Class LandmarkCertificateManager.TrustedSubtreeManager

java.lang.Object

org.bouncycastle.cert.plants.LandmarkCertificateManager.TrustedSubtreeManager

Enclosing class:

LandmarkCertificateManager

public static class LandmarkCertificateManager.TrustedSubtreeManager
extends Object

Maintains a relying-party-side list of trusted subtrees by accepting new landmarks that come with a cosigned reference checkpoint and a subtree consistency proof.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	LandmarkCertificateManager.TrustedSubtreeManager.Checkpoint	A snapshot of the log: tree size and root hash.

Constructor Summary

Constructors

Constructor	Description
TrustedSubtreeManager(byte[] logId, MerkleTreeHash hashFunc, MTCCosignerVerifierProvider cosignerVerifierProvider, int minCosignaturesForCheckpoint)

Method Summary

Modifier and Type	Method	Description
boolean	addLandmarkSubtree(long subtreeStart, long subtreeEnd, byte[] subtreeHash, LandmarkCertificateManager.TrustedSubtreeManager.Checkpoint referenceCheckpoint, List<byte[]> consistencyProof, List<MTCSignature> checkpointSignatures)	Attempts to add a new landmark subtree.
List<LandmarkCertificateManager.TrustedSubtreeEntry>	getTrustedSubtrees()

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

TrustedSubtreeManager

public TrustedSubtreeManager(byte[] logId,
 MerkleTreeHash hashFunc,
 MTCCosignerVerifierProvider cosignerVerifierProvider,
 int minCosignaturesForCheckpoint)

Parameters:

logId - binary trust anchor ID of the log

hashFunc - hash function used by the log

cosignerVerifierProvider - provider that hands back a verifier per known cosigner ID

minCosignaturesForCheckpoint - minimum valid cosignatures required to trust a checkpoint

Method Details

getTrustedSubtrees

public List<LandmarkCertificateManager.TrustedSubtreeEntry> getTrustedSubtrees()

addLandmarkSubtree

public boolean addLandmarkSubtree(long subtreeStart,
 long subtreeEnd,
 byte[] subtreeHash,
 LandmarkCertificateManager.TrustedSubtreeManager.Checkpoint referenceCheckpoint,
 List<byte[]> consistencyProof,
 List<MTCSignature> checkpointSignatures)
                           throws IOException

Attempts to add a new landmark subtree. The subtree is accepted if:

• The reference checkpoint carries enough valid cosignatures, and
• The supplied subtree consistency proof relates the subtree to that checkpoint.

Returns:

true if the landmark was added

Throws:

IOException