multipaz/org.multipaz.crypto/AsymmetricKey/X509CertifiedExplicit

X509CertifiedExplicit

data class X509CertifiedExplicit(val certChain: X509CertChain, val privateKey: PrivateKey, val algorithm: Algorithm = when (privateKey) { is EcPrivateKey -> privateKey.curve.defaultSigningAlgorithmFullySpecified is RsaPrivateKey -> Algorithm.RS256 is MlDsaPrivateKey -> privateKey.algorithm is MlKemPrivateKey -> privateKey.algorithm }) : AsymmetricKey.X509Certified, AsymmetricKey.Explicit

AsymmetricKey which is both AsymmetricKey.X509Certified and AsymmetricKey.Explicit.

Constructors

X509CertifiedExplicit

constructor(certChain: X509CertChain, privateKey: PrivateKey, algorithm: Algorithm = when (privateKey) { is EcPrivateKey -> privateKey.curve.defaultSigningAlgorithmFullySpecified is RsaPrivateKey -> Algorithm.RS256 is MlDsaPrivateKey -> privateKey.algorithm is MlKemPrivateKey -> privateKey.algorithm })

Properties

open override val algorithm: Algorithm

Signature algorithm

open override val certChain: X509CertChain

X509 certificate chain for the key, corresponds to x5c header value in JWT.

open val ecPrivateKey: EcPrivateKey

Private key as EcPrivateKey

val ecPublicKey: EcPublicKey

Public key as EcPublicKey

mlDsaPrivateKey

open val mlDsaPrivateKey: MlDsaPrivateKey

Private key as MlDsaPrivateKey

val mlDsaPublicKey: MlDsaPublicKey

Public key as MlDsaPublicKey

open override val privateKey: PrivateKey

Private key that is used for signing.

open override val publicKey: PublicKey

Public key that corresponds to the private key used for signing

open val rsaPrivateKey: RsaPrivateKey

Private key as RsaPrivateKey

val rsaPublicKey: RsaPublicKey

Public key as RsaPublicKey

open override val subject: String

Entity to which the key belongs; key id for named key, common name for the keys with the certificate chain.

Functions

open override fun close()

Closes the key, zeroing any underlying private key material if this is an explicit key.

fun getX500Subject(): X500Name

Returns key's certificate subject as X500Name.

suspend fun keyAgreement(otherKey: PublicKey): SecureByteString

open suspend override fun keyAgreement(otherKey: EcPublicKey): SecureByteString

Performs Key Agreement using this key and otherKey.

open suspend override fun sign(message: ByteArray): Signature

Signs message with this key.

suspend fun signEc(message: ByteArray): EcSignature

Convenience method to sign message when this is an EC key.

suspend fun signMlDsa(message: ByteArray): MlDsaSignature

Convenience method to sign message when this is an ML-DSA key.

suspend fun signRsa(message: ByteArray): RsaSignature

Convenience method to sign message when this is an RSA key.