Quick Reference Guide

# Get JWT token
curl -X POST https://api.ankatech.co/auth/token \
  -d '{"apiKey":"YOUR_API_KEY"}'

# Store token for subsequent requests
export TOKEN="eyJhbGc..."

# Standard PQC key (recommended)
curl -X POST https://api.ankatech.co/keys \
  -H "Authorization: Bearer $TOKEN" \
  -d '{"algorithm":"ML_KEM_1024"}'

# Composite key (maximum security)
curl -X POST https://api.ankatech.co/keys/composite \
  -H "Authorization: Bearer $TOKEN" \
  -d '{
    "classicalAlgorithm":"RSA_4096",
    "pqcAlgorithm":"ML_KEM_1024",
    "mode":"COMPOSITE_KEM_COMBINE"
  }'

# Signing key
curl -X POST https://api.ankatech.co/keys \
  -H "Authorization: Bearer $TOKEN" \
  -d '{"algorithm":"ML_DSA_87","purpose":"DIGITAL_SIGNATURE"}'

# Encrypt data
curl -X POST https://api.ankatech.co/encrypt \
  -H "Authorization: Bearer $TOKEN" \
  -d '{"keyId":"KEY_ID","plaintext":"Your data here"}'

# Decrypt data
curl -X POST https://api.ankatech.co/decrypt \
  -H "Authorization: Bearer $TOKEN" \
  -d '{"keyId":"KEY_ID","ciphertext":"eyJhbGc..."}'

# Encrypt file
curl -X POST https://api.ankatech.co/encrypt \
  -H "Authorization: Bearer $TOKEN" \
  -F "keyId=KEY_ID" \
  -F "[email protected]" \
  -o document.pdf.enc

# Sign document
curl -X POST https://api.ankatech.co/sign \
  -H "Authorization: Bearer $TOKEN" \
  -d '{"keyId":"SIGNING_KEY","document":"Document to sign"}'

# Verify signature
curl -X POST https://api.ankatech.co/verify \
  -H "Authorization: Bearer $TOKEN" \
  -d '{"keyId":"SIGNING_KEY","signature":"eyJhbGc...","document":"..."}'

# List all keys
curl https://api.ankatech.co/keys \
  -H "Authorization: Bearer $TOKEN"

# Get key details
curl https://api.ankatech.co/keys/KEY_ID \
  -H "Authorization: Bearer $TOKEN"

# Rotate key
curl -X PATCH https://api.ankatech.co/keys/KEY_ID/rotate \
  -H "Authorization: Bearer $TOKEN" \
  -d '{"targetAlgorithm":"ML_KEM_1024"}'

# Delete key
curl -X DELETE https://api.ankatech.co/keys/KEY_ID \
  -H "Authorization: Bearer $TOKEN"

# Refresh token
curl -X POST https://api.ankatech.co/auth/token \
  -d '{"apiKey":"YOUR_API_KEY"}'

curl https://api.ankatech.co/keys \
  -H "Authorization: Bearer $TOKEN"

# Change from compact to streaming
curl -X POST https://api.ankatech.co/stream/encrypt \
  -F "[email protected]"  # Supports up to 100 GB

# Replace ChaCha20 with AES-256-GCM or ML-KEM
curl -X POST https://api.ankatech.co/keys \
  -d '{"algorithm":"ML_KEM_1024"}'  # Always approved

curl https://api.ankatech.co/compliance/check \
  -H "Authorization: Bearer $TOKEN"

# Step 1: Import legacy key (5 min)
curl -X POST https://api.ankatech.co/migration/private-keys \
  -F "[email protected]"

# Step 2: Analyze compatibility (3 min)
curl -X POST https://api.ankatech.co/migration/analyze \
  -d '{"keyId":"legacy-001"}'

# Step 3: Generate PQC key (1 min)
curl -X POST https://api.ankatech.co/keys \
  -d '{"algorithm":"ML_KEM_1024"}'

# Step 4: Re-encrypt data (variable)
curl -X POST https://api.ankatech.co/crypto/reencrypt \
  -d '{
    "sourceKeyId":"legacy-001",
    "targetKeyId":"pqc-001",
    "ciphertext":"..."
  }'

# Generate key
ankasecure-cli key generate --algorithm ML_KEM_1024

# Encrypt file
ankasecure-cli encrypt --key-id mlkem-001 --input data.txt

# Decrypt file
ankasecure-cli decrypt --key-id mlkem-001 --input data.txt.enc

# Sign file
ankasecure-cli sign --key-id mldsa-001 --input document.pdf

# Verify signature
ankasecure-cli verify --key-id mldsa-001 --input document.pdf.sig

# Per-customer encryption
curl -X POST https://api.ankatech.co/encrypt \
  -H "Authorization: Bearer $CUSTOMER_TOKEN" \
  -d '{"algorithm":"ML_KEM_1024","plaintext":"Customer data"}'

# 50 GB backup (streaming)
curl -X POST https://api.ankatech.co/stream/encrypt \
  -F "algorithm=ML_KEM_1024" \
  -F "[email protected]" \
  -o backup-50gb.enc

# Code signing with long-term signature
curl -X POST https://api.ankatech.co/sign \
  -d '{
    "algorithm":"SLH_DSA_SHAKE_256f",
    "document":"software-v3.0.0.tar.gz",
    "purpose":"CODE_SIGNING"
  }'

# Export from AWS (public key only)
aws kms get-public-key --key-id alias/my-key > aws-public.pem

# Import to AnkaSecure
curl -X POST https://api.ankatech.co/migration/import/public-key \
  -F "[email protected]"

# Generate new ML-KEM key for future encryptions
curl -X POST https://api.ankatech.co/keys \
  -d '{"algorithm":"ML_KEM_1024"}'