Package org.bouncycastle.cert.plants
package org.bouncycastle.cert.plants
Merkle Tree Certificate types per
draft-ietf-plants-merkle-tree-certs.
JCA-free and lightweight-crypto-free operator abstractions, plus the proof / cosigner
validation pipeline. Lightweight bindings live in org.bouncycastle.cert.plants.bc
and JCA bindings in org.bouncycastle.cert.plants.jcajce.
-
ClassDescriptionThrown when a Merkle tree inclusion or consistency proof fails validation.Issuance- and relying-party-side helpers for landmark subtrees, per Sections 6.3 and 7.4 of draft-ietf-plants-merkle-tree-certs.A trusted subtree along with the reference checkpoint that proved its consistency, per Section 7.4.Maintains a relying-party-side list of trusted subtrees by accepting new landmarks that come with a cosigned reference checkpoint and a subtree consistency proof.A snapshot of the log: tree size and root hash.The published landmark sequence for a single issuance log, as defined by Section 6.3 of draft-ietf-plants-merkle-tree-certs.Parses (and encodes) a single log entry per Section 5.2.1 of draft-ietf-plants-merkle-tree-certs:A single Merkle Tree certificate log-entry extension, per Section 5.2.1 of draft-ietf-plants-merkle-tree-certs:Constants for the
MerkleTreeCertEntryTypeenum defined in Section 5.2.1 of draft-ietf-plants-merkle-tree-certs:Validates a Merkle Tree Certificate (MTC) per Section 7.2 of draft-ietf-plants-merkle-tree-certs.A half-open range[start, end)of revoked certificate serial numbers, per Section 7.5 of the draft.Represents a trusted subtree (typically a landmark subtree predistributed to the relying party).Parameters supplied by the relying party for certificate validation.Operator interface for the hash function used in the Merkle tree, as defined by Section 4 of draft-ietf-plants-merkle-tree-certs.Merkle Tree primitives for Merkle Tree Certificates (PLANTS).Simple container for a subtree interval (start inclusive, end exclusive).Identity-side helper for an MTC Certification Authority, per Section 5 of draft-ietf-plants-merkle-tree-certs.Helpers for the CA certificate representation defined by Section 5.5 of draft-ietf-plants-merkle-tree-certs.Issuer-sideContentSignerthat emits an MTCsignatureValue(an encodedMTCProof) for an EE Merkle Tree certificate per Section 6.1 of draft-ietf-plants-merkle-tree-certs.Wire encoder for the CosignedMessage struct defined by Section 5.3.1 of draft-ietf-plants-merkle-tree-certs:Operator interface for producing a cosigner signature over the subtree[start, end)of an MTC issuance log, per Section 5.3 of draft-ietf-plants-merkle-tree-certs.Operator that verifies a single cosigner's signature over a CosignedMessage as defined by Section 5.3.1 of draft-ietf-plants-merkle-tree-certs.Looks up anMTCCosignerVerifierfor a given cosigner trust anchor ID.Immutable identifier for an MTC issuance-log subtree window: the CA that operates the log, the log number (the upper 16 bits of the cert serial per Section 6.1 of draft-ietf-plants-merkle-tree-certs) and the subtree's[start, end)index range (uint48).The MTCProof structure encoded in the X.509 certificate signatureValue per draft-ietf-plants-merkle-tree-certs, Section 6.1.A single cosigner signature, as it appears inside the TLS-encoded MTCProof defined by draft-ietf-plants-merkle-tree-certs, Section 6.1:String constants for the cosigner signature algorithms defined by Section 5.3.2 of draft-ietf-plants-merkle-tree-certs.Operator interface for verifying a single cosigner signature over a pre-encoded CosignedMessage, per Section 5.3.1 of draft-ietf-plants-merkle-tree-certs.Single-cosignerContentVerifierProvideradapter for MTC verification.Utilities for constructing and parsing the binary trust anchor IDs reserved by Section 5.1 of draft-ietf-plants-merkle-tree-certs under each CA ID:{caID 0 N}— issuance logN(Section 5.2){caID 1 N L}— landmarkLof logN(Section 8.2){caID 2 N L}— landmark group containing landmarkLand earlier (Section 8.2.1)