Class SignedCertificateTimestamp

java.lang.Object
org.bouncycastle.cert.ct.SignedCertificateTimestamp
public class SignedCertificateTimestamp extends Object
A single Signed Certificate Timestamp (SCT) in the RFC 6962 (CT v1) wire format. Decoded from the TLS-encoded payload of a SignedCertificateTimestampList. 
    enum { v1(0), (255) } Version;

    struct {
        opaque key_id[32];
    } LogID;

    opaque CtExtensions<0..2^16-1>;

    struct {
        Version          sct_version;
        LogID            id;
        uint64           timestamp;
        CtExtensions     extensions;
        digitally-signed struct {
            Version       sct_version;
            SignatureType signature_type = certificate_timestamp;
            uint64        timestamp;
            LogEntryType  entry_type;
            select(entry_type) {
                case x509_entry:    ASN.1Cert;
                case precert_entry: PreCert;
            } signed_entry;
            CtExtensions  extensions;
        };
    } SignedCertificateTimestamp;
The digitally-signed value is the TLS 1.2 sec. 4.7 form: a one-byte HashAlgorithm and a one-byte SignatureAlgorithm followed by a two-byte-length-prefixed opaque signature. This class exposes the algorithm pair and the raw signature bytes; computing the signed leaf structure and verifying it against a log's public key is a higher-level concern handled outside this decode-only API.

For RFC 9162 (CT v2), see SignedCertificateTimestampDataV2.

  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    static final int
    LOG_ID_LENGTH
     
    static final int
    VERSION_V1
     

  • Constructor Summary

    Constructors
    Constructor
    Description
    SignedCertificateTimestamp(int sctVersion, byte[] logID, long timestamp, byte[] extensions, int hashAlgorithm, int signatureAlgorithm, byte[] signature)
     

  • Method Summary

    Modifier and Type
    Method
    Description
    byte[]
    getEncoded()
    Serialize this SCT to its TLS wire form (the bytes that would be carried as one SerializedSCT entry in a list).
    byte[]
    getExtensions()
    The extensions opaque blob carried in the SCT.
    int
    getHashAlgorithm()
    TLS HashAlgorithm byte (sha256 = 4, etc.).
    static SignedCertificateTimestamp
    getInstance(byte[] encoded)
    Decode an SCT from its serialized TLS form (the bytes that appear as one SerializedSCT entry inside a SignedCertificateTimestampList).
    byte[]
    getLogID()
    32-byte log identifier (SHA-256 of the log's DER-encoded public key).
    int
    getSctVersion()
    SCT version byte.
    byte[]
    getSignature()
    Raw signature bytes (the opaque signature field from the digitally-signed struct).
    int
    getSignatureAlgorithm()
    TLS SignatureAlgorithm byte (rsa = 1, dsa = 2, ecdsa = 3).
    long
    getTimestamp()
    Issuance timestamp in milliseconds since the Unix epoch (Java convention; the same value the wire form uses).

    Methods inherited from class Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Field Details

  • Constructor Details

    • SignedCertificateTimestamp

      public SignedCertificateTimestamp(int sctVersion, byte[] logID, long timestamp, byte[] extensions, int hashAlgorithm, int signatureAlgorithm, byte[] signature)

  • Method Details

    • getInstance

      public static SignedCertificateTimestamp getInstance(byte[] encoded)
      Decode an SCT from its serialized TLS form (the bytes that appear as one SerializedSCT entry inside a SignedCertificateTimestampList).

    • getSctVersion

      public int getSctVersion()
      SCT version byte. RFC 6962 defines only v1 (0).

    • getLogID

      public byte[] getLogID()
      32-byte log identifier (SHA-256 of the log's DER-encoded public key).

    • getTimestamp

      public long getTimestamp()
      Issuance timestamp in milliseconds since the Unix epoch (Java convention; the same value the wire form uses).

    • getExtensions

      public byte[] getExtensions()
      The extensions opaque blob carried in the SCT. RFC 6962 leaves the contents unspecified; logs in the wild emit it empty.

    • getHashAlgorithm

      public int getHashAlgorithm()
      TLS HashAlgorithm byte (sha256 = 4, etc.).

    • getSignatureAlgorithm

      public int getSignatureAlgorithm()
      TLS SignatureAlgorithm byte (rsa = 1, dsa = 2, ecdsa = 3).

    • getSignature

      public byte[] getSignature()
      Raw signature bytes (the opaque signature field from the digitally-signed struct).

    • getEncoded

      public byte[] getEncoded()
      Serialize this SCT to its TLS wire form (the bytes that would be carried as one SerializedSCT entry in a list).