Uses of Class
co.ankatech.ankasecure.sdk.exception.AnkaSecureSdkException

Packages that use AnkaSecureSdkException

Package	Description
co.ankatech.ankasecure.sdk
co.ankatech.ankasecure.sdk.auth
co.ankatech.ankasecure.sdk.examples
co.ankatech.ankasecure.sdk.exception
co.ankatech.ankasecure.sdk.internal.service.impl
co.ankatech.ankasecure.sdk.operations

Uses of AnkaSecureSdkException in co.ankatech.ankasecure.sdk

Methods in co.ankatech.ankasecure.sdk that throw AnkaSecureSdkException

Modifier and Type	Method	Description
co.ankatech.secure.client.model.Pkcs7AnalysisResponse	AuthenticatedSdk.analyzePkcs7(co.ankatech.secure.client.model.Pkcs7AnalysisRequest request)	Analyzes a PKCS#7 file to extract metadata and certificate information.
co.ankatech.secure.client.model.Pkcs7AnalysisResponse	AuthenticatedSdk.analyzePkcs7Stream(File file)	Analyzes a PKCS#7 file using streaming to avoid loading the entire file into memory.
AuthenticatedSdk	AnkaSecureSdk.authenticate()	Authenticates using whatever credential the deployment configured, without being told which.
AuthenticatedSdk	AnkaSecureSdk.authenticate(AuthSettings settings)	Authenticates using a caller-supplied configuration view.
AuthenticatedSdk	AnkaSecureSdk.authenticateApplication(String clientId, SecretChars clientSecret)	Authenticates as an application and returns an authenticated SDK instance.
AuthenticatedSdk	AnkaSecureSdk.authenticateApplicationWithKeyPair(String clientId, ClientAssertionSigner signer, String expectedAudience)	Authenticates a Cryptographic ACTOR that proves itself with a registered key pair.
Optional<TokenSourceChain.Link>	AnkaSecureSdk.configuredCredential()	Reports which credential AnkaSecureSdk.authenticate() would use, without using it.
co.ankatech.secure.client.model.Pkcs7ConversionResponse	AuthenticatedSdk.convertPkcs7ToJose(co.ankatech.secure.client.model.Pkcs7ConversionRequest request)	Converts a PKCS#7 signature to JOSE (JWS) format.
File	AuthenticatedSdk.convertPkcs7ToJoseStream(co.ankatech.secure.client.model.Pkcs7ConversionStreamRequest metadata, File inputFile, File outputFile)	Converts a PKCS#7 signature to JOSE using streaming.
DecryptResult	AuthenticatedSdk.decrypt(String ciphertextJwe)	Decrypts a JWE (RFC 7516) token to recover the original plaintext.
DecryptResult	AuthenticatedSdk.decrypt(String recipientKid, String ciphertextJwe)	Decrypts a JWE token string with the recipient the caller names.
DecryptResultMetadata	AuthenticatedSdk.decryptFile(String recipientKid, Path input, Path output)	Decrypts a file of any format with the recipient the caller names, selecting the path from the input's actual format exactly as AuthenticatedSdk.decryptFile(Path, Path) does.
DecryptResultMetadata	AuthenticatedSdk.decryptFile(Path input, Path output)	Decrypts a file.
DecryptResultMetadata	AuthenticatedSdk.decryptFileCompact(String recipientKid, Path input, Path output)	Decrypts a Compact or General JSON JWE file with the recipient the caller names.
DecryptResultMetadata	AuthenticatedSdk.decryptFileCompact(Path input, Path output)	Decrypts a file with forced compact format.
DecryptResultMetadata	AuthenticatedSdk.decryptFileStream(String recipientKid, Path input, Path output)	Decrypts a streaming JWET file with the recipient the caller names; sent as the recipientKid query parameter of /crypto/stream/decrypt.
DecryptResultMetadata	AuthenticatedSdk.decryptFileStream(Path input, Path output)	Decrypts a file with forced streaming format.
DecryptVerifyResult	AuthenticatedSdk.decryptThenVerify(String jweToken)	Decrypts a JWE then verifies the inner JWS signature.
DecryptVerifyResult	AuthenticatedSdk.decryptThenVerify(String recipientKid, String jweToken)	Decrypts a nested JWE(JWS) token with the recipient the caller names, then verifies every signature of the inner JWS.
DecryptVerifyResult	AuthenticatedSdk.decryptThenVerifyFileCompact(String recipientKid, Path input, Path output)	Decrypts a nested JWE(JWS) file with the recipient the caller names, then verifies every signature of the inner JWS.
DecryptVerifyResult	AuthenticatedSdk.decryptThenVerifyFileCompact(Path input, Path output)	Decrypts and verifies a nested JWE(JWS) file with forced compact format.
DecryptVerifyResult	AuthenticatedSdk.decryptThenVerifyFileStream(String recipientKid, Path input, Path output)	Decrypts a nested JWE(JWS) streaming artifact with the recipient the caller names, then verifies every signature of the inner JWS; recipientKid is sent as the query parameter of /crypto/stream/decrypt-verify.
DecryptVerifyResult	AuthenticatedSdk.decryptThenVerifyFileStream(Path input, Path output)	Decrypts a nested JWE(JWS) file then verifies the inner signature in streaming mode — the large-file counterpart of AuthenticatedSdk.decryptThenVerifyFileCompact(Path, Path), and the inverse of AuthenticatedSdk.signThenEncryptFileStream(String, String, Path, Path).
EncryptResult	AuthenticatedSdk.encrypt(String kid, byte[] plaintext)	Encrypts raw bytes using the key identified by kid.
EncryptResult	AuthenticatedSdk.encryptFile(String kid, Path input, Path output)	Encrypts a file.
EncryptResult	AuthenticatedSdk.encryptFileCompact(String kid, Path input, Path output)	Encrypts a file with forced compact format, i.e. in one non-streaming request.
EncryptResult	AuthenticatedSdk.encryptFileStream(String kid, Path input, Path output)	Encrypts a file with forced streaming format.
EncryptResult	AuthenticatedSdk.encryptFileUtilityStream(String kty, String alg, String publicKeyB64, Path input, Path output)	Encrypts a file using a provided public key (without requiring key in ANKASecure).
KeyMetadata	AuthenticatedSdk.getKeyMetadata(String kid)	Retrieves metadata for a specific key.
List<AlgorithmInfo>	AuthenticatedSdk.getSupportedAlgorithms()	Retrieves the complete list of cryptographic algorithms supported by the server.
List<AlgorithmInfo>	AuthenticatedSdk.getSupportedAlgorithms(AlgorithmFilter filter)	Retrieves cryptographic algorithms matching the specified filter criteria.
List<KeyMetadata>	AuthenticatedSdk.listAllKeys(KeyFilters filters)	Lists ALL keys matching the filters by auto-paginating through the server's paginated listing (the AWS-CLI pattern: the API pages, the client iterates).
KeyPage	AuthenticatedSdk.listKeys(KeyFilters filters, int page, int size)	Lists ONE PAGE of the keys accessible to the authenticated client.
MigrationWorkflowResult	AuthenticatedSdk.performMigrationWorkflow(File pkcs7File, co.ankatech.secure.client.model.Pkcs7ConversionStreamRequest conversionRequest, File outputFile)	Performs a complete PKCS#7-to-JOSE migration workflow with analysis and conversion.
ReencryptResult	AuthenticatedSdk.reencrypt(String newKid, String jweToken)	Re-encrypts data with a different key without decrypting to plaintext.
ReencryptResult	AuthenticatedSdk.reencrypt(String newKid, String sourceKid, String jweToken)	Re-encrypts a JWE to newKid, replacing the recipient the caller names.
ReencryptResult	AuthenticatedSdk.reencryptFile(String newKid, String sourceKid, Path input, Path output)	Re-encrypts a file of any format to newKid, replacing the recipient the caller names, and selecting the path from the input's actual format exactly as AuthenticatedSdk.reencryptFile(String, Path, Path) does.
ReencryptResult	AuthenticatedSdk.reencryptFile(String newKid, Path input, Path output)	Re-encrypts a file.
ReencryptResult	AuthenticatedSdk.reencryptFileCompact(String newKid, String sourceKid, Path input, Path output)	Re-encrypts a Compact or General JSON JWE file to newKid, replacing the recipient the caller names.
ReencryptResult	AuthenticatedSdk.reencryptFileCompact(String newKid, Path input, Path output)	Re-encrypts a file with forced compact format.
ReencryptResult	AuthenticatedSdk.reencryptFileStream(String newKid, String sourceKid, Path input, Path output)	Re-encrypts a file with forced streaming format.
ResignResult	AuthenticatedSdk.resign(String newKid, String jws)	Re-signs data with a different key without verifying the original signature.
ResignResult	AuthenticatedSdk.resign(String newKid, String jws, JwsSerialization serialization)	Re-signs a JWS, explicitly selecting the JWS serialization.
ResignResult	AuthenticatedSdk.resign(String newKid, String sourceKid, String jws)	Re-signs a JWS with newKid, replacing the signature of the signer the caller names.
ResignResult	AuthenticatedSdk.resign(String newKid, String sourceKid, String jws, JwsSerialization serialization)	Re-signs a JWS with newKid, replacing the signature of the signer the caller names and selecting the JWS serialization.
ResignResult	AuthenticatedSdk.resignFileCompact(String newKid, String sourceKid, Path input, Path output)	Re-signs a JWS file with newKid, replacing the signature of the signer the caller names.
ResignResult	AuthenticatedSdk.resignFileCompact(String newKid, String sourceKid, Path input, Path output, JwsSerialization serialization)	Re-signs a JWS file with newKid, replacing the signature of the signer the caller names and selecting the JWS serialization.
ResignResult	AuthenticatedSdk.resignFileCompact(String newKid, Path input, Path output)	Re-signs a compact JWS file with forced compact format.
ResignResult	AuthenticatedSdk.resignFileCompact(String newKid, Path input, Path output, JwsSerialization serialization)	Re-signs a JWS file (attached), explicitly selecting the JWS serialization.
ResignResult	AuthenticatedSdk.resignFileStream(Path oldJwsHeader, String newKid, String sourceKid, Path input, Path output)	Re-signs a detached JWS in streaming mode, naming the signer whose signature is replaced; sent as the sourceKid member of the /crypto/stream/resign metadata part.
ResignResult	AuthenticatedSdk.resignFileStream(Path oldJwsHeader, String newKid, String sourceKid, Path input, Path output, SignOptions options)	Re-signs a file in streaming mode with options for the new signature.
ResignResult	AuthenticatedSdk.resignFileStream(Path oldJwsHeader, String newKid, Path input, Path output)	Re-signs a detached JWS signature with forced streaming format.
SignResult	AuthenticatedSdk.sign(String kid, byte[] data)	Signs raw bytes using the key identified by kid.
SignResult	AuthenticatedSdk.sign(String kid, byte[] data, JwsSerialization serialization)	Signs raw bytes, explicitly selecting the JWS serialization.
SignResult	AuthenticatedSdk.sign(String kid, byte[] data, JwsSerialization serialization, SignOptions options)	Signs raw bytes with an explicit serialization and signature options.
SignResult	AuthenticatedSdk.signFile(String kid, Path input, Path output)	Signs a file.
SignResult	AuthenticatedSdk.signFileCompact(String kid, Path input, Path output)	Signs a file with forced compact format.
SignResult	AuthenticatedSdk.signFileCompact(String kid, Path input, Path output, JwsSerialization serialization)	Signs a file (attached), explicitly selecting the JWS serialization.
SignResult	AuthenticatedSdk.signFileCompact(String kid, Path input, Path output, JwsSerialization serialization, SignOptions options)	Signs a file (attached) with an explicit serialization and signature options.
SignResult	AuthenticatedSdk.signFileStream(String kid, Path input, Path output)	Signs a file with forced streaming format.
SignEncryptResult	AuthenticatedSdk.signThenEncrypt(String signKid, String encryptKid, byte[] data)	Signs then encrypts data in a single operation (nested JWE containing JWS).
SignEncryptResult	AuthenticatedSdk.signThenEncrypt(String signKid, String encryptKid, byte[] data, JwsSerialization serialization)	Signs then encrypts, explicitly selecting the inner-JWS serialization.
SignEncryptResult	AuthenticatedSdk.signThenEncrypt(String signKid, String encryptKid, byte[] data, JwsSerialization serialization, SignOptions options)	Signs then encrypts data with an explicit inner serialization and options for the inner signature.
SignEncryptResult	AuthenticatedSdk.signThenEncryptFileCompact(String signKid, String encryptKid, Path input, Path output)	Signs then encrypts a file with forced compact format.
SignEncryptResult	AuthenticatedSdk.signThenEncryptFileCompact(String signKid, String encryptKid, Path input, Path output, JwsSerialization serialization)	Signs a file then encrypts it, explicitly selecting the inner-JWS serialization.
SignEncryptResult	AuthenticatedSdk.signThenEncryptFileCompact(String signKid, String encryptKid, Path input, Path output, JwsSerialization serialization, SignOptions options)	Signs then encrypts a file (compact) with an explicit inner serialization and options for the inner signature.
SignEncryptResult	AuthenticatedSdk.signThenEncryptFileStream(String signKid, String encryptKid, Path input, Path output)	Signs a file then encrypts it in streaming mode (nested JWE(JWS), bounded memory) — the large-file counterpart of AuthenticatedSdk.signThenEncryptFileCompact(String, String, Path, Path).
SignEncryptResult	AuthenticatedSdk.signThenEncryptFileStream(String signKid, String encryptKid, Path input, Path output, SignEncryptStreamOptions options)	Signs then encrypts a file in streaming mode with options: the inner signature's validity and the advisory flavor hint, sent in the request's metadata part.
VerifySignatureResult	AuthenticatedSdk.verifySignature(String jws)	Verifies an attached JWS (RFC 7515) signature held in memory.
VerifySignatureResult	AuthenticatedSdk.verifySignature(Path jwsFile)	Verifies a JWS signature from a file, accepting either the compact form or the JWS-JSON form (serialization-agnostic).
VerifySignatureResult	AuthenticatedSdk.verifySignatureStream(Path dataFile, Path signatureFile)	Verifies a detached JWS signature with forced streaming format.
VerifySignatureResult	AuthenticatedSdk.verifySignatureUtilityStream(String kty, String alg, String publicKeyB64, String signatureB64, Path dataFile)	Verifies a signature using a provided public key (without requiring key in ANKASecure).

Uses of AnkaSecureSdkException in co.ankatech.ankasecure.sdk.auth

Methods in co.ankatech.ankasecure.sdk.auth that throw AnkaSecureSdkException

Modifier and Type	Method	Description
final String	CachingTokenSource.accessToken()
String	SuppliedTokenSource.accessToken()
String	TokenSource.accessToken()	Returns a token that is valid now, minting one if none is cached or the cached one is inside the refresh window, and binding whatever it returns to the transport.
static TokenSource	TokenSourceChain.resolve(co.ankatech.ankasecure.openapi.client.AnkaSecureOpenApiClient client, AuthSettings settings)	Builds the token source the configuration calls for.
static Optional<TokenSourceChain.Link>	TokenSourceChain.selected(AuthSettings settings)	The link that would answer, applying the order and the ambiguity rule.

Uses of AnkaSecureSdkException in co.ankatech.ankasecure.sdk.examples

Methods in co.ankatech.ankasecure.sdk.examples that throw AnkaSecureSdkException

Modifier and Type	Method	Description
String	ExamplePlaygroundKeys.kidForAlgorithm(String alg)	Returns the first pre-provisioned kid whose algorithm equals alg (case-insensitive).
String	ExamplePlaygroundKeys.kidForAlgorithmAndOp(String alg, String keyOp)	Returns the first pre-provisioned kid whose algorithm equals alg AND whose keyOps include keyOp — for picking between keys that share an algorithm but differ in operation (e.g. distinct cross-kid endpoints).

Uses of AnkaSecureSdkException in co.ankatech.ankasecure.sdk.exception

Subclasses of AnkaSecureSdkException in co.ankatech.ankasecure.sdk.exception

Modifier and Type	Class	Description
final class	DecryptVerifyIntegrityException	The fail-closed outcome of a streaming decrypt-then-verify whose two-verdict trailing part is INVALID: the decrypted plaintext was discarded and no file exists at the destination.
final class	DestinationExistsException	Thrown when a file-output operation cannot commit its result because a file already exists at the destination and FAIL_IF_EXISTS (the default) is in effect.
final class	Http2RequiredException	A streaming request that requires HTTP/2 was about to be sent over a connection that negotiated something else, and was refused before any request byte was written.
final class	LocalFileException	Thrown when a file operation fails on the caller's own file system: an input file could not be read, or the result — or a working file derived from the input — could not be written.
final class	PqcTransportException	A request under PQC transport was refused by the SDK, either because the response cannot be trusted as the server's answer, or because completing it would take a route that PQC transport does not protect and the caller did not choose that route.
final class	StaleSidecarException	Thrown when a streaming / atomic file-output operation cannot create its quarantine sidecar (<destination>.part) because a file already exists at the sidecar path — the signature of a stale sidecar orphaned by a prior crashed or force-killed operation (the CREATE_NEW sidecar is normally deleted on BOTH the success and the fail-closed paths, so a surviving one indicates an earlier abnormal termination).
class	StreamIntegrityException	Thrown when a streaming file-output operation cannot commit its result because the server-emitted end-of-stream integrity verdict did not pass (fail-closed).
final class	StreamWriteFailedException	The request body could not be written to completion, so nothing was committed.
final class	TokenRevokedException	Thrown when the server rejects a previously-issued access token with HTTP 401 on a data-plane operation.

Uses of AnkaSecureSdkException in co.ankatech.ankasecure.sdk.internal.service.impl

Methods in co.ankatech.ankasecure.sdk.internal.service.impl that throw AnkaSecureSdkException

Modifier and Type	Method	Description
co.ankatech.secure.client.model.Pkcs7AnalysisResponse	MigrationServiceImpl.analyzePkcs7(co.ankatech.secure.client.model.Pkcs7AnalysisRequest request)
co.ankatech.secure.client.model.Pkcs7AnalysisResponse	MigrationServiceImpl.analyzePkcs7Stream(File file)
co.ankatech.secure.client.model.Pkcs7ConversionResponse	MigrationServiceImpl.convertPkcs7ToJose(co.ankatech.secure.client.model.Pkcs7ConversionRequest request)
File	MigrationServiceImpl.convertPkcs7ToJoseStream(co.ankatech.secure.client.model.Pkcs7ConversionStreamRequest metadata, File inputFile, File outputFile)
co.ankatech.ankasecure.sdk.internal.service.CryptoService.DecryptBytesHolder	CryptoServiceImpl.decryptBytes(String recipientKid, String jweToken)	Decrypt a JWE (Compact or General JSON) that is already in RAM.
DecryptResultMetadata	CryptoServiceImpl.decryptFile(String recipientKid, Path input, Path output)
DecryptResultMetadata	CryptoServiceImpl.decryptFileStream(String recipientKid, Path input, Path output)	Decrypts a JWET multipart file via streaming API.
DecryptVerifyResult	CombinedOperationsServiceImpl.decryptThenVerify(String recipientKid, String jweToken)
DecryptVerifyResult	CombinedOperationsServiceImpl.decryptThenVerifyFile(String recipientKid, Path input, Path output)
DecryptVerifyResult	CombinedOperationsServiceImpl.decryptThenVerifyFileStream(String recipientKid, Path input, Path output)
EncryptResult	CryptoServiceImpl.encryptBytes(String kid, byte[] plaintext)	Encrypt raw bytes with a server-side **public** key.
EncryptResult	CryptoServiceImpl.encryptFile(String kid, Path input, Path output)
EncryptResult	CryptoServiceImpl.encryptFileStream(String kid, Path input, Path output)
EncryptResult	MigrationServiceImpl.encryptFileUtilityStream(String kty, String alg, String pubB64, Path input, Path output)
EncryptResult	MigrationServiceImpl.encryptWithExternalPublicKey(String kty, String alg, String pubKeyB64, Path input, Path output)
KeyMetadata	KeyManagementServiceImpl.getKeyMetadata(String kid)
List<AlgorithmInfo>	KeyManagementServiceImpl.getSupportedAlgorithms()
List<AlgorithmInfo>	KeyManagementServiceImpl.getSupportedAlgorithms(AlgorithmFilter filter)
List<KeyMetadata>	KeyManagementServiceImpl.listAllKeys(KeyFilters filters)
KeyPage	KeyManagementServiceImpl.listKeys(KeyFilters filters, int page, int size)
MigrationWorkflowResult	MigrationServiceImpl.performMigrationWorkflow(File pkcs7File, co.ankatech.secure.client.model.Pkcs7ConversionStreamRequest conversionRequest, File outputFile)
ReencryptResult	CryptoServiceImpl.reencryptBytes(String newKid, String sourceKid, String jweToken)	Re-encrypt a JWE in memory so it becomes protected by newKid.
ReencryptResult	CryptoServiceImpl.reencryptFile(String newKid, String sourceKid, Path input, Path output)
ReencryptResult	CryptoServiceImpl.reencryptFileStream(String newKid, String sourceKid, Path input, Path output)	Server-side re-encryption of a ciphertext with a new key.
ResignResult	SignatureServiceImpl.resignBytes(String newKid, String sourceKid, String oldJws)	Re-sign a Compact JWS switching to newKid.
ResignResult	SignatureServiceImpl.resignBytes(String newKid, String sourceKid, String oldJws, JwsSerialization serialization)
ResignResult	SignatureServiceImpl.resignFile(String newKid, String sourceKid, Path oldJws, Path newJws)
ResignResult	SignatureServiceImpl.resignFile(String newKid, String sourceKid, Path oldJws, Path newJws, JwsSerialization serialization)
ResignResult	SignatureServiceImpl.resignFileStream(Path oldJws, String newKid, String sourceKid, Path input, Path newSigOut, SignOptions options)
SignResult	SignatureServiceImpl.signBytes(String kid, byte[] data)	Sign an in-memory payload with a server-side **private** key.
SignResult	SignatureServiceImpl.signBytes(String kid, byte[] data, JwsSerialization serialization, SignOptions options)
SignResult	SignatureServiceImpl.signFile(String kid, Path input, Path jwsOut)
SignResult	SignatureServiceImpl.signFile(String kid, Path input, Path jwsOut, JwsSerialization serialization, SignOptions options)
SignResult	SignatureServiceImpl.signFileStream(String kid, Path input, Path sigOut)
SignEncryptResult	CombinedOperationsServiceImpl.signThenEncrypt(String signKid, String encryptKid, byte[] data)
SignEncryptResult	CombinedOperationsServiceImpl.signThenEncrypt(String signKid, String encryptKid, byte[] data, JwsSerialization serialization, SignOptions options)
SignEncryptResult	CombinedOperationsServiceImpl.signThenEncryptFile(String signKid, String encryptKid, Path input, Path output)
SignEncryptResult	CombinedOperationsServiceImpl.signThenEncryptFile(String signKid, String encryptKid, Path input, Path output, JwsSerialization serialization, SignOptions options)
SignEncryptResult	CombinedOperationsServiceImpl.signThenEncryptFileStream(String signKid, String encryptKid, Path input, Path output)
SignEncryptResult	CombinedOperationsServiceImpl.signThenEncryptFileStream(String signKid, String encryptKid, Path input, Path output, SignEncryptStreamOptions options)
VerifySignatureResult	SignatureServiceImpl.verifySignature(Path jwsFile)
VerifySignatureResult	SignatureServiceImpl.verifySignatureBytes(String jwsToken)	Verify a Compact JWS that is fully in memory.
VerifySignatureResult	MigrationServiceImpl.verifySignatureStream(Path input, Path jwsHdr)
VerifySignatureResult	MigrationServiceImpl.verifySignatureUtilityStream(String kty, String alg, String pubKeyB64, String sigB64, Path input)
VerifySignatureResult	MigrationServiceImpl.verifyWithExternalPublicKey(String kty, String alg, String pubKeyB64, String sigB64, Path input)

Uses of AnkaSecureSdkException in co.ankatech.ankasecure.sdk.operations

Methods in co.ankatech.ankasecure.sdk.operations that throw AnkaSecureSdkException

Modifier and Type	Method	Description
co.ankatech.secure.client.model.Pkcs7AnalysisResponse	UtilityOperations.analyzePkcs7(co.ankatech.secure.client.model.Pkcs7AnalysisRequest request)	Analyzes a PKCS#7 structure (compact mode).
co.ankatech.secure.client.model.Pkcs7AnalysisResponse	UtilityOperations.analyzePkcs7Stream(File file)	Analyzes a PKCS#7 structure (streaming mode for large files).
co.ankatech.secure.client.model.Pkcs7ConversionResponse	UtilityOperations.convertPkcs7ToJose(co.ankatech.secure.client.model.Pkcs7ConversionRequest request)	Converts PKCS#7 signed-data to JOSE JWS format (compact mode).
File	UtilityOperations.convertPkcs7ToJoseStream(co.ankatech.secure.client.model.Pkcs7ConversionStreamRequest metadata, File inputFile, File outputFile)	Converts PKCS#7 signed-data to JOSE JWS format (streaming mode for large files).
DecryptResult	EncryptionOperations.decrypt(String recipientKid, String ciphertextJwe)	Decrypts a JWE token string, Compact or General JSON.
DecryptResultMetadata	EncryptionOperations.decryptFileCompact(String recipientKid, Path input, Path output)	Decrypts a file containing a JWE token, Compact or General JSON.
DecryptResultMetadata	EncryptionOperations.decryptFileStream(String recipientKid, Path input, Path output)	Decrypts a file in streaming mode (designed for large files >100 MB).
DecryptVerifyResult	CombinedOperations.decryptThenVerify(String recipientKid, String jweToken)
DecryptVerifyResult	CombinedOperations.decryptThenVerifyFileCompact(String recipientKid, Path input, Path output)
DecryptVerifyResult	CombinedOperations.decryptThenVerifyFileStream(String recipientKid, Path input, Path output)
EncryptResult	EncryptionOperations.encrypt(String kid, byte[] plaintext)	Encrypts raw bytes using the key identified by kid.
EncryptResult	EncryptionOperations.encryptFileCompact(String kid, Path input, Path output)	Encrypts a file using the key identified by kid.
EncryptResult	EncryptionOperations.encryptFileStream(String kid, Path input, Path output)	Encrypts a file in streaming mode (designed for large files >100 MB).
EncryptResult	CombinedOperations.encryptFileUtilityStream(String kty, String alg, String publicKeyB64, Path input, Path output)
KeyMetadata	KeyManagementOperations.getKeyMetadata(String kid)	Retrieves complete metadata for a specific key.
List<AlgorithmInfo>	AlgorithmCatalogOperations.getSupportedAlgorithms()	Retrieves the complete catalog of cryptographic algorithms supported by the server.
List<AlgorithmInfo>	AlgorithmCatalogOperations.getSupportedAlgorithms(AlgorithmFilter filter)	Retrieves supported algorithms matching the specified filter criteria.
List<KeyMetadata>	KeyManagementOperations.listAllKeys(KeyFilters filters)	Lists ALL keys matching the filters via client-side auto-pagination (bounded; throws PaginationCeilingExceededException beyond the hard cap).
KeyPage	KeyManagementOperations.listKeys(KeyFilters filters, int page, int size)	Lists ONE PAGE of keys with optional server-side filters (applied BEFORE pagination — the page totals are filtered, tenant-scoped counts).
MigrationWorkflowResult	UtilityOperations.performMigrationWorkflow(File pkcs7File, co.ankatech.secure.client.model.Pkcs7ConversionStreamRequest conversionRequest, File outputFile)	Performs a complete PKCS#7-to-JOSE migration workflow with analysis and conversion.
ReencryptResult	CombinedOperations.reencrypt(String newKid, String sourceKid, String jweToken)
ReencryptResult	CombinedOperations.reencryptFileCompact(String newKid, String sourceKid, Path input, Path output)
ReencryptResult	CombinedOperations.reencryptFileStream(String newKid, String sourceKid, Path input, Path output)
ResignResult	CombinedOperations.resign(String newKid, String sourceKid, String jws)
ResignResult	CombinedOperations.resign(String newKid, String sourceKid, String jws, JwsSerialization serialization)	Re-signs a JWS with an explicit JWS serialization selection.
ResignResult	CombinedOperations.resignFileCompact(String newKid, String sourceKid, Path input, Path output)
ResignResult	CombinedOperations.resignFileCompact(String newKid, String sourceKid, Path input, Path output, JwsSerialization serialization)	Re-signs a file with an explicit JWS serialization selection.
ResignResult	CombinedOperations.resignFileStream(Path oldJwsHeader, String newKid, String sourceKid, Path input, Path output, SignOptions options)
SignResult	SignatureOperations.sign(String kid, byte[] data)	Signs raw bytes using the key identified by kid.
SignResult	SignatureOperations.sign(String kid, byte[] data, JwsSerialization serialization, SignOptions options)	Signs raw bytes with an explicit JWS serialization selection.
SignResult	SignatureOperations.signFileCompact(String kid, Path input, Path output)	Signs a file using the key identified by kid.
SignResult	SignatureOperations.signFileCompact(String kid, Path input, Path output, JwsSerialization serialization, SignOptions options)	Signs a file with an explicit JWS serialization selection.
SignResult	SignatureOperations.signFileStream(String kid, Path input, Path output)	Signs a file in streaming mode (designed for large files >100 MB).
SignEncryptResult	CombinedOperations.signThenEncrypt(String signKid, String encryptKid, byte[] data)
SignEncryptResult	CombinedOperations.signThenEncrypt(String signKid, String encryptKid, byte[] data, JwsSerialization serialization, SignOptions options)	Signs then encrypts with an explicit inner-JWS serialization selection.
SignEncryptResult	CombinedOperations.signThenEncryptFileCompact(String signKid, String encryptKid, Path input, Path output)
SignEncryptResult	CombinedOperations.signThenEncryptFileCompact(String signKid, String encryptKid, Path input, Path output, JwsSerialization serialization, SignOptions options)	Signs a file then encrypts it with an explicit inner-JWS serialization selection.
SignEncryptResult	CombinedOperations.signThenEncryptFileStream(String signKid, String encryptKid, Path input, Path output, SignEncryptStreamOptions options)
VerifySignatureResult	SignatureOperations.verifySignature(String jws)	Verifies an attached JWS signature string.
VerifySignatureResult	SignatureOperations.verifySignatureFile(Path jwsFile)	Verifies a JWS signature from a file (compact or JWS-JSON).
VerifySignatureResult	SignatureOperations.verifySignatureStream(Path dataFile, Path signatureFile)	Verifies a detached signature in streaming mode (designed for large files >100 MB).
VerifySignatureResult	CombinedOperations.verifySignatureUtilityStream(String kty, String alg, String publicKeyB64, String signatureB64, Path dataFile)
VerifySignatureResult	SignatureOperations.verifySignatureUtilityStream(String kty, String alg, String publicKeyB64, String signatureB64, Path dataFile)	Verifies a signature using an external public key (utility operation).