds this provider is, or null for a consumer-supplied provider that is none of them.
kind() - Method in class co.ankatech.ankasecure.sdk.auth.FileExternalTokenProvider
kty() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters: Returns the value of the kty record component.

L

last() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage: true when this is the last page (or the listing is empty).
LEGACY - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status: Deprecated algorithm maintained for backward compatibility only.
length() - Method in class co.ankatech.ankasecure.sdk.security.SecretBuffer
length() - Method in class co.ankatech.ankasecure.sdk.security.SecretChars
LEVEL_1 - Enum constant in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel: NIST Security Level 1 - Equivalent to AES-128 (128-bit security).
LEVEL_3 - Enum constant in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel: NIST Security Level 3 - Equivalent to AES-192 (192-bit security).
LEVEL_5 - Enum constant in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel: NIST Security Level 5 - Equivalent to AES-256 (256-bit security).
lifetime() - Method in record class co.ankatech.ankasecure.sdk.auth.MintedToken: Returns the value of the lifetime record component.
listAllKeys(KeyFilters) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Lists ALL keys matching the filters by auto-paginating through the server's paginated listing (the AWS-CLI pattern: the API pages, the client iterates).
listAllKeys(KeyFilters) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl
listAllKeys(KeyFilters) - Method in class co.ankatech.ankasecure.sdk.operations.KeyManagementOperations: Lists ALL keys matching the filters via client-side auto-pagination (bounded; throws PaginationCeilingExceededException beyond the hard cap).
listKeys(KeyFilters, int, int) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Lists ONE PAGE of the keys accessible to the authenticated client.
listKeys(KeyFilters, int, int) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.KeyManagementServiceImpl
listKeys(KeyFilters, int, int) - Method in class co.ankatech.ankasecure.sdk.operations.KeyManagementOperations: Lists ONE PAGE of keys with optional server-side filters (applied BEFORE pagination — the page totals are filtered, tenant-scoped counts).
loadProperties() - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Loads CLI properties using the following look-up order: A cli.properties file in the current working directory. The file pointed to by the cli.config system property. A /cli.properties resource on the classpath.
LocalFileException - Exception in co.ankatech.ankasecure.sdk.exception: Thrown when a file operation fails on the caller's own file system: an input file could not be read, or the result — or a working file derived from the input — could not be written.
LocalFileException(Path, LocalFileException.Access, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.LocalFileException: Constructs a new local file-system failure.
LocalFileException.Access - Enum Class in co.ankatech.ankasecure.sdk.exception: What the operation needed of the file.
LOOPBACK_WITHOUT_OPT_IN - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule: Every resolved address is loopback and the environment opt-in is not set.

M

main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.EncryptCredentials
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleComplete
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleMenu
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario1: Runs the ML-KEM-512 streaming encryption scenario on a pre-provisioned key.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario10: Runs the ML-KEM-1024 compact JWE encrypt/decrypt scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario11: Runs the ML-DSA-87 compact JWS sign/verify scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario12: Runs the ML-DSA-65 to SLH-DSA-SHA2-128S streaming re-sign scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario13: Runs the runtime PQC algorithm discovery scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario14: Runs the in-memory post-quantum crypto scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario15: Runs the compact-token rotation scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario16: Runs the XMSS streaming detached JWS verification scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario17: Runs the sign-then-encrypt nested operations scenario on pre-provisioned keys.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario18
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario19: Runs the PKCS#7/CMS structural-analysis scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario2: Runs the RSA-2048 streaming sign/verify scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario20: Runs the PKCS#7 → JOSE conversion / migration scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario21: Runs the streaming sign-then-encrypt / decrypt-then-verify scenario on pre-provisioned keys.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario3: Runs the AES-256 streaming encrypt/decrypt scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario4: Runs the RSA-3072 to ML-KEM-768 streaming re-encryption scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario5: Runs the ML-KEM-512 compact JWE encrypt/decrypt scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario6: Runs the ML-DSA-87 compact JWS sign/verify scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario7: Runs the AES-256 compact JWE encrypt/decrypt scenario.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario8: Runs the ML-KEM-768 to ML-KEM-1024 re-encryption scenario on the granted pair.
main(String[]) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleScenario9: Runs the RSA-3072 to ML-DSA-87 compact JWS re-sign scenario.
MALFORMED_JOSE_INPUT - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode: A JWE or JWS supplied by the caller is not a well-formed JOSE serialization the SDK can send, and was refused on the client before any request was made.
materializeToTempFile() - Static method in class co.ankatech.ankasecure.sdk.examples.Pkcs7ExampleFixture: Materializes the fixture to a temporary File under ExampleUtil.TEMP_DIR, for the streaming APIs that take a java.io.File.
materialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder: Sets the key-material version that performed the operation.
materialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder: Sets the key-material version that performed the operation.
MAX_RETRY_AFTER_SECONDS - Static variable in exception co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException: The largest Retry-After hint, in seconds, the SDK reports: one hour.
MAX_TIMEOUT - Static variable in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider: A configured timeout above this is lowered to it.
mechanism() - Method in class co.ankatech.ankasecure.sdk.auth.FederatedAssertionTokenSource
mechanism() - Method in class co.ankatech.ankasecure.sdk.auth.NativeSecretTokenSource
mechanism() - Method in class co.ankatech.ankasecure.sdk.auth.PrivateKeyJwtTokenSource
mechanism() - Method in class co.ankatech.ankasecure.sdk.auth.SuppliedTokenSource
mechanism() - Method in interface co.ankatech.ankasecure.sdk.auth.TokenSource: Names the credential kind this source presents.
mechanism() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link
meetsMinimum(NistSecurityLevel) - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel: Checks if this security level meets or exceeds a minimum required level.
message() - Method in interface co.ankatech.ankasecure.sdk.model.warning.CryptoWarning: Returns a human-readable warning message.
message() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning
message() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning
message() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning
meta(DecryptResultMetadata) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResult.Builder: Sets the metadata.
migration() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory
migrationMode() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo
migrationMode(boolean) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder
MigrationServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl
MigrationServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl: Convenience constructor using the default OverwritePolicy.FAIL_IF_EXISTS policy.
MigrationServiceImpl(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl
MigrationWorkflowResult - Class in co.ankatech.ankasecure.sdk.model: Immutable response model returned by combined PKCS#7 migration workflows.
MigrationWorkflowResult() - Constructor for class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult: Default constructor for SDK internal use.
MigrationWorkflowResult(Pkcs7AnalysisResponse, File) - Constructor for class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult: Constructs a new migration workflow result with the specified analysis and JOSE output.
MIN_TIMEOUT - Static variable in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider: A configured timeout below this is raised to it; a command needs some room to start.
MintedToken - Record Class in co.ankatech.ankasecure.sdk.auth: One ANKASecure access token together with the lifetime the issuer stated for it.
MintedToken(BearerToken, Duration) - Constructor for record class co.ankatech.ankasecure.sdk.auth.MintedToken: Creates an instance of a MintedToken record class.

N

NATIVE_CLIENT_SECRET - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthMechanism: RFC 6749 §4.4 client credentials: an ANKASecure-issued client_secret posted with grant_type=client_credentials.
NATIVE_CLIENT_SECRET - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link: AuthSetting.CLIENT_SECRET - the platform's own credential.
NativeSecretTokenSource - Class in co.ankatech.ankasecure.sdk.auth: Presents an ANKASecure-issued client_secret - the platform's own credential, and the last link of the resolution chain.
NativeSecretTokenSource(AnkaSecureOpenApiClient, String, SecretChars) - Constructor for class co.ankatech.ankasecure.sdk.auth.NativeSecretTokenSource
newKeyAlgorithm() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo
newKeyAlgorithm(String) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder
newKeyExpWarnDays() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo
newKeyExpWarnDays(int) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder
newKeyRequested() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo
newKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder
newKeyUsageWarn() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo
newKeyUsageWarn(int) - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo.Builder
NistSecurityLevel - Enum Class in co.ankatech.ankasecure.sdk.model: NIST security levels for post-quantum cryptographic algorithms.
none() - Static method in record class co.ankatech.ankasecure.sdk.model.KeyFilters: An unfiltered listing: every key the tenant still holds, in any lifecycle state (active, expired, suspended, revoked, archived, pending_destruction).
NOT_A_URL - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule: Absent, blank, or not parseable as an HTTP URL at all.
NOTICE - Enum constant in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity: User should be aware and plan for future action.
nullSafe(String) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Returns the input string if it is non-null and non-blank; otherwise returns the literal "(none)".
number() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage: Returns the value of the number record component.

O

of(Properties) - Static method in interface co.ankatech.ankasecure.sdk.auth.AuthSettings: Settings backed by a properties object with the process environment as fallback.
okHttpClient() - Method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient: The underlying client.
optionalCompanions() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link
ORDER - Static variable in class co.ankatech.ankasecure.sdk.auth.TokenSourceChain: The chain, in the order it is evaluated.
origin() - Method in class co.ankatech.ankasecure.sdk.auth.AdmittedIssuer: The origin the issuer client is pinned to.
origin() - Method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient
origin() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters: Returns the value of the origin record component.
origin() - Method in class co.ankatech.ankasecure.sdk.transport.ConfiguredOriginInterceptor: The origin this interceptor pins to, for diagnostics.
overlay(Properties) - Method in class co.ankatech.ankasecure.sdk.auth.AuthSettings.Builder: Uses these properties as the middle precedence tier.
OVERWRITE - Enum constant in enum class co.ankatech.ankasecure.sdk.model.OverwritePolicy: Opt-in: atomically replace an existing destination (REPLACE_EXISTING, Windows fallback).
overwritePolicy() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Returns the file-output overwrite policy in effect for this instance.
OverwritePolicy - Enum Class in co.ankatech.ankasecure.sdk.model: Governs how a file-output operation promotes its result onto an already-existing destination.

P

PaginationCeilingExceededException - Exception in co.ankatech.ankasecure.sdk.exception: Thrown by the auto-paginating listAllKeys(filters) when the server reports more pages than the SDK's defensive ceiling allows (ceil(totalElements/size)+1 iterations, hard-capped at 10000 pages).
PaginationCeilingExceededException(long, int) - Constructor for exception co.ankatech.ankasecure.sdk.exception.PaginationCeilingExceededException
path() - Method in class co.ankatech.ankasecure.sdk.auth.FileExternalTokenProvider: The file this provider reads.
performMigrationWorkflow(File, Pkcs7ConversionStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Performs a complete PKCS#7-to-JOSE migration workflow with analysis and conversion.
performMigrationWorkflow(File, Pkcs7ConversionStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl
performMigrationWorkflow(File, Pkcs7ConversionStreamRequest, File) - Method in class co.ankatech.ankasecure.sdk.operations.UtilityOperations: Performs a complete PKCS#7-to-JOSE migration workflow with analysis and conversion.
permits(HttpUrl) - Method in class co.ankatech.ankasecure.sdk.transport.ConfiguredOriginInterceptor: Whether a URL is on the configured origin.
phase() - Method in exception co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException: The phase that failed.
pinnedAddresses() - Method in class co.ankatech.ankasecure.sdk.auth.AdmittedIssuer: The addresses admission resolved and screened.
Pkcs7ExampleFixture - Class in co.ankatech.ankasecure.sdk.examples: Classpath loader for the PKCS#7/CMS example fixture used by the data-plane migration scenarios (ExampleScenario19, ExampleScenario20).
POST_QUANTUM - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category: Quantum-resistant algorithms; the standards attribution differs per algorithm.
PqcClientCryptoUtil - Class in co.ankatech.ankasecure.sdk.util: PqcClientCryptoUtil
PqcClientCryptoUtil.GeneratedKeyPair - Record Class in co.ankatech.ankasecure.sdk.util: A record containing both raw key objects (public, private) and their Base64-encoded forms.
PqcHandshakeResult - Class in co.ankatech.ankasecure.sdk.model: Immutable value object returned by PQC hybrid handshake endpoints.
PqcHandshakeResult(byte[], String) - Constructor for class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult
PqcSessionManager - Class in co.ankatech.ankasecure.sdk.transport: Manages PQC transport sessions: generates a key pair for the configured KEM (PqcTransportConfig.getKemAlgorithm()), performs the handshake, unwraps the AES session key, and caches the session until its TTL expires.
PqcSessionManager(AnkaSecureOpenApiClient, PqcTransportConfig) - Constructor for class co.ankatech.ankasecure.sdk.transport.PqcSessionManager: Constructs manager with the given client and config.
PqcTransportConfig - Class in co.ankatech.ankasecure.sdk.transport: Configuration holder for PQC transport encryption settings.
PqcTransportConfig(Properties) - Constructor for class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig: Reads PQC transport settings from provided CLI properties.
PqcTransportInterceptor - Class in co.ankatech.ankasecure.sdk.transport: OkHttp Interceptor that transparently encrypts request bodies and decrypts response bodies when PQC transport encryption is enabled.
PqcTransportInterceptor(PqcTransportConfig, PqcSessionManager) - Constructor for class co.ankatech.ankasecure.sdk.transport.PqcTransportInterceptor
PqcTransportSession - Class in co.ankatech.ankasecure.sdk.transport: Internal representation of a PQC transport session: holds sessionId, AES key, and creation timestamp.
prepareWorkingDir() - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prepares the shared working directory for the current JVM.
printDecryptMeta(DecryptResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints decryption metadata extracted from a full DecryptResult, preceded by a section header.
printDecryptMeta(DecryptResultMetadata) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints decryption operation metadata to stdout.
printDecryptVerifyMeta(DecryptVerifyResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints metadata for a decrypt-then-verify combined operation, showing both the decryption layer and the verification layer.
printEncryptMeta(EncryptResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints encryption operation metadata to stdout.
printRecipients(List<ReencryptedRecipient>) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints one line per recipient of a re-encrypted JWE, in its order.
printReencryptMeta(ReencryptResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints re-encryption metadata showing both the old and new key and algorithm details.
printResignMeta(ResignResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints re-signature metadata showing both the old and new key and algorithm details.
printSignatureResults(List<SignatureResult>) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints one line per signature, in token order: the key it names, that key's algorithm, the key-material version it resolved to, and its verdict.
printSignEncryptMeta(SignEncryptResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints metadata for a sign-then-encrypt combined operation, showing both the signature layer and the encryption layer.
printSignMeta(SignResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints signature operation metadata to stdout.
printSignMeta(String, SignResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints signature metadata preceded by a contextual heading.
printVerifyMeta(VerifySignatureResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints signature verification metadata to stdout.
printVerifyMeta(String, VerifySignatureResult) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints signature verification metadata preceded by a contextual heading and including the validity flag.
printWarnings(List<CryptoWarning>) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Prints a list of warning messages to stdout.
PRIVATE_KEY_JWT - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthMechanism: RFC 7523 §2.2 private-key JWT: an assertion this process signs with a key pair whose public half the platform holds.
privateIssuerAllowed() - Static method in class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmission: Whether this process environment permits a loopback external issuer.
privateKey() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair: Returns the value of the privateKey record component.
PrivateKeyJwtTokenSource - Class in co.ankatech.ankasecure.sdk.auth: Signs an RFC 7523 §2.2 assertion with a key pair this process holds and presents that.
PrivateKeyJwtTokenSource(AnkaSecureOpenApiClient, String, ClientAssertionSigner, String) - Constructor for class co.ankatech.ankasecure.sdk.auth.PrivateKeyJwtTokenSource
propertyKey() - Method in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: The key this setting answers to in a properties file.
provider() - Method in class co.ankatech.ankasecure.sdk.auth.FederatedAssertionTokenSource: Where this source reads its external token.
proxiedIssuerAllowed() - Static method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient: Whether this process environment permits reaching an external issuer through a proxy.
publicKey() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair: Returns the value of the publicKey record component.
publicKeyBase64() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair: Returns the value of the publicKeyBase64 record component.
put(AuthSetting, String) - Method in class co.ankatech.ankasecure.sdk.auth.AuthSettings.Builder: Supplies a value directly, taking precedence over properties and the environment.
putLazySecret(AuthSetting, Supplier<SecretChars>) - Method in class co.ankatech.ankasecure.sdk.auth.AuthSettings.Builder: Registers a credential that is EXPENSIVE or FALLIBLE to produce - one that has to be decrypted, unsealed or fetched - so that it is produced only if something actually needs it.
putSecret(AuthSetting, SecretChars) - Method in class co.ankatech.ankasecure.sdk.auth.AuthSettings.Builder: Supplies a credential directly.

Q

QualifiedTimestampInfo - Class in co.ankatech.ankasecure.sdk.model: Informational view of an embedded RFC 3161 qualified timestamp (JAdES sigTst) reported by a verification operation.
QualifiedTimestampInfo(boolean, String, String, String, String) - Constructor for class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo: Creates an immutable qualified-timestamp view.
QUERY_PRESENT - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule: Carries a query string.

R

rawMessage() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning: Returns the value of the rawMessage record component.
READ - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.LocalFileException.Access: The file had to be read: the caller's input, or a result read back after it was written.
READ_TIMEOUT - Static variable in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient: Per-read budget once a connection exists.
readBytes(Path) - Static method in class co.ankatech.ankasecure.sdk.util.FileIO
readUtf8(Path) - Static method in class co.ankatech.ankasecure.sdk.util.FileIO: Reads the entire file as UTF-8, drops a leading UTF-8 byte order mark, and trims surrounding whitespace and line breaks exactly like String.trim().
RECOMMENDED - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status: Production-ready algorithm actively maintained and recommended for new keys.
recommendedAction() - Method in interface co.ankatech.ankasecure.sdk.model.warning.CryptoWarning: Returns the recommended action to address this warning.
recommendedAction() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning
recommendedAction() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning
recommendedAction() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning
reencrypt(String, String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-encrypts data with a different key without decrypting to plaintext.
reencrypt(String, String, String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-encrypts a JWE to newKid, replacing the recipient the caller names.
reencrypt(String, String, String) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
REENCRYPT_DEGENERATE_SAME_KID - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode: Degenerate same-kid rotation rejected by the SDK's ReencryptInvariantGuard (defense-in-depth on top of the server-side REENCRYPT-as-first-class invariant).
reencryptBytes(String, String, String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl: Re-encrypt a JWE in memory so it becomes protected by newKid.
reencryptFile(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-encrypts a file of any format to newKid, replacing the recipient the caller names, and selecting the path from the input's actual format exactly as AuthenticatedSdk.reencryptFile(String, Path, Path) does.
reencryptFile(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl
reencryptFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-encrypts a file.
reencryptFileCompact(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-encrypts a Compact or General JSON JWE file to newKid, replacing the recipient the caller names.
reencryptFileCompact(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
reencryptFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-encrypts a file with forced compact format.
reencryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-encrypts a file with forced streaming format.
reencryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CryptoServiceImpl: Server-side re-encryption of a ciphertext with a new key.
reencryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
ReencryptResult - Class in co.ankatech.ankasecure.sdk.model: Result of a re-encryption operation.
ReencryptResult() - Constructor for class co.ankatech.ankasecure.sdk.model.ReencryptResult
RejectedEgressAddresses - Class in co.ankatech.ankasecure.sdk.auth: The addresses this SDK will never open a connection to, whatever names a configuration or a response supplies.
requiredCompanions() - Method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link: The settings this credential cannot be used without.
requireKid(String) - Method in class co.ankatech.ankasecure.sdk.examples.ExamplePlaygroundKeys: Returns the named pre-provisioned kid, asserting it is present in the ankasecure.demo.kids catalogue.
requiresKeyImport() - Method in class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult: Checks if the analyzed PKCS#7 file requires private key imports.
resetTempDir() - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil
resign(String, String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-signs data with a different key without verifying the original signature.
resign(String, String, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-signs a JWS, explicitly selecting the JWS serialization.
resign(String, String, String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-signs a JWS with newKid, replacing the signature of the signer the caller names.
resign(String, String, String) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
resign(String, String, String, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-signs a JWS with newKid, replacing the signature of the signer the caller names and selecting the JWS serialization.
resign(String, String, String, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations: Re-signs a JWS with an explicit JWS serialization selection.
resignBytes(String, String, String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl: Re-sign a Compact JWS switching to newKid.
resignBytes(String, String, String, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl
resignFile(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl
resignFile(String, String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl
resignFileCompact(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-signs a JWS file with newKid, replacing the signature of the signer the caller names.
resignFileCompact(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
resignFileCompact(String, String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-signs a JWS file with newKid, replacing the signature of the signer the caller names and selecting the JWS serialization.
resignFileCompact(String, String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations: Re-signs a file with an explicit JWS serialization selection.
resignFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-signs a compact JWS file with forced compact format.
resignFileCompact(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-signs a JWS file (attached), explicitly selecting the JWS serialization.
resignFileStream(Path, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-signs a detached JWS in streaming mode, naming the signer whose signature is replaced; sent as the sourceKid member of the /crypto/stream/resign metadata part.
resignFileStream(Path, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl
resignFileStream(Path, String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
resignFileStream(Path, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Re-signs a detached JWS signature with forced streaming format.
ResignResult - Class in co.ankatech.ankasecure.sdk.model: Result of a re-signature operation.
ResignResult() - Constructor for class co.ankatech.ankasecure.sdk.model.ResignResult
resolve(AnkaSecureOpenApiClient, AuthSettings) - Static method in class co.ankatech.ankasecure.sdk.auth.TokenSourceChain: Builds the token source the configuration calls for.
resolveKemAlgorithm(String) - Static method in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig: Resolves a "pqc.kem.algorithm" value to the catalogue name of the KEM it names.
restricted() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters: Returns the value of the restricted record component.
rule() - Method in exception co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException: The rule that refused the issuer.
RuntimeGuard - Class in co.ankatech.ankasecure.sdk.internal
RuntimeGuard() - Constructor for class co.ankatech.ankasecure.sdk.internal.RuntimeGuard

S

SCHEME_NOT_HTTPS - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule: Parseable, but not https.
screenIssuerText(String) - Static method in class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmission: Applies the literal rules -- everything decidable from the text -- and nothing else.
SdkErrorCode - Enum Class in co.ankatech.ankasecure.sdk.exception: High-level, protocol-agnostic error categories recognised by the SDK.
secret(AuthSetting) - Method in interface co.ankatech.ankasecure.sdk.auth.AuthSettings: Returns a setting whose value is a credential, wrapped so the caller can close it.
SecretBuffer - Class in co.ankatech.ankasecure.sdk.security: Owning wrapper for a sensitive byte[].
SecretBuffer(byte[]) - Constructor for class co.ankatech.ankasecure.sdk.security.SecretBuffer: Takes ownership of the supplied array.
SecretChars - Class in co.ankatech.ankasecure.sdk.security: Owning wrapper for a sensitive char[] (typically passwords, passphrases, or other character-secret material returned by System.console().readPassword() or by JCA APIs that operate on char[]).
SecretChars(char[]) - Constructor for class co.ankatech.ankasecure.sdk.security.SecretChars: Takes ownership of the supplied array.
selected(AuthSettings) - Static method in class co.ankatech.ankasecure.sdk.auth.TokenSourceChain: The link that would answer, applying the order and the ambiguity rule.
setAdvisory(String) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
setAlg(String) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
setAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata
setCategory(AlgorithmInfo.Category) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
setCompositeMode(CompositeMode) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
setDecryptAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Sets the algorithm used for decryption.
setDecryptedData(byte[]) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Sets the decrypted plaintext bytes.
setDecryptKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Sets the key identifier requested for decryption.
setDecryptMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Sets the key-material version that performed the decryption.
setDecryptWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Sets warnings related to the decryption operation.
setEncryptAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Sets the algorithm used for encryption.
setEncryptKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Sets the key identifier requested for encryption.
setEncryptMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Sets the key-material version that performed the encryption operation.
setEncryptWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Sets warnings related to the encryption operation.
setGcmTagVerdict(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Sets the outer AES-GCM tag integrity dimension.
setJweToken(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Sets the nested JWE(JWS) token.
setKeyOps(List<String>) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
setKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata
setKty(String) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
setMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata
setQualifiedTimestamp(QualifiedTimestampInfo) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Sets the embedded qualified timestamp from the inner JWS.
setSecurityLevel(Integer) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
setSignAlgorithmUsed(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Sets the algorithm used for signing.
setSignatureResults(List<SignatureResult>) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Sets the per-signature verification detail of the inner JWS.
setSignatureValid(boolean) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Sets whether signature verification succeeded.
setSignatureVerdict(String) - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Sets the inner JWS signature integrity dimension.
setSignKeyRequested(String) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Sets the key identifier requested for signing.
setSignMaterialVersion(Integer) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Sets the key-material version that performed the signing operation.
setSignWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Sets warnings related to the signing operation.
setStandards(List<String>) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
setStatus(AlgorithmInfo.Status) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
setSunsetDate(LocalDate) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
setWarnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata
severity() - Method in interface co.ankatech.ankasecure.sdk.model.warning.CryptoWarning: Returns the severity level of this warning.
severity() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning
severity() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning
severity() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning
sig() - Method in class co.ankatech.ankasecure.sdk.internal.InternalServiceFactory
sign(String) - Method in class co.ankatech.ankasecure.sdk.security.ClientAssertionSigner: Mints a fresh assertion for the given audience.
sign(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Signs raw bytes using the key identified by kid.
sign(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations: Signs raw bytes using the key identified by kid.
sign(String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Signs raw bytes, explicitly selecting the JWS serialization.
sign(String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations: Signs raw bytes with an explicit JWS serialization selection.
SignatureOperations - Class in co.ankatech.ankasecure.sdk.operations: Signature and verification operations facade.
SignatureOperations(InternalServiceFactory, TokenSource, BooleanSupplier, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.SignatureOperations
SignatureServiceImpl - Class in co.ankatech.ankasecure.sdk.internal.service.impl: Thread-safe implementation of SignatureService.
SignatureServiceImpl(AnkaSecureOpenApiClient) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl: Convenience constructor using the default OverwritePolicy.FAIL_IF_EXISTS policy.
SignatureServiceImpl(AnkaSecureOpenApiClient, OverwritePolicy) - Constructor for class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl
signBytes(String, byte[]) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl: Sign an in-memory payload with a server-side **private** key.
signBytes(String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl
SignEncryptResult - Class in co.ankatech.ankasecure.sdk.model: Result of a sign-then-encrypt combined operation.
SignEncryptResult() - Constructor for class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Default constructor initializing empty warning lists.
signFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Signs a file.
signFile(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl
signFile(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl
signFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Signs a file with forced compact format.
signFileCompact(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations: Signs a file using the key identified by kid.
signFileCompact(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Signs a file (attached), explicitly selecting the JWS serialization.
signFileCompact(String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations: Signs a file with an explicit JWS serialization selection.
signFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Signs a file with forced streaming format.
signFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl
signFileStream(String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations: Signs a file in streaming mode (designed for large files >100 MB).
SignResult - Class in co.ankatech.ankasecure.sdk.model: Immutable result returned by signing operations.
SignResult.Builder - Class in co.ankatech.ankasecure.sdk.model: Builder for constructing immutable SignResult instances.
signThenEncrypt(String, String, byte[]) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Signs then encrypts data in a single operation (nested JWE containing JWS).
signThenEncrypt(String, String, byte[]) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl
signThenEncrypt(String, String, byte[]) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
signThenEncrypt(String, String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Signs then encrypts, explicitly selecting the inner-JWS serialization.
signThenEncrypt(String, String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl
signThenEncrypt(String, String, byte[], JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations: Signs then encrypts with an explicit inner-JWS serialization selection.
signThenEncryptFile(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl
signThenEncryptFile(String, String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl
signThenEncryptFileCompact(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Signs then encrypts a file with forced compact format.
signThenEncryptFileCompact(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
signThenEncryptFileCompact(String, String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Signs a file then encrypts it, explicitly selecting the inner-JWS serialization.
signThenEncryptFileCompact(String, String, Path, Path, JwsSerialization) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations: Signs a file then encrypts it with an explicit inner-JWS serialization selection.
signThenEncryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Signs a file then encrypts it in streaming mode (nested JWE(JWS), bounded memory) — the large-file counterpart of AuthenticatedSdk.signThenEncryptFileCompact(String, String, Path, Path).
signThenEncryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.CombinedOperationsServiceImpl
signThenEncryptFileStream(String, String, Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
StaleSidecarException - Exception in co.ankatech.ankasecure.sdk.exception: Thrown when a streaming / atomic file-output operation cannot create its quarantine sidecar (<destination>.part) because a file already exists at the sidecar path — the signature of a stale sidecar orphaned by a prior crashed or force-killed operation (the CREATE_NEW sidecar is normally deleted on BOTH the success and the fail-closed paths, so a surviving one indicates an earlier abnormal termination).
StaleSidecarException(Path, Path, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.StaleSidecarException: Constructs a new stale-sidecar exception.
STANDARD - Enum constant in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode
STATEFUL_KEY_BUSY - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode: Another request is reserving the next one-time signature of the same stateful hash-based key (XMSS, XMSS^MT, LMS/HSS).
STATEFUL_KEY_EXHAUSTED - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode: A stateful hash-based signature key (XMSS, XMSS^MT, LMS/HSS) cannot produce another signature.
status() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters: Returns the value of the status record component.
STATUS_UNKNOWN - Static variable in class co.ankatech.ankasecure.sdk.model.KeyMetadata: The KeyMetadata.getStatus() token for a status the server returned that this SDK release does not know.
STREAMING - Enum constant in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode
StreamIntegrityException - Exception in co.ankatech.ankasecure.sdk.exception: Thrown when a streaming file-output operation cannot commit its result because the server-emitted end-of-stream integrity verdict did not pass (fail-closed).
StreamIntegrityException(String, String, String, String, String, Throwable) - Constructor for exception co.ankatech.ankasecure.sdk.exception.StreamIntegrityException: Constructs a new streaming-integrity exception.
streamsAreEqual(InputStream, InputStream) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Compares two input streams byte-by-byte to determine whether they contain identical content.
StreamWriteFailedException - Exception in co.ankatech.ankasecure.sdk.exception: The request body could not be written to completion, so nothing was committed.
StreamWriteFailedException(String, Throwable, SdkErrorCode) - Constructor for exception co.ankatech.ankasecure.sdk.exception.StreamWriteFailedException
SUPPLIED_TOKEN - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthMechanism: No credential at all: an ANKASecure access token the caller obtained elsewhere and handed to the SDK.
SuppliedTokenSource - Class in co.ankatech.ankasecure.sdk.auth: An ANKASecure access token the caller already holds, presented as a token source so that everything above TokenSource works identically whether the SDK obtained the token or was handed one.
SuppliedTokenSource(AnkaSecureOpenApiClient, String) - Constructor for class co.ankatech.ankasecure.sdk.auth.SuppliedTokenSource
supportedKemAlgorithms() - Static method in class co.ankatech.ankasecure.sdk.transport.PqcTransportConfig

T

TEMP_DIR - Static variable in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Working directory for the temporary artefacts produced by examples.
TENANT - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: The tenant this session belongs to.
timeout() - Method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider: The bounded budget actually in force after clamping.
TIMEOUT - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode: Network stack detected a connect, read, or write timeout.
toDualMeta(Headers) - Static method in class co.ankatech.ankasecure.sdk.meta.HeaderMetaParser: Converts response headers from a dual-key streaming operation (re-encrypt, re-sign) into a DualKeyMeta.
toJson(Object) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Serialises an object to its JSON string representation using the SDK's internal JSON mapper (ISO-8601 dates, pretty-print).
token() - Method in record class co.ankatech.ankasecure.sdk.auth.MintedToken: Returns the value of the token record component.
TOKEN_ENDPOINT_OFF_ORIGIN - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase: The document named a token_endpoint on an origin other than the issuer's own.
TOKEN_ENDPOINT_UNREACHABLE - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase: The token endpoint could not be reached - no HTTP status was obtained.
TOKEN_RESPONSE_MALFORMED - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase: The token endpoint answered 200 with something that is not a usable token response: not JSON, no access_token, a token_type other than Bearer, or a non-positive expires_in.
tokenize(String) - Static method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider: Splits a configured command line into an argv array WITHOUT involving a shell.
TokenRevokedException - Exception in co.ankatech.ankasecure.sdk.exception: Thrown when the server rejects a previously-issued access token with HTTP 401 on a data-plane operation.
TokenRevokedException(String, int, String, Throwable, Map<String, String>, SdkErrorCode, Long) - Constructor for exception co.ankatech.ankasecure.sdk.exception.TokenRevokedException: Constructs a token-revoked exception carrying the full HTTP diagnostic context, delegating to AnkaSecureSdkException's canonical constructor.
TokenSource - Interface in co.ankatech.ankasecure.sdk.auth: The one seam between "how this workload proves who it is" and "everything the SDK does".
TokenSourceChain - Class in co.ankatech.ankasecure.sdk.auth: Decides which credential the workload will present, from configuration alone.
TokenSourceChain.Link - Enum Class in co.ankatech.ankasecure.sdk.auth: One resolvable credential configuration, in the order they are considered.
toSingleMeta(Headers) - Static method in class co.ankatech.ankasecure.sdk.meta.HeaderMetaParser: Converts response headers from a single-key streaming operation (encrypt, decrypt, sign, verify) into a SingleKeyMeta.
toString() - Method in class co.ankatech.ankasecure.sdk.auth.AdmittedIssuer
toString() - Method in class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExternalTokenProvider
toString() - Method in class co.ankatech.ankasecure.sdk.auth.CommandExternalTokenProvider: Names the configured command and the budget; carries nothing the command produced.
toString() - Method in class co.ankatech.ankasecure.sdk.auth.ExplicitExternalTokenProvider: Names the kind and reveals nothing, so an accidental log statement leaks nothing.
toString() - Method in class co.ankatech.ankasecure.sdk.auth.FederatedAssertionTokenSource: Names the actor and the SOURCE of the token, never the token.
toString() - Method in class co.ankatech.ankasecure.sdk.auth.FileExternalTokenProvider: The path is the diagnostic an operator needs and is not itself a secret.
toString() - Method in class co.ankatech.ankasecure.sdk.auth.IssuerHttpClient
toString() - Method in record class co.ankatech.ankasecure.sdk.auth.MintedToken: Redacted: the wrapper's own toString shows at most a six-character prefix.
toString() - Method in class co.ankatech.ankasecure.sdk.auth.NativeSecretTokenSource: Names the mechanism and the actor.
toString() - Method in class co.ankatech.ankasecure.sdk.auth.PrivateKeyJwtTokenSource: Names the actor and the audience; the signer's own toString reveals no key.
toString() - Method in class co.ankatech.ankasecure.sdk.auth.SuppliedTokenSource: The wrapper redacts; at most a six-character prefix of the token can appear.
toString() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter
toString() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmInfo
toString() - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmPair
toString() - Method in class co.ankatech.ankasecure.sdk.model.CryptoPolicyInfo
toString() - Method in class co.ankatech.ankasecure.sdk.model.DecryptResultMetadata
toString() - Method in class co.ankatech.ankasecure.sdk.model.DecryptVerifyResult: Returns string representation for debugging.
toString() - Method in record class co.ankatech.ankasecure.sdk.model.KeyFilters: Returns a string representation of this record class.
toString() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage: Returns a string representation of this record class.
toString() - Method in class co.ankatech.ankasecure.sdk.model.MigrationWorkflowResult: Returns a human-readable summary of the migration workflow results.
toString() - Method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel
toString() - Method in class co.ankatech.ankasecure.sdk.model.PqcHandshakeResult
toString() - Method in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo
toString() - Method in class co.ankatech.ankasecure.sdk.model.SignEncryptResult: Returns string representation for debugging.
toString() - Method in class co.ankatech.ankasecure.sdk.model.VerifySignatureResult
toString() - Method in record class co.ankatech.ankasecure.sdk.model.warning.GenericWarning: Returns a string representation of this record class.
toString() - Method in record class co.ankatech.ankasecure.sdk.model.warning.KeyExpirationWarning: Returns a string representation of this record class.
toString() - Method in record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning: Returns a string representation of this record class.
toString() - Method in class co.ankatech.ankasecure.sdk.security.BearerToken: Returns a redacted representation of the token.
toString() - Method in class co.ankatech.ankasecure.sdk.security.ClientAssertionSigner: Returns a description that names the actor and the algorithm and reveals nothing about the key, so an accidental log statement cannot leak signing material.
toString() - Method in class co.ankatech.ankasecure.sdk.transport.ConfiguredOriginInterceptor
toString() - Method in record class co.ankatech.ankasecure.sdk.util.PqcClientCryptoUtil.GeneratedKeyPair: Returns a string representation of this record class.
totalElements() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage: Returns the value of the totalElements record component.
totalPages() - Method in record class co.ankatech.ankasecure.sdk.model.KeyPage: Returns the value of the totalPages record component.
TRUST_STATUS_UNKNOWN - Static variable in class co.ankatech.ankasecure.sdk.model.QualifiedTimestampInfo: The QualifiedTimestampInfo.getTrustStatus() value for a trust outcome the server returned that this SDK release does not know.
tryUnset(String) - Static method in class co.ankatech.ankasecure.sdk.security.EnvScrubber: Attempts to remove the named environment variable from the JVM's in-memory environment map(s).

U

UNKNOWN - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode: Failure that cannot be classified into SdkErrorCode.TIMEOUT, SdkErrorCode.IO, or SdkErrorCode.HTTP.
UNKNOWN - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category: The server returned a category this SDK release does not know.
UNKNOWN - Enum constant in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status: The server returned a lifecycle status this SDK release does not know.
UNKNOWN - Enum constant in enum class co.ankatech.ankasecure.sdk.model.CompositeMode: The server returned a composite construction this SDK release does not know.
UNKNOWN - Enum constant in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin: The server returned a key origin this SDK release does not know.
url() - Method in class co.ankatech.ankasecure.sdk.auth.AdmittedIssuer: The admitted issuer URL.
UsageLimitWarning - Record Class in co.ankatech.ankasecure.sdk.model.warning: Warning indicating that a cryptographic key is approaching its usage limit.
UsageLimitWarning(int) - Constructor for record class co.ankatech.ankasecure.sdk.model.warning.UsageLimitWarning: Creates an instance of a UsageLimitWarning record class.
USERINFO_PRESENT - Enum constant in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule: Carries a username or a password.
UtilityOperations - Class in co.ankatech.ankasecure.sdk.operations: Utility operations facade for PKCS#7 analysis, conversion, and migration.
UtilityOperations(InternalServiceFactory, TokenSource, BooleanSupplier, Logger) - Constructor for class co.ankatech.ankasecure.sdk.operations.UtilityOperations

V

value() - Method in record class co.ankatech.ankasecure.sdk.auth.MintedToken: Renders the token for the wire.
value(AuthSetting) - Method in interface co.ankatech.ankasecure.sdk.auth.AuthSettings: Returns the configured value of a setting.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.auth.AuthMechanism: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.auth.ExternalTokenSourceKind: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.exception.LocalFileException.Access: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.CompositeMode: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.JwsSerialization: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.OverwritePolicy: Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity: Returns the enum constant of this class with the specified name.
values() - Static method in enum class co.ankatech.ankasecure.sdk.auth.AuthMechanism: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.auth.AuthSetting: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.auth.ClientCredentialsExchangeException.Phase: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.auth.ExternalIssuerAdmissionException.Rule: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.auth.ExternalTokenSourceKind: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.auth.TokenSourceChain.Link: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.client.ApiClientFactory.ClientMode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.exception.LocalFileException.Access: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.exception.SdkErrorCode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Category: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.model.AlgorithmInfo.Status: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.model.CompositeMode: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.model.JwsSerialization: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.model.KeyOrigin: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.model.NistSecurityLevel: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.model.OverwritePolicy: Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity: Returns an array containing the constants of this enum class, in the order they are declared.
verifySignature(String) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Verifies an attached JWS (RFC 7515) signature held in memory.
verifySignature(String) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations: Verifies an attached JWS signature string.
verifySignature(Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Verifies a JWS signature from a file, accepting either the compact form or the JWS-JSON form (serialization-agnostic).
verifySignature(Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl
verifySignatureBytes(String) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.SignatureServiceImpl: Verify a Compact JWS that is fully in memory.
verifySignatureFile(Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations: Verifies a JWS signature from a file (compact or JWS-JSON).
VerifySignatureResult - Class in co.ankatech.ankasecure.sdk.model: VerifySignatureResult
VerifySignatureResult() - Constructor for class co.ankatech.ankasecure.sdk.model.VerifySignatureResult
verifySignatureStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Verifies a detached JWS signature with forced streaming format.
verifySignatureStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl
verifySignatureStream(Path, Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations: Verifies a detached signature in streaming mode (designed for large files >100 MB).
verifySignatureUtilityStream(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Verifies a signature using a provided public key (without requiring key in ANKASecure).
verifySignatureUtilityStream(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl
verifySignatureUtilityStream(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.operations.CombinedOperations
verifySignatureUtilityStream(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.operations.SignatureOperations: Verifies a signature using an external public key (utility operation).
verifyWithExternalPublicKey(String, String, String, String, Path) - Method in class co.ankatech.ankasecure.sdk.internal.service.impl.MigrationServiceImpl
versionSafe(Integer) - Static method in class co.ankatech.ankasecure.sdk.examples.ExampleUtil: Returns the material version as a string if it is non-null; otherwise returns the literal "n/a" (e.g. utility mode, or streaming flows where the version rides the JOSE artefact).

W

WARNING - Enum constant in enum class co.ankatech.ankasecure.sdk.model.warning.WarningSeverity: Action should be taken soon to avoid potential issues.
warnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.EncryptResult.Builder: Sets the list of warnings.
warnings(List<CryptoWarning>) - Method in class co.ankatech.ankasecure.sdk.model.SignResult.Builder: Sets the list of warnings.
WarningSeverity - Enum Class in co.ankatech.ankasecure.sdk.model.warning: Severity levels for cryptographic warnings.
withAlg(String...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder: Filter by algorithm names (OR logic).
withCategory(AlgorithmInfo.Category) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder: Filter by algorithm category.
withCompositeMode(CompositeMode...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder: Filter by composite construction (OR logic).
withKeyOps(String...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder: Filter by required key operations (AND logic).
withKty(String...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder: Filter by key types (OR logic).
withMaxSecurityLevel(int) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder: Filter by maximum NIST security level (inclusive).
withMinSecurityLevel(int) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder: Filter by minimum NIST security level (inclusive).
withOverwrite() - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Convenience wither equivalent to withOverwritePolicy(OverwritePolicy.OVERWRITE): returns a NEW immutable AuthenticatedSdk whose file-output operations atomically replace an existing destination.
withOverwritePolicy(OverwritePolicy) - Method in class co.ankatech.ankasecure.sdk.AuthenticatedSdk: Returns a NEW immutable AuthenticatedSdk that applies overwritePolicy to every file-output operation, sharing this instance's JWT and HTTP client.
withSecurityLevel(int) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder: Filter by exact NIST security level.
withStandards(String...) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder: Filter by required standards compliance (AND logic).
withStatus(AlgorithmInfo.Status) - Method in class co.ankatech.ankasecure.sdk.model.AlgorithmFilter.Builder: Filter by lifecycle status.
WRITE - Enum constant in enum class co.ankatech.ankasecure.sdk.exception.LocalFileException.Access: The file had to be created, written or moved into place.
writeBytes(Path, byte[]) - Static method in class co.ankatech.ankasecure.sdk.util.FileIO
writeUtf8(Path, String) - Static method in class co.ankatech.ankasecure.sdk.util.FileIO: Writes the text to the given path using UTF-8, replacing any existing file (same semantics as StandardOpenOption.TRUNCATE_EXISTING).

Z

Zeroization - Class in co.ankatech.ankasecure.sdk.security: Centralized zeroization helpers for the ANKASecure secure-memory layer.
zeroize(byte[]) - Static method in class co.ankatech.ankasecure.sdk.security.Zeroization: Overwrites every element with 0x00.
zeroize(char[]) - Static method in class co.ankatech.ankasecure.sdk.security.Zeroization: Overwrites every element with the space character ' '.

A B C D E F G H I J K L M N O P Q R S T U V W Z
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form