Index

A B C D E F G H I J K L M N O P R S T U V W X Z
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

AA_COMPROMISE - Enum constant in enum class zeroecho.pkix.crl.CrlReason

aACompromise (10).

aad(byte[]) - Method in class zeroecho.sdk.hybrid.derived.HybridDerived

Supplies explicit AAD bytes to be injected into AEAD builders.

aad(String) - Static method in class zeroecho.core.ConfluxKeys

Returns a typed key for additional authenticated data (AAD).

Abbreviation rules - Section in class zeroecho.logging.CompactOneLineFormatter

absent(String) - Static method in class zeroecho.pkix.AlgorithmIdentifier

Creates an identifier with no parameters field.

ABSENT - Enum constant in enum class zeroecho.pkix.AlgorithmIdentifier.ParameterForm

No parameters field.

absoluteDecodedMaximum() - Method in record class zeroecho.sdk.Pbkdf2Limits

Returns the value of the absoluteDecodedMaximum record component.

AbstractChunkTransformInputStream - Class in zeroecho.core.io

InputStream that transforms data in fixed-size chunks with optional finalization.

AbstractChunkTransformInputStream(InputStream, int, int, int) - Constructor for class zeroecho.core.io.AbstractChunkTransformInputStream

Constructs a new chunk-transforming input stream with symmetric input and output capacities.

AbstractChunkTransformInputStream(InputStream, int, int, int, int) - Constructor for class zeroecho.core.io.AbstractChunkTransformInputStream

Constructs a new chunk-transforming input stream with extra output headroom for finalization.

AbstractCryptoAlgorithm - Class in zeroecho.core.alg

Convenience base class for concrete CryptoAlgorithm implementations.

AbstractCryptoAlgorithm(String, String) - Constructor for class zeroecho.core.alg.AbstractCryptoAlgorithm

Constructs an algorithm with default priority (0) and provider "default".

AbstractCryptoAlgorithm(String, String, String) - Constructor for class zeroecho.core.alg.AbstractCryptoAlgorithm

Constructs an algorithm with default priority (0) and an explicit provider name.

Abstract EdDSA Encoded Private Key Builder - Section in class zeroecho.core.alg.common.eddsa.AbstractEncodedPrivateKeyBuilder

Abstract EdDSA Encoded Public Key Builder - Section in class zeroecho.core.alg.common.eddsa.AbstractEncodedPublicKeyBuilder

AbstractEdDSAKeyGenBuilder<S> - Class in zeroecho.core.alg.common.eddsa

Abstract EdDSA Key-Pair Builder

AbstractEdDSAKeyGenBuilder() - Constructor for class zeroecho.core.alg.common.eddsa.AbstractEdDSAKeyGenBuilder

Creates a stateless EdDSA key-pair generator base.

Abstract EdDSA Key-Pair Builder - Section in class zeroecho.core.alg.common.eddsa.AbstractEdDSAKeyGenBuilder

AbstractEncodedPrivateKeyBuilder<S> - Class in zeroecho.core.alg.common.eddsa

Abstract EdDSA Encoded Private Key Builder

AbstractEncodedPrivateKeyBuilder() - Constructor for class zeroecho.core.alg.common.eddsa.AbstractEncodedPrivateKeyBuilder

Creates a stateless encoded-private-key importer base.

AbstractEncodedPublicKeyBuilder<S> - Class in zeroecho.core.alg.common.eddsa

Abstract EdDSA Encoded Public Key Builder

AbstractEncodedPublicKeyBuilder() - Constructor for class zeroecho.core.alg.common.eddsa.AbstractEncodedPublicKeyBuilder

Creates a stateless encoded-public-key importer base.

AbstractExportableDataContent - Class in zeroecho.sdk.content.api

An abstract base class for exportable data content, providing default implementations for managing input data and export mode.

AbstractExportableDataContent() - Constructor for class zeroecho.sdk.content.api.AbstractExportableDataContent

Creates an exporter with ExportableDataContent.ExportMode.RAW selected and no input.

AbstractPassthroughInputStream - Class in zeroecho.core.io

Passthrough InputStream that forwards body bytes and optionally emits a trailer at EOF.

AbstractPassthroughInputStream(InputStream, int) - Constructor for class zeroecho.core.io.AbstractPassthroughInputStream

Constructs a new passthrough stream with an internal buffer sized for body reads.

acquire() - Method in interface zeroecho.core.spi.KeyringUnlockProvider

Supplies unlock material for one operation.

Adapter: using a KEM as a message-based agreement primitive - Section in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter

add(Collection) - Method in class zeroecho.core.spec.AlgorithmIdentityCatalog

Adds exact parameter combinations to this authority snapshot.

add(DataContentBuilder) - Method in interface zeroecho.sdk.builders.core.DataContentChainBuilder

Adds a DataContentBuilder to the chain and links its output to the input of the previously added DataContent, if any.

add(DataContentBuilder) - Method in class zeroecho.sdk.builders.core.DataContentChainBuilder.DefaultDataContentChainBuilder

addAttribute(CsrAttribute) - Method in interface zeroecho.pkix.csr.CertificationRequestBuilder

Adds an arbitrary PKCS#10 attribute.

addBytes(String, byte[]) - Method in class zeroecho.sdk.hybrid.kex.HybridKexTranscript

Adds a raw byte value under a tag.

addCapability(Capability) - Method in class zeroecho.core.CryptoAlgorithm

Adds a capability flag to this algorithm.

addEntries(Iterator) - Method in interface zeroecho.pkix.crl.CrlBuilder

Adds all entries produced by the given iterator, in order.

addEntry(CrlEntry) - Method in interface zeroecho.pkix.crl.CrlBuilder

Adds one revoked-certificate entry.

addExtension(CertificateExtension) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Adds an arbitrary extension.

addExtension(CertificateExtension) - Method in interface zeroecho.pkix.crl.CrlBuilder

Adds an arbitrary CRL extension.

addOpener(RecipientOpener) - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Adds a custom recipient opener used during decryption when scanning recipient entries.

addPasswordRecipient(char[], int, int, int) - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Adds a password-based recipient that derives a KEK via PBKDF2(HMAC-SHA-256) and AES-GCM-wraps the CEK.

addPasswordRecipientDecoy(char[], int, int, int) - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Adds a password-based decoy recipient that derives a KEK via PBKDF2(HMAC-SHA-256) and AES-GCM-wraps the CEK.

addRecipient(EncryptionContext) - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Adds a universal recipient backed by a caller-supplied EncryptionContext.

addRecipient(KemContext, int, int) - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Adds a universal recipient backed by a caller-supplied KemContext.

addRecipientDecoy(EncryptionContext) - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Adds a universal decoy recipient backed by a caller-supplied EncryptionContext.

addRecipientDecoy(KemContext, int, int) - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Adds a universal decoy recipient backed by a caller-supplied KemContext.

addResponse(CertId, CertStatus, Instant, Instant) - Method in interface zeroecho.pkix.ocsp.OcspResponseBuilder

Adds a single certificate-status response.

addUtf8(String, String) - Method in class zeroecho.sdk.hybrid.kex.HybridKexTranscript

Adds a UTF-8 string value under a tag.

AES_128_BYTES - Static variable in class zeroecho.sdk.guard.RecipientKekSizes

AES-128 key size in bytes.

AES_256_BYTES - Static variable in class zeroecho.sdk.guard.RecipientKekSizes

AES-256 key size in bytes.

aes128() - Static method in record class zeroecho.core.alg.aes.AesKeyGenSpec

Constructs a spec for generating a 128-bit AES key.

aes192() - Static method in record class zeroecho.core.alg.aes.AesKeyGenSpec

Constructs a spec for generating a 192-bit AES key.

aes256() - Static method in record class zeroecho.core.alg.aes.AesKeyGenSpec

Constructs a spec for generating a 256-bit AES key.

AesAlgorithm - Class in zeroecho.core.alg.aes

AES algorithm registration and capability wiring.

AesAlgorithm() - Constructor for class zeroecho.core.alg.aes.AesAlgorithm

Constructs the AES algorithm descriptor and performs capability registration.

AesCipherContext - Class in zeroecho.core.alg.aes

Streaming AES cipher context for GCM / CBC / CTR.

AesCipherContext(CryptoAlgorithm, SecretKey, boolean, AesSpec, SecureRandom) - Constructor for class zeroecho.core.alg.aes.AesCipherContext

Creates a new AES streaming context.

AesDataContentBuilder - Class in zeroecho.sdk.builders.alg

Fluent builder that exposes AES as a DataContent in pull‑mode.

AesHeaderCodec - Class in zeroecho.core.alg.aes

Minimal AES header codec that persists runtime parameters only:

AesHeaderCodec() - Constructor for class zeroecho.core.alg.aes.AesHeaderCodec

Creates a stateless AES stream-header codec.

AesKeyGenSpec - Record Class in zeroecho.core.alg.aes

Key generation parameters for AES.

AesKeyGenSpec(int) - Constructor for record class zeroecho.core.alg.aes.AesKeyGenSpec

Creates a new spec and validates the key size.

AesKeyImportSpec - Class in zeroecho.core.alg.aes

Specification for importing an existing AES key.

AesSpec - Class in zeroecho.core.alg.aes

Static configuration for AES encryption and decryption.

AesSpec.Builder - Class in zeroecho.core.alg.aes

Builder for AesSpec.

AesSpec.Mode - Enum Class in zeroecho.core.alg.aes

AES block modes supported by this implementation.

AesSpec.Padding - Enum Class in zeroecho.core.alg.aes

Padding schemes for CBC mode.

AFFILIATION_CHANGED - Enum constant in enum class zeroecho.pkix.crl.CrlReason

affiliationChanged (3).

AGREEMENT - Enum constant in enum class zeroecho.core.AlgorithmFamily

Key-agreement schemes such as ECDH/X25519.

AGREEMENT - Enum constant in enum class zeroecho.core.KeyUsage

Perform key agreement (e.g., X25519, ECDH).

AGREEMENT - Enum constant in enum class zeroecho.core.spec.AlgorithmIdentity.Kind

Key-agreement mechanism.

AgreementContext - Interface in zeroecho.core.context

Context for performing key agreement protocols using a private key and a peer's public key.

algorithm - Variable in class zeroecho.core.alg.chacha.ChaChaCipherContext

Algorithm definition that created this context.

algorithm() - Method in class zeroecho.core.alg.aes.AesCipherContext

Returns the algorithm descriptor (ID "AES").

algorithm() - Method in class zeroecho.core.alg.bike.BikeKemContext

Returns the algorithm that created this context.

algorithm() - Method in class zeroecho.core.alg.chacha.ChaChaCipherContext

Returns the algorithm that created this context.

algorithm() - Method in class zeroecho.core.alg.cmce.CmceKemContext

Returns the parent algorithm descriptor for this context.

algorithm() - Method in class zeroecho.core.alg.common.agreement.GenericJcaAgreementContext

Returns the CryptoAlgorithm that created this context.

algorithm() - Method in class zeroecho.core.alg.common.agreement.GenericJcaMessageAgreementContext

Returns the algorithm that created this context.

algorithm() - Method in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter

Returns the underlying algorithm descriptor.

algorithm() - Method in class zeroecho.core.alg.common.eddsa.CommonEdDSASignatureContext

Returns the algorithm associated with this context.

algorithm() - Method in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Returns the logical algorithm associated with this context.

algorithm() - Method in class zeroecho.core.alg.digest.DigestSpec

Returns the digest algorithm.

algorithm() - Method in class zeroecho.core.alg.digest.JcaDigestContext

Returns the CryptoAlgorithm definition that created this context.

algorithm() - Method in class zeroecho.core.alg.elgamal.ElgamalCipherContext

Returns the associated algorithm object for metadata and auditing.

algorithm() - Method in class zeroecho.core.alg.frodo.FrodoKemContext

Returns the associated algorithm descriptor.

algorithm() - Method in class zeroecho.core.alg.hmac.HmacMacContext

Returns the algorithm descriptor associated with this context.

algorithm() - Method in class zeroecho.core.alg.hqc.HqcKemContext

Returns the algorithm that created this context.

algorithm() - Method in class zeroecho.core.alg.kyber.KyberKemContext

Returns the algorithm descriptor associated with this context.

algorithm() - Method in class zeroecho.core.alg.lms.LmsSignatureContext

algorithm() - Method in class zeroecho.core.alg.mldsa.MldsaSignatureContext

Returns the parent CryptoAlgorithm associated with this context.

algorithm() - Method in class zeroecho.core.alg.ntru.NtruKemContext

Returns the algorithm descriptor that created this context.

algorithm() - Method in class zeroecho.core.alg.ntruprime.NtrulPrimeKemContext

Returns the algorithm that owns this context.

algorithm() - Method in class zeroecho.core.alg.ntruprime.SntruPrimeKemContext

Returns the algorithm that owns this context.

algorithm() - Method in class zeroecho.core.alg.rsa.RsaCipherContext

Returns the algorithm descriptor associated with this context.

algorithm() - Method in class zeroecho.core.alg.rsa.RsaSignatureContext

Returns the algorithm descriptor associated with this context.

algorithm() - Method in class zeroecho.core.alg.saber.SaberKemContext

Returns the algorithm that created this context.

algorithm() - Method in class zeroecho.core.alg.slhdsa.SlhDsaSignatureContext

Returns the parent CryptoAlgorithm associated with this context.

algorithm() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Returns the algorithm associated with this context.

algorithm() - Method in class zeroecho.core.alg.xmss.XmssSignatureContext

algorithm() - Method in class zeroecho.core.alg.xwing.XWingKemContext

algorithm() - Method in interface zeroecho.core.context.CryptoContext

Returns the algorithm that created this context.

algorithm() - Method in record class zeroecho.core.storage.KeyringStore.PrivateWithId

Returns the value of the algorithm record component.

algorithm() - Method in record class zeroecho.core.storage.KeyringStore.PublicWithId

Returns the value of the algorithm record component.

algorithm() - Method in record class zeroecho.core.storage.KeyringStore.SecretWithId

Returns the value of the algorithm record component.

algorithm() - Method in interface zeroecho.pkix.sign.ContentSigner

Returns the signature algorithm identifier that will be recorded in the signed object's signatureAlgorithm field.

algorithm() - Method in class zeroecho.sdk.hybrid.kex.HybridKexContext

Returns the representative algorithm of this context.

algorithm(String) - Method in class zeroecho.sdk.builders.HybridKexBuilder.ClassicAgreement

Sets the classic agreement algorithm identifier.

algorithm(String) - Method in class zeroecho.sdk.builders.HybridKexBuilder.ClassicPairMessage

Sets the classic agreement algorithm identifier.

algorithm(String) - Method in class zeroecho.sdk.builders.HybridKexBuilder.PqcKem

Sets the PQC algorithm identifier.

ALGORITHM_MISMATCH - Enum constant in enum class zeroecho.core.storage.KeyringSignatureExecutor.FailureCode

The identity is incompatible, or a stored LMS/XMSS key cannot safely sign.

Algorithm and provider selection - Section in class zeroecho.core.alg.common.agreement.GenericJcaMessageAgreementContext

Algorithm characteristics - Section in class zeroecho.core.alg.ed25519.Ed25519SignatureContext

Algorithm characteristics - Section in class zeroecho.core.alg.ed448.Ed448SignatureContext

AlgorithmExecutionCapabilities - Class in zeroecho.core.spi

Immutable deterministic snapshot of installed execution capabilities.

AlgorithmExecutionCapabilities(List) - Constructor for class zeroecho.core.spi.AlgorithmExecutionCapabilities

Creates a validated immutable snapshot.

AlgorithmExecutionCapability - Interface in zeroecho.core.spi

Trusted-code declaration of an installed cryptographic execution domain.

AlgorithmExecutionCapability.Direction - Enum Class in zeroecho.core.spi

Supported execution direction.

AlgorithmExecutionCapabilityProvider - Interface in zeroecho.core.spi

Service-provider contract for trusted installed execution capabilities.

AlgorithmFamily - Enum Class in zeroecho.core

High-level classification of cryptographic algorithms.

algorithmId() - Method in record class zeroecho.core.Capability

Returns the value of the algorithmId record component.

AlgorithmIdentifier - Class in zeroecho.pkix

Provider-independent X.509 AlgorithmIdentifier (RFC 5280): an OID with an exactly-typed parameter form.

AlgorithmIdentifier.ParameterForm - Enum Class in zeroecho.pkix

Encoding form of the optional parameters field.

AlgorithmIdentity - Class in zeroecho.core.spec

Provider-independent identity of one exact cryptographic operation or key type.

AlgorithmIdentity(AlgorithmIdentity.Kind, AlgorithmIdentity.Family, AlgorithmIdentity.Parameters) - Constructor for class zeroecho.core.spec.AlgorithmIdentity

Creates one exact algorithm identity.

AlgorithmIdentity(AlgorithmIdentity.Kind, AlgorithmIdentity.Family, AlgorithmIdentity.Parameters, AlgorithmIdentityCodec) - Constructor for class zeroecho.core.spec.AlgorithmIdentity

Creates one exact algorithm identity using a trusted typed codec.

Algorithm identity - Section in package zeroecho.core.alg.mldsa

Algorithm identity - Section in package zeroecho.core.alg.slhdsa

AlgorithmIdentity.DigestParameters - Record Class in zeroecho.core.spec

Digest-qualified signature parameters.

AlgorithmIdentity.Family - Record Class in zeroecho.core.spec

Stable namespaced algorithm family name.

AlgorithmIdentity.Kind - Enum Class in zeroecho.core.spec

Semantic role represented by an identity.

AlgorithmIdentity.NamedParameters - Record Class in zeroecho.core.spec

Exact named parameter set, such as an elliptic-curve name.

AlgorithmIdentity.NoParameters - Enum Class in zeroecho.core.spec

Parameters for an unparameterized family.

AlgorithmIdentity.Parameters - Interface in zeroecho.core.spec

Typed, immutable family parameters.

AlgorithmIdentity.RsaPssParameters - Record Class in zeroecho.core.spec

Exact RSA-PSS parameters.

AlgorithmIdentityCatalog - Class in zeroecho.core.spec

Deeply immutable snapshot of installed algorithm identities.

AlgorithmIdentityCodec - Interface in zeroecho.core.spec

Trusted-code canonical codec for one typed algorithm-parameter schema.

algorithmIds() - Static method in class zeroecho.core.alg.common.sig.SignatureInteropProfiles

Returns the set of canonical interop algorithm identifiers known to this helper.

AlgorithmKeySpec - Interface in zeroecho.core.spec

Marker interface for algorithm-specific key specifications.

Algorithm model - Section in package zeroecho.core

Algorithm selection - Section in class zeroecho.core.alg.digest.DigestSpec

AlgorithmSuite - Record Class in zeroecho.core.spec

Immutable composition of a signature scheme and a compatible public-key identity.

AlgorithmSuite(AlgorithmIdentity, AlgorithmIdentity) - Constructor for record class zeroecho.core.spec.AlgorithmSuite

Creates a validated signature suite.

aliases() - Method in class zeroecho.core.storage.KeyringStore

Returns aliases in their persisted order.

all() - Method in class zeroecho.core.spi.AlgorithmExecutionCapabilities

Returns the immutable installed snapshot.

allowedValues() - Method in record class zeroecho.core.ParameterConstraint

Returns the value of the allowedValues record component.

AND - Enum constant in enum class zeroecho.sdk.hybrid.signature.HybridSignatureProfile.VerifyRule

Both component signatures must verify successfully.

applyToAesGcm(AesDataContentBuilder, int) - Method in class zeroecho.sdk.hybrid.derived.HybridDerived

Derives an AES key and applies it with optional AAD to the provided AES builder.

applyToChaChaAead(ChaChaDataContentBuilder, int) - Method in class zeroecho.sdk.hybrid.derived.HybridDerived

Derives a ChaCha key and applies it with optional AAD to the provided ChaCha builder.

applyToHmac(HmacDataContentBuilder) - Method in class zeroecho.sdk.hybrid.derived.HybridDerived

Derives a MAC key using the builder's recommended size and applies it to the provided HMAC builder.

applyToHmac(HmacDataContentBuilder, int) - Method in class zeroecho.sdk.hybrid.derived.HybridDerived

Derives a MAC key of an explicit size (override) and applies it to the provided HMAC builder.

asInitiator() - Method in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter.Builder

Configures the adapter as an initiator.

asResponder() - Method in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter.Builder

Configures the adapter as a responder.

assembleCertificateOrCrl(byte[], byte[], boolean) - Method in class zeroecho.pkix.bc.BcPkixProvider

assembleCertificateOrCrl(byte[], byte[], boolean) - Static method in class zeroecho.pkix.Pkix

Reassembles a signed certificate or CRL from its tbs bytes and a raw signature, repeating the algorithm identifier embedded in the tbs.

assembleCertificateOrCrl(byte[], byte[], boolean) - Method in interface zeroecho.pkix.spi.PkixProvider

Reassembles a signed certificate or CRL from its tbs bytes and a raw signature, repeating the algorithm identifier embedded in the tbs as the outer signatureAlgorithm, and validates that the result parses.

assembleOcspResponse(byte[], byte[], byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

assembleOcspResponse(byte[], byte[], byte[]) - Static method in class zeroecho.pkix.Pkix

Reassembles a successful OCSPResponse from its tbsResponseData, a DER-encoded signature algorithm identifier, and a raw signature.

assembleOcspResponse(byte[], byte[], byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Reassembles a successful OCSPResponse wrapping a BasicOCSPResponse from its tbsResponseData, a DER-encoded signature algorithm identifier, and a raw signature, and validates that the result parses as successful.

assembleOcspResponse(byte[], byte[], byte[], List) - Method in class zeroecho.pkix.bc.BcPkixProvider

assembleOcspResponse(byte[], byte[], byte[], List) - Static method in class zeroecho.pkix.Pkix

Reassembles a successful OCSP response from unsigned ResponseData, an encoded signature algorithm, a raw signature and an ordered certificate chain.

assembleOcspResponse(byte[], byte[], byte[], List) - Method in interface zeroecho.pkix.spi.PkixProvider

Reassembles a successful OCSP response from unsigned ResponseData, an encoded signature algorithm, a raw signature and an ordered certificate chain.

asymmetric() - Method in class zeroecho.sdk.KeyBuilders

Returns asymmetric key operations.

ASYMMETRIC - Enum constant in enum class zeroecho.core.AlgorithmFamily

Public-key primitives (signatures, RSA, etc.).

ASYMMETRIC_KEY_PAIR_GENERATE - Enum constant in enum class zeroecho.core.KeyOperation

Generates an asymmetric key pair.

ASYMMETRIC_PRIVATE_IMPORT - Enum constant in enum class zeroecho.core.KeyOperation

Imports an asymmetric private key.

ASYMMETRIC_PUBLIC_IMPORT - Enum constant in enum class zeroecho.core.KeyOperation

Imports an asymmetric public key.

asymmetricKeyPairGenerator(Class) - Method in class zeroecho.core.CryptoAlgorithm

Returns the asymmetric key-pair generator registered for an exact specification class.

AsymmetricKeyPairGenerator<S> - Interface in zeroecho.core.spi

Generates asymmetric key pairs for one exact specification type.

attach(InputStream) - Method in class zeroecho.core.alg.aes.AesCipherContext

Attaches this context to an upstream stream and returns a transforming stream.

attach(InputStream) - Method in class zeroecho.core.alg.chacha.ChaChaCipherContext

Attaches this context to an upstream input stream and returns a transformation stream.

attach(InputStream) - Method in class zeroecho.core.alg.elgamal.ElgamalCipherContext

Returns an input stream that transforms bytes on-the-fly using ElGamal.

attach(InputStream) - Method in class zeroecho.core.alg.rsa.RsaCipherContext

Attaches this cipher to an upstream stream and returns a transforming stream.

attach(InputStream) - Method in interface zeroecho.core.context.EncryptionContext

Attaches this context to an upstream input stream.

attributes() - Method in interface zeroecho.pkix.csr.CertificationRequest

Returns the request attributes (excluding the extension-request attribute, which is surfaced via CertificationRequest.requestedExtensions()).

attributeTypeOid() - Method in record class zeroecho.pkix.RelativeDistinguishedName

Returns the value of the attributeTypeOid record component.

AuditedContexts - Class in zeroecho.core.audit

Lightweight dynamic proxy that audits crypto contexts without changing their behavior.

auditListener() - Method in class zeroecho.sdk.ZeroEchoSession

Returns the audit listener owned by this session.

AuditListener - Interface in zeroecho.core.audit

Listener for structured audit events emitted by audited crypto contexts.

AuditListeners - Class in zeroecho.core.audit

Utilities for enforcing the best-effort audit-listener contract.

auditMode() - Method in class zeroecho.sdk.ZeroEchoSession

Returns the audit mode owned by this session.

AuditMode - Enum Class in zeroecho.core.audit

Defines the session-owned automatic auditing strategy.

authorityKeyIdentifier(byte[]) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Adds an AuthorityKeyIdentifier carrying the given key identifier.

authorityKeyIdentifier(byte[]) - Method in interface zeroecho.pkix.crl.CrlBuilder

Adds the AuthorityKeyIdentifier extension.

available() - Static method in class zeroecho.core.CryptoAlgorithms

Returns registered algorithm identifiers in deterministic order.

available() - Method in class zeroecho.core.io.TailStrippingInputStream

Returns an estimate of the number of bytes that can be read without blocking.

available() - Method in class zeroecho.sdk.ZeroEchoSession

Returns the available algorithm identifiers in deterministic registry order.

B

baos - Variable in class zeroecho.sdk.util.OutputToInputStreamAdapter

A buffer holding transformed data.

BASH_SCRIPT - Enum constant in enum class zeroecho.sdk.content.api.ExportableDataContent.ExportMode

Bash script mode returns a shell script with embedded Base64-encoded content, suitable for execution on Unix-like systems.

basicConstraints(BasicConstraints, boolean) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Adds a BasicConstraints extension.

BasicConstraints - Record Class in zeroecho.pkix

The X.509 BasicConstraints extension value (RFC 5280, 4.2.1.9).

BasicConstraints(boolean, OptionalInt) - Constructor for record class zeroecho.pkix.BasicConstraints

Canonicalizing constructor.

BcPkixProvider - Class in zeroecho.pkix.bc

The default PkixProvider, implemented with BouncyCastle.

BcPkixProvider() - Constructor for class zeroecho.pkix.bc.BcPkixProvider

Creates the provider, ensuring the BouncyCastle security providers are registered.

Behavior - Section in class zeroecho.core.alg.chacha.ChaChaHeaderCodec

Behavior - Section in class zeroecho.core.alg.rsa.RsaCipherContext

Behavior - Section in class zeroecho.core.alg.xdh.XdhAlgorithm

Behavior - Section in interface zeroecho.sdk.guard.RecipientOpener

Behavior - Section in package zeroecho.sdk.content.builtin

Behavioral guarantees - Section in class zeroecho.core.audit.AuditedContexts

Behavioral notes - Section in class zeroecho.core.io.TailStrippingInputStream

Behavior and notes - Section in package zeroecho.core.alg.xdh

Behavior of #build(boolean) - Section in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

bestEffort(AuditListener) - Static method in class zeroecho.core.audit.AuditListeners

Returns a listener facade that cannot interrupt the caller.

BIKE_128 - Enum constant in enum class zeroecho.core.alg.bike.BikeKeyGenSpec.Variant

BIKE with 128-bit security strength.

BIKE_192 - Enum constant in enum class zeroecho.core.alg.bike.BikeKeyGenSpec.Variant

BIKE with 192-bit security strength.

BIKE_256 - Enum constant in enum class zeroecho.core.alg.bike.BikeKeyGenSpec.Variant

BIKE with 256-bit security strength.

bike128() - Static method in class zeroecho.core.alg.bike.BikeKeyGenSpec

Returns a specification for BIKE-128.

bike192() - Static method in class zeroecho.core.alg.bike.BikeKeyGenSpec

Returns a specification for BIKE-192.

bike256() - Static method in class zeroecho.core.alg.bike.BikeKeyGenSpec

Returns a specification for BIKE-256.

BikeAlgorithm - Class in zeroecho.core.alg.bike

Integration of BIKE (Bit Flipping Key Encapsulation) algorithm

BikeAlgorithm() - Constructor for class zeroecho.core.alg.bike.BikeAlgorithm

Constructs and registers the BIKE algorithm with all its roles and key builders.

BikeKemContext - Class in zeroecho.core.alg.bike

BIKE Key Encapsulation Mechanism context

BikeKemContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.bike.BikeKemContext

Creates a decapsulation context bound to the holder's private key.

BikeKemContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.bike.BikeKemContext

Creates an encapsulation context bound to the recipient's public key.

BIKE Key Encapsulation Mechanism context - Section in class zeroecho.core.alg.bike.BikeKemContext

BikeKeyGenSpec - Class in zeroecho.core.alg.bike

Specification for BIKE key generation

BikeKeyGenSpec.Variant - Enum Class in zeroecho.core.alg.bike

Available BIKE parameter sets.

BikeKeySupport - Class in zeroecho.sdk.util

BIKE-256 key pair utilities for modules that depend on zeroecho.lib.

BikePrivateKeySpec - Class in zeroecho.core.alg.bike

Specification for a BIKE private key

BikePrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.bike.BikePrivateKeySpec

Constructs a new spec from a PKCS#8 encoded private key.

BikePublicKeySpec - Class in zeroecho.core.alg.bike

Specification for a BIKE public key

BikePublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.bike.BikePublicKeySpec

Constructs a new spec from an X.509 encoded public key.

bindContext(KeyUsage, Class, Class, Class, ContextFactoryKS, Supplier) - Method in class zeroecho.core.CryptoAlgorithm

Binds a role to a concrete context factory and its expected key/spec types.

bit() - Method in enum class zeroecho.pkix.KeyUsage

Returns the DER bit position of this usage (equal to the ordinal).

bits - Variable in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Security

Claimed security level in bits.

bits - Variable in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Security

Claimed security level in bits.

BlockGeometry - Record Class in zeroecho.core.alg.rsa

Describes block sizing rules for RSA encryption and decryption.

BlockGeometry(int, int, int) - Constructor for record class zeroecho.core.alg.rsa.BlockGeometry

Constructs a new block geometry descriptor.

Block sizing - Section in class zeroecho.core.io.CipherTransformInputStreamBuilder

bodyType() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns the CMP body tag.

BOOLEAN - Enum constant in enum class zeroecho.core.ParameterConstraint.ValueKind

Boolean.

BootstrapAlgorithmIdentities - Class in zeroecho.core.alg

Immutable bootstrap identities required by current ZeroEcho PKI behavior.

BouncyCastleActivator - Class in zeroecho.sdk.util

Provides initialization support for the Bouncy Castle cryptographic provider.

BUF_SIZE - Variable in class zeroecho.sdk.util.OutputToInputStreamAdapter

Buffer size in bytes used by this instance.

buffer - Variable in class zeroecho.sdk.content.builtin.PlainBytes

Byte array buffer that holds the raw data managed by this instance.

bufferSize(int) - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Sets the internal buffer size used by the tail-stripping wrapper.

bufferSize(int) - Method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder

Sets the internal I/O buffer size used when stripping the trailer.

bufferSize(int) - Method in class zeroecho.sdk.builders.TagTrailerDataContentBuilder

Sets the internal I/O buffer size used when stripping the trailer.

Buffer sizing and finalization headroom - Section in class zeroecho.core.io.AbstractChunkTransformInputStream

build() - Method in class zeroecho.core.alg.aes.AesSpec.Builder

Builds a validated AesSpec.

build() - Method in class zeroecho.core.alg.chacha.ChaCha20Poly1305Spec.Builder

Builds an immutable ChaCha20Poly1305Spec.

build() - Method in class zeroecho.core.alg.chacha.ChaChaSpec.Builder

Builds an immutable ChaChaSpec.

build() - Method in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter.Builder

Builds the adapter.

build() - Method in class zeroecho.core.audit.JulAuditListenerStd.Builder

Builds a new JulAuditListenerStd instance with the current settings.

build() - Method in class zeroecho.core.io.CipherTransformInputStreamBuilder

Builds a chunk-transforming InputStream using the configured options.

build() - Method in interface zeroecho.sdk.builders.core.DataContentChainBuilder

Finalizes the chain and returns the tail DataContent instance.

build() - Method in class zeroecho.sdk.builders.core.DataContentChainBuilder.DefaultDataContentChainBuilder

build(boolean) - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Builds an encrypting or decrypting DataContent.

build(boolean) - Method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Builds a streaming encryption or decryption pipeline according to the current configuration.

build(boolean) - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Builds a digest-computing PlainContent according to the current configuration.

build(boolean) - Method in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Builds a streaming encryption or decryption pipeline according to the current configuration.

build(boolean) - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Builds a digesting or verifying PlainContent pipeline according to the current configuration.

build(boolean) - Method in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Builds the KEM envelope stage in either encryption or decryption mode.

build(boolean) - Method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Builds a streaming encryption or decryption pipeline according to the current configuration.

build(boolean) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Builds a streaming signing or verification pipeline according to the current configuration.

build(boolean) - Method in interface zeroecho.sdk.builders.core.DataContentBuilder

Constructs and returns a new DataContent instance based on the builder's current configuration.

build(boolean) - Method in class zeroecho.sdk.builders.core.PlainBytesBuilder.DefaultPlainBytesBuilder

build(boolean) - Method in class zeroecho.sdk.builders.core.PlainFileBuilder.DefaultPlainFileBuilder

build(boolean) - Method in class zeroecho.sdk.builders.core.PlainStringBuilder.DefaultPlainStringBuilder

build(boolean) - Method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder

build(boolean) - Method in class zeroecho.sdk.builders.TagTrailerDataContentBuilder

Builds a DataContent pipeline for the selected direction.

build(boolean) - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Builds either an encrypting or a decrypting content wrapper depending on the encrypt flag.

build(ContentSigner) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Signs the assembled tbsCertificate with the given signer and returns the resulting certificate.

build(ContentSigner) - Method in interface zeroecho.pkix.crl.CrlBuilder

Signs the assembled tbsCertList with the given signer and returns the resulting CRL.

build(ContentSigner) - Method in interface zeroecho.pkix.csr.CertificationRequestBuilder

Signs the assembled certificationRequestInfo and returns the request.

build(ContentSigner, List) - Method in interface zeroecho.pkix.ocsp.OcspResponseBuilder

Signs the assembled tbsResponseData and returns the DER of the whole successful OCSPResponse.

buildAlternativeSignatureTbs() - Method in interface zeroecho.pkix.cert.CertificateBuilder

Encodes the standardized alternative-signature input, omitting both the TBSCertificate.signature field and the AltSignatureValue extension.

Build a streaming AES/GCM transform - Section in package zeroecho.core.io

buildCertRepFailure(String, byte[], String, X509Certificate, PrivateKey) - Static method in class zeroecho.pkix.scep.ScepCodec

Builds a SCEP CertRep FAILURE response signed by the RA.

buildCertRepPending(String, byte[], X509Certificate, PrivateKey) - Static method in class zeroecho.pkix.scep.ScepCodec

Builds a SCEP CertRep PENDING response signed by the RA.

buildCertRepSuccess(String, byte[], byte[], X509Certificate, X509Certificate, PrivateKey) - Static method in class zeroecho.pkix.scep.ScepCodec

Builds a SCEP CertRep SUCCESS response signed by the RA.

buildDegenerateCertsCms(List) - Static method in class zeroecho.pkix.scep.ScepCodec

Builds a degenerate CMS certs-only SignedData from the given DER-encoded certificates.

builder() - Static method in class zeroecho.core.alg.aes.AesSpec

Returns a new builder with safe defaults (AesSpec.Mode.GCM, AesSpec.Padding.NOPADDING, 128‑bit tag, no header).

builder() - Static method in class zeroecho.core.alg.chacha.ChaCha20Poly1305Spec

Returns a new builder for ChaCha20Poly1305Spec.

builder() - Static method in class zeroecho.core.alg.chacha.ChaChaSpec

Returns a new builder for constructing a ChaChaSpec.

builder() - Static method in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter

Returns a new builder for constructing a KemMessageAgreementAdapter.

builder() - Static method in class zeroecho.core.audit.JulAuditListenerStd

Creates a new builder with sensible defaults.

builder() - Static method in class zeroecho.core.io.CipherTransformInputStreamBuilder

Returns a new builder instance with default settings.

builder() - Static method in interface zeroecho.sdk.builders.core.PlainBytesBuilder

Creates a new instance of the default builder implementation.

builder() - Static method in interface zeroecho.sdk.builders.core.PlainFileBuilder

Creates a new instance of the default builder implementation.

builder() - Static method in interface zeroecho.sdk.builders.core.PlainStringBuilder

Creates a new instance of the default builder implementation.

builder(ZeroEchoSession) - Static method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Creates a new AES builder with default spec (GCM/128, no header) and no key selected.

builder(ZeroEchoSession) - Static method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Returns a new builder instance for constructing ChaCha20 or ChaCha20-Poly1305 streaming pipelines.

builder(ZeroEchoSession) - Static method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Creates a new builder for constructing digest-computing PlainContent pipelines.

builder(ZeroEchoSession) - Static method in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Creates a new builder for constructing ElGamal encryption or decryption pipelines.

builder(ZeroEchoSession) - Static method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Creates a new builder for constructing HMAC computing or verifying pipelines.

builder(ZeroEchoSession) - Static method in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Returns a new KemDataContentBuilder.

builder(ZeroEchoSession) - Static method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Creates a new builder for constructing RSA encryption or decryption pipelines.

builder(ZeroEchoSession) - Static method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Creates a new builder for constructing RSA signing or verification pipelines.

builder(ZeroEchoSession) - Static method in class zeroecho.sdk.builders.HybridKexBuilder

Creates a new builder instance.

builder(ZeroEchoSession) - Static method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Creates a new builder for constructing a multi-recipient data source.

Builder() - Constructor for class zeroecho.core.alg.aes.AesSpec.Builder

Creates a builder initialized for AES-GCM with a 128-bit tag.

Builder() - Constructor for class zeroecho.core.alg.chacha.ChaCha20Poly1305Spec.Builder

Creates a builder with stream-header encoding disabled.

Builder() - Constructor for class zeroecho.core.alg.chacha.ChaChaSpec.Builder

Creates a builder with counter 1 and stream headers disabled.

Builder() - Constructor for class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter.Builder

Creates an unbound adapter builder; KEM context and role must be selected before building.

Builder() - Constructor for class zeroecho.core.audit.JulAuditListenerStd.Builder

Creates a builder with standard JUL severity mappings and no logger yet.

Builders - Section in package zeroecho.core.tag

Builders overview - Section in package zeroecho.sdk.builders.alg

buildInitiator() - Method in class zeroecho.sdk.builders.HybridKexBuilder

Builds initiator-side context.

buildInitiator() - Method in class zeroecho.sdk.builders.HybridKexBuilder.PqcKem

Builds an initiator-side HybridKexContext using the current builder configuration.

buildPreCertificate(byte[], List, ContentSigner) - Method in class zeroecho.pkix.bc.BcPkixProvider

buildPreCertificate(byte[], List, ContentSigner) - Static method in class zeroecho.pkix.Pkix

Builds a CT pre-certificate by adding the CT poison extension to a TBSCertificate and signing it, ready for submission to CT logs.

buildPreCertificate(byte[], List, ContentSigner) - Method in interface zeroecho.pkix.spi.PkixProvider

Builds a CT pre-certificate from an existing TBSCertificate by adding the CT poison extension (OID 1.3.6.1.4.1.11129.2.4.3) and signing with the supplied signer.

buildRecipientEntry(byte[]) - Method in class zeroecho.sdk.guard.EncCtxRecipient

Builds a recipient entry for the given content-encryption key (CEK).

buildRecipientEntry(byte[]) - Method in class zeroecho.sdk.guard.KemCtxRecipient

Builds a recipient entry for the given content-encryption key (CEK).

buildRecipientEntry(byte[]) - Method in class zeroecho.sdk.guard.PasswordRecipient

Builds the recipient entry blob for this password recipient.

buildRecipientEntry(byte[]) - Method in interface zeroecho.sdk.guard.Recipient

Builds the binary recipient entry for this recipient and the provided CEK.

buildResponder() - Method in class zeroecho.sdk.builders.HybridKexBuilder

Builds responder-side context.

buildResponder() - Method in class zeroecho.sdk.builders.HybridKexBuilder.PqcKem

Builds a responder-side HybridKexContext using the current builder configuration.

buildServerKeygenCsr(byte[], PublicKey, PrivateKey) - Method in class zeroecho.pkix.bc.BcPkixProvider

Builds a new DER-encoded PKCS#10 CSR using the supplied generated key pair, copying the subject DN and all attributes from the original CSR.

buildServerKeygenCsr(byte[], PublicKey, PrivateKey) - Static method in class zeroecho.pkix.Pkix

Builds a new PKCS#10 CSR using a server-generated key pair, copying the subject DN and attributes from the original CSR, for use in EST /serverkeygen.

buildServerKeygenCsr(byte[], PublicKey, PrivateKey) - Method in interface zeroecho.pkix.spi.PkixProvider

Builds a new DER-encoded PKCS#10 CSR using the supplied generated key pair, copying the subject DN and all attributes from the original CSR.

buildSubjectPublicKeyInfo(AlgorithmIdentifier, byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

buildSubjectPublicKeyInfo(AlgorithmIdentifier, byte[]) - Static method in class zeroecho.pkix.Pkix

Builds the DER of a SubjectPublicKeyInfo from an algorithm identifier and the raw public-key BIT STRING contents.

buildSubjectPublicKeyInfo(AlgorithmIdentifier, byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Builds the DER of a SubjectPublicKeyInfo from an algorithm identifier and the raw public-key BIT STRING contents.

buildTbs() - Method in interface zeroecho.pkix.ocsp.OcspResponseBuilder

Encodes the exact unsigned ResponseData that a signer must sign.

buildTbs(AlgorithmIdentifier) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Encodes the configured unsigned X.509 v3 TBSCertificate as canonical DER.

builtIn(Collection) - Static method in class zeroecho.core.spec.AlgorithmIdentityCatalog

Creates the immutable built-in catalog.

BUILTIN_NAMESPACE - Static variable in class zeroecho.core.spec.AlgorithmIdentityCatalog

Namespace reserved for immutable built-in identities.

byKey(byte[]) - Static method in interface zeroecho.pkix.ocsp.ResponderId

Creates a key-hash-based responder id.

ByKey(byte[]) - Constructor for record class zeroecho.pkix.ocsp.ResponderId.ByKey

Canonicalizing constructor.

byName(X500Principal) - Static method in interface zeroecho.pkix.ocsp.ResponderId

Creates a name-based responder id.

ByName(X500Principal) - Constructor for record class zeroecho.pkix.ocsp.ResponderId.ByName

Canonicalizing constructor.

bytes(byte[]) - Method in interface zeroecho.sdk.builders.core.PlainBytesBuilder

Sets the byte array content to be wrapped by PlainBytes.

bytes(byte[]) - Method in class zeroecho.sdk.builders.core.PlainBytesBuilder.DefaultPlainBytesBuilder

ByteVerificationStrategy - Class in zeroecho.core.tag

Verification strategy for comparing two byte arrays in constant time.

ByteVerificationStrategy() - Constructor for class zeroecho.core.tag.ByteVerificationStrategy

Creates a stateless constant-time byte-array verifier.

C

ca() - Static method in record class zeroecho.pkix.BasicConstraints

A CA basic constraints value with no path-length limit.

ca(int) - Static method in record class zeroecho.pkix.BasicConstraints

A CA basic constraints value with the given path-length limit.

CA_COMPROMISE - Enum constant in enum class zeroecho.pkix.crl.CrlReason

cACompromise (2).

caCertificates(List) - Method in class zeroecho.pkix.cmp.CmpProtectedMessage.Verified

Creates the standard caCerts general response, preserving supplied chain order.

CancellationSignal - Interface in zeroecho.core.io

Provider-independent cancellation signal for streaming operations.

canonicalForm() - Method in class zeroecho.core.spec.AlgorithmIdentity

Returns the deterministic provider-independent representation.

canonicalForm() - Method in record class zeroecho.core.spec.AlgorithmIdentity.DigestParameters

canonicalForm() - Method in record class zeroecho.core.spec.AlgorithmIdentity.Family

Returns the deterministic family representation.

canonicalForm() - Method in record class zeroecho.core.spec.AlgorithmIdentity.NamedParameters

canonicalForm() - Method in enum class zeroecho.core.spec.AlgorithmIdentity.NoParameters

canonicalForm() - Method in interface zeroecho.core.spec.AlgorithmIdentity.Parameters

Returns the deterministic parameter representation.

canonicalForm() - Method in record class zeroecho.core.spec.AlgorithmIdentity.RsaPssParameters

canonicalForm() - Method in record class zeroecho.core.spec.AlgorithmSuite

Returns the deterministic suite representation.

canonicalSha256() - Method in class zeroecho.pkix.PublicKeyIdentity

Returns the stable mathematical key commitment.

Canonical sizes (bytes) - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

canonicalSubjectPublicKeyInfo() - Method in class zeroecho.pkix.PublicKeyIdentity

Returns the canonical encoding used solely for identity comparison.

capabilities() - Method in interface zeroecho.core.spi.AlgorithmExecutionCapabilityProvider

Returns an immutable capability contribution.

Capabilities - Section in class zeroecho.core.CryptoAlgorithm

Capabilities - Section in class zeroecho.core.alg.bike.BikeAlgorithm

Capabilities - Section in class zeroecho.core.alg.chacha.ChaCha20Poly1305Algorithm

Capabilities - Section in class zeroecho.core.alg.chacha.ChaChaAlgorithm

Capabilities - Section in class zeroecho.core.alg.digest.Sha2Sha3Algorithm

Capabilities - Section in class zeroecho.core.alg.ecdh.EcdhAlgorithm

Capabilities - Section in class zeroecho.core.alg.ed25519.Ed25519Algorithm

Capabilities - Section in class zeroecho.core.alg.frodo.FrodoAlgorithm

Capabilities - Section in class zeroecho.core.alg.hmac.HmacAlgorithm

Capabilities - Section in class zeroecho.core.alg.lms.LmsAlgorithm

Capabilities - Section in class zeroecho.core.alg.ntruprime.NtrulPrimeAlgorithm

Capabilities - Section in class zeroecho.core.alg.ntruprime.SntruPrimeAlgorithm

Capabilities - Section in class zeroecho.core.alg.rsa.RsaAlgorithm

Capabilities - Section in class zeroecho.core.alg.saber.SaberAlgorithm

Capabilities - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusAlgorithm

Capabilities - Section in class zeroecho.core.alg.xmss.XmssAlgorithm

Capabilities - Section in class zeroecho.core.alg.xwing.XWingAlgorithm

CAPABILITIES_OID - Static variable in class zeroecho.pkix.EstKeygen

PKCS#9 client key-encipherment capabilities attribute.

Capabilities registered - Section in class zeroecho.core.alg.ntru.NtruAlgorithm

capability(AlgorithmFamily, KeyUsage, Class, Class, Class, ContextFactoryKS, Supplier) - Method in class zeroecho.core.alg.AbstractCryptoAlgorithm

Declares a capability for this algorithm and binds a runtime factory for the given role.

Capability - Record Class in zeroecho.core

Immutable value descriptor of one algorithm context capability.

Capability(String, AlgorithmFamily, KeyUsage, Class, Class, Class, ContextSpec) - Constructor for record class zeroecho.core.Capability

Validates the capability metadata.

Capability binding - Section in package zeroecho.core.alg

catalog() - Static method in class zeroecho.core.alg.BootstrapAlgorithmIdentities

Returns the immutable bootstrap identity catalog.

CatalogSelector - Class in zeroecho.core

Helper routines for catalog selection by family and roles.

CBC - Enum constant in enum class zeroecho.core.alg.aes.AesSpec.Mode

Cipher Block Chaining (CBC).

cbcPkcs7(SymmetricHeaderCodec) - Static method in class zeroecho.core.alg.aes.AesSpec

Creates a CBC specification using PKCS#7 padding and the provided header.

certainty() - Method in class zeroecho.core.alg.elgamal.ElgamalKeyGenSpec

Returns the Miller–Rabin certainty parameter.

certId() - Method in record class zeroecho.pkix.ocsp.OcspResponse.SingleResponse

Returns the value of the certId record component.

CertId - Record Class in zeroecho.pkix.ocsp

An OCSP CertID (RFC 6960): identifies a certificate by the hash of its issuer's name and key together with the certificate serial number.

CertId(AlgorithmIdentifier, byte[], byte[], BigInteger) - Constructor for record class zeroecho.pkix.ocsp.CertId

Canonicalizing constructor.

certificate(int, byte[], boolean, Instant) - Method in class zeroecho.pkix.cmp.CmpProtectedMessage.Verified

Creates a granted ip/cp/kup response for the retained original request.

CERTIFICATE_HOLD - Enum constant in enum class zeroecho.pkix.crl.CrlReason

certificateHold (6).

certificateAuthority() - Method in record class zeroecho.pkix.BasicConstraints

Returns the value of the certificateAuthority record component.

certificateBuilder() - Method in class zeroecho.pkix.bc.BcPkixProvider

certificateBuilder() - Static method in class zeroecho.pkix.Pkix

Creates a certificate builder.

certificateBuilder() - Method in interface zeroecho.pkix.spi.PkixProvider

Creates a new certificate builder.

CertificateBuilder - Interface in zeroecho.pkix.cert

A fluent builder for an unsigned X.509 v3 certificate body or a signed standard X509Certificate.

certificateConfirmationHash(byte[]) - Static method in class zeroecho.pkix.cmp.CmpProtectedMessage

Computes the CMP certificate-confirmation hash using the hash component of a supported RSA or ECDSA certificate signature.

certificateConfirmationHash(byte[], Optional) - Static method in class zeroecho.pkix.cmp.CmpProtectedMessage

Hashes an exact certificate for confirmation.

CertificateExtension - Record Class in zeroecho.pkix

A generic X.509 v3 extension (RFC 5280, 4.1): an OID, a criticality flag, and the exact DER of the extnValue OCTET STRING contents.

CertificateExtension(String, boolean, byte[]) - Constructor for record class zeroecho.pkix.CertificateExtension

Canonicalizing constructor.

certificateKeyId(X509Certificate) - Static method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns the exact certificate key identifier used by signature protection.

CertificateReference(X500Principal, BigInteger) - Constructor for record class zeroecho.pkix.cmp.CrmfRequest.CertificateReference

Validates nonnull bounded coordinates.

certificates() - Method in interface zeroecho.pkix.ocsp.OcspResponse

Returns the responder certificates embedded in the response, in order.

certificationRequest() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns the exact original CertReqMsg, when this is an enrollment request.

CertificationRequest - Interface in zeroecho.pkix.csr

A parsed PKCS#10 certification request (RFC 2986).

certificationRequestBuilder() - Method in class zeroecho.pkix.bc.BcPkixProvider

certificationRequestBuilder() - Static method in class zeroecho.pkix.Pkix

Creates a certification-request builder.

certificationRequestBuilder() - Method in interface zeroecho.pkix.spi.PkixProvider

Creates a new certification-request builder.

CertificationRequestBuilder - Interface in zeroecho.pkix.csr

A fluent builder for a signed PKCS#10 certification request.

CertificationRequestException - Exception Class in zeroecho.pkix

Thrown when a PKCS#10 certification request cannot be parsed or its proof-of-possession self-signature fails verification.

CertificationRequestException(String) - Constructor for exception class zeroecho.pkix.CertificationRequestException

Creates an exception with the given message.

CertificationRequestException(String, Throwable) - Constructor for exception class zeroecho.pkix.CertificationRequestException

Creates an exception with the given message and cause.

certificationRequestInfo() - Method in interface zeroecho.pkix.csr.CertificationRequest

Returns the exact DER of the certificationRequestInfo (the to-be-signed portion of the request).

CertStatus - Interface in zeroecho.pkix.ocsp

An OCSP certificate status (RFC 6960): good, revoked, or unknown.

CertStatus.Good - Record Class in zeroecho.pkix.ocsp

The certificate is not revoked.

CertStatus.Revoked - Record Class in zeroecho.pkix.ocsp

The certificate is revoked.

CertStatus.Unknown - Record Class in zeroecho.pkix.ocsp

The responder does not know the status of the requested certificate.

CESSATION_OF_OPERATION - Enum constant in enum class zeroecho.pkix.crl.CrlReason

cessationOfOperation (5).

chacha20(SymmetricHeaderCodec) - Static method in class zeroecho.core.alg.chacha.ChaChaSpec

Convenience factory for a ChaCha20 spec with counter = 1.

ChaCha20 (stream) algorithm - Section in class zeroecho.core.alg.chacha.ChaChaAlgorithm

ChaCha20 cipher context (stream) - Section in class zeroecho.core.alg.chacha.ChaChaCipherContext

ChaCha20 key generation specification - Section in record class zeroecho.core.alg.chacha.ChaChaKeyGenSpec

ChaCha20 key import specification - Section in class zeroecho.core.alg.chacha.ChaChaKeyImportSpec

ChaCha20-Poly1305 (AEAD) algorithm - Section in class zeroecho.core.alg.chacha.ChaCha20Poly1305Algorithm

ChaCha20Poly1305Algorithm - Class in zeroecho.core.alg.chacha

ChaCha20-Poly1305 (AEAD) algorithm

ChaCha20Poly1305Algorithm() - Constructor for class zeroecho.core.alg.chacha.ChaCha20Poly1305Algorithm

Creates and registers the ChaCha20-Poly1305 AEAD algorithm with encryption/decryption capabilities for ChaCha20Poly1305Spec and VoidSpec defaults.

ChaCha20-Poly1305 algorithm specification - Section in class zeroecho.core.alg.chacha.ChaCha20Poly1305Spec

ChaCha20Poly1305HeaderCodec - Class in zeroecho.core.alg.chacha

ChaCha20-Poly1305 streaming header codec

ChaCha20Poly1305HeaderCodec() - Constructor for class zeroecho.core.alg.chacha.ChaCha20Poly1305HeaderCodec

Creates a stateless ChaCha20-Poly1305 stream-header codec.

ChaCha20Poly1305Spec - Class in zeroecho.core.alg.chacha

ChaCha20-Poly1305 algorithm specification

ChaCha20Poly1305Spec.Builder - Class in zeroecho.core.alg.chacha

Fluent builder for ChaCha20Poly1305Spec.

ChaCha20-Poly1305 streaming header codec - Section in class zeroecho.core.alg.chacha.ChaCha20Poly1305HeaderCodec

ChaCha20 stream cipher specification - Section in class zeroecho.core.alg.chacha.ChaChaSpec

ChaCha20 streaming header codec - Section in class zeroecho.core.alg.chacha.ChaChaHeaderCodec

chacha256() - Static method in record class zeroecho.core.alg.chacha.ChaChaKeyGenSpec

Returns the standard 256-bit key generation spec.

ChaChaAlgorithm - Class in zeroecho.core.alg.chacha

ChaCha20 (stream) algorithm

ChaChaAlgorithm() - Constructor for class zeroecho.core.alg.chacha.ChaChaAlgorithm

Creates and registers the ChaCha20 stream cipher, declaring encryption and decryption capabilities for ChaChaSpec and VoidSpec.

ChaChaBaseSpec - Interface in zeroecho.core.alg.chacha

ChaCha base specification marker

ChaCha base specification marker - Section in interface zeroecho.core.alg.chacha.ChaChaBaseSpec

ChaChaCipherContext - Class in zeroecho.core.alg.chacha

ChaCha20 cipher context (stream)

ChaChaCipherContext(CryptoAlgorithm, SecretKey, boolean, ChaChaSpec, SecureRandom) - Constructor for class zeroecho.core.alg.chacha.ChaChaCipherContext

Creates a ChaCha20 context.

ChaChaDataContentBuilder - Class in zeroecho.sdk.builders.alg

ChaChaDataContentBuilder builds streaming ChaCha20 and ChaCha20-Poly1305 pipelines that encrypt or decrypt as an InputStream is consumed.

ChaChaHeaderCodec - Class in zeroecho.core.alg.chacha

ChaCha20 streaming header codec

ChaChaHeaderCodec() - Constructor for class zeroecho.core.alg.chacha.ChaChaHeaderCodec

Creates a stateless ChaCha20 stream-header codec.

ChaChaKeyGenSpec - Record Class in zeroecho.core.alg.chacha

ChaCha20 key generation specification

ChaChaKeyGenSpec(int) - Constructor for record class zeroecho.core.alg.chacha.ChaChaKeyGenSpec

Constructs a new ChaCha20 key generation spec.

ChaChaKeyImportSpec - Class in zeroecho.core.alg.chacha

ChaCha20 key import specification

ChaChaSpec - Class in zeroecho.core.alg.chacha

ChaCha20 stream cipher specification

ChaChaSpec.Builder - Class in zeroecho.core.alg.chacha

Fluent builder for ChaChaSpec.

chainDer() - Method in record class zeroecho.pkix.ct.PreCertificateResult

Returns an immutable list of independent copies of the issuer chain DER.

Chaining model - Section in package zeroecho.sdk.builders

Chaining model - Section in package zeroecho.sdk.builders.core

challengePassword() - Method in record class zeroecho.pkix.csr.CsrAttribute

Decodes one standard PKCS#9 challengePassword DirectoryString, bounded to 255 characters.

chars() - Method in class zeroecho.sdk.content.builtin.SecretPassword

Returns an owned copy of the password characters.

ciphertext() - Method in class zeroecho.core.context.KemContext.KemResult

Returns the encapsulation ciphertext.

CipherTransformInputStreamBuilder - Class in zeroecho.core.io

Builder for chunk-transforming InputStreams backed by a Cipher.

classicAgreement() - Method in class zeroecho.sdk.builders.HybridKexBuilder

Selects the classic leg in HybridKexBuilder.ClassicMode.CLASSIC_AGREEMENT mode.

classical(int) - Static method in record class zeroecho.core.SecurityLevel

Creates a classical-only security level with no NIST PQC category.

classicalBits() - Method in record class zeroecho.core.SecurityLevel

Returns the value of the classicalBits record component.

Classic McEliece (CMCE) algorithm adapter - Section in class zeroecho.core.alg.cmce.CmceAlgorithm

Classic McEliece (CMCE) KEM context - Section in class zeroecho.core.alg.cmce.CmceKemContext

Classic McEliece (CMCE) private key specification - Section in class zeroecho.core.alg.cmce.CmcePrivateKeySpec

Classic McEliece (CMCE) public key specification - Section in class zeroecho.core.alg.cmce.CmcePublicKeySpec

classicPairMessage() - Method in class zeroecho.sdk.builders.HybridKexBuilder

Selects the classic leg in HybridKexBuilder.ClassicMode.PAIR_MESSAGE mode.

classicSigId() - Method in record class zeroecho.sdk.hybrid.signature.HybridSignatureProfile

Returns the value of the classicSigId record component.

classicSpec() - Method in record class zeroecho.sdk.hybrid.signature.HybridSignatureProfile

Returns the value of the classicSpec record component.

ClasspathJulConfig - Class in zeroecho.logging

Configures java.util.logging (JUL) from a jul.properties resource on the classpath.

ClasspathJulConfig() - Constructor for class zeroecho.logging.ClasspathJulConfig

Loads jul.properties from the classpath and applies it as the current LogManager configuration.

CLIENT_AUTH - Static variable in record class zeroecho.pkix.ExtendedKeyUsage

id-kp-clientAuth.

close() - Method in class zeroecho.core.alg.aes.AesCipherContext

close() - Method in class zeroecho.core.alg.bike.BikeKemContext

Releases resources associated with this context.

close() - Method in class zeroecho.core.alg.chacha.ChaChaCipherContext

Releases context resources.

close() - Method in class zeroecho.core.alg.cmce.CmceKemContext

Releases resources held by this context.

close() - Method in class zeroecho.core.alg.common.agreement.GenericJcaAgreementContext

Closes this context.

close() - Method in class zeroecho.core.alg.common.agreement.GenericJcaMessageAgreementContext

Completes the context's implementation-specific cleanup.

close() - Method in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter

Closes the underlying KEM context if it is closeable.

close() - Method in class zeroecho.core.alg.common.eddsa.CommonEdDSASignatureContext

Releases resources associated with this context.

close() - Method in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Closes the active wrapped stream, if any, suppressing IOException.

close() - Method in class zeroecho.core.alg.digest.JcaDigestContext

Closes the active digest stream if one was opened.

close() - Method in class zeroecho.core.alg.elgamal.ElgamalCipherContext

Closes this context.

close() - Method in class zeroecho.core.alg.frodo.FrodoKemContext

Closes the context and releases any held resources.

close() - Method in class zeroecho.core.alg.hmac.HmacMacContext

Closes the active wrapped stream, if any.

close() - Method in class zeroecho.core.alg.hqc.HqcKemContext

Closes this context.

close() - Method in class zeroecho.core.alg.kyber.KyberKemContext

Closes this context.

close() - Method in class zeroecho.core.alg.lms.LmsSignatureContext

close() - Method in class zeroecho.core.alg.mldsa.MldsaSignatureContext

Closes this context and releases any underlying resources.

close() - Method in class zeroecho.core.alg.ntru.NtruKemContext

Closes this context.

close() - Method in class zeroecho.core.alg.ntruprime.NtrulPrimeKemContext

Closes this context and releases any resources.

close() - Method in class zeroecho.core.alg.ntruprime.SntruPrimeKemContext

Closes this context and releases any resources.

close() - Method in class zeroecho.core.alg.rsa.RsaCipherContext

Closes the context and releases resources.

close() - Method in class zeroecho.core.alg.rsa.RsaSignatureContext

Closes the context and its active stream if present.

close() - Method in class zeroecho.core.alg.saber.SaberKemContext

Closes the context and releases resources.

close() - Method in class zeroecho.core.alg.slhdsa.SlhDsaSignatureContext

Closes this context and releases any underlying resources.

close() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Closes this context and releases underlying resources.

close() - Method in class zeroecho.core.alg.xmss.XmssSignatureContext

close() - Method in class zeroecho.core.alg.xwing.XWingKemContext

close() - Method in interface zeroecho.core.context.CryptoContext

Completes the context's implementation-specific cleanup.

close() - Method in class zeroecho.core.io.AbstractPassthroughInputStream

Drains remaining data (including any trailer) and then closes the upstream stream.

close() - Method in class zeroecho.core.io.ContentSlice

close() - Method in class zeroecho.core.io.ImmutableByteContent

close() - Method in interface zeroecho.core.io.OneShotContent

Releases the source.

close() - Method in interface zeroecho.core.io.RepeatableContent

Releases implementation-owned resources.

close() - Method in class zeroecho.core.io.TailStrippingInputStream

Closes this stream and the underlying upstream stream.

close() - Method in class zeroecho.core.storage.KeyringPassword

Destroys the password.

close() - Method in class zeroecho.core.storage.KeyringStore

Closes the keyring, clearing its master key.

close() - Method in class zeroecho.core.storage.LocalStatefulSigningAuthority

Releases exclusive authority ownership after admitted signing completes.

close() - Method in class zeroecho.sdk.guard.EncCtxRecipient

Closes the owned encryption context.

close() - Method in class zeroecho.sdk.guard.KemCtxRecipient

Closes the owned KEM context.

close() - Method in interface zeroecho.sdk.guard.MultiRecipientContent

Releases all recipient resources still owned by this content.

close() - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Releases recipient and opener resources not transferred by MultiRecipientDataSourceBuilder.build(boolean).

close() - Method in class zeroecho.sdk.guard.PasswordRecipient

Closes this recipient by destroying its retained password copy.

close() - Method in interface zeroecho.sdk.guard.RecipientOpener

Releases opener-owned resources that were not consumed.

close() - Method in class zeroecho.sdk.hybrid.kex.HybridKexContext

Closes both underlying contexts.

close() - Method in class zeroecho.sdk.hybrid.kex.HybridKexExporter

Closes this exporter by destroying its retained secret material.

close() - Method in class zeroecho.sdk.io.SignatureTrailerInputStream

Closes the stream and the associated SignatureContext.

close() - Method in class zeroecho.sdk.util.OutputToInputStreamAdapter

CmceAlgorithm - Class in zeroecho.core.alg.cmce

Classic McEliece (CMCE) algorithm adapter

CmceAlgorithm() - Constructor for class zeroecho.core.alg.cmce.CmceAlgorithm

Constructs and registers CMCE capabilities and key builders.

CmceKemContext - Class in zeroecho.core.alg.cmce

Classic McEliece (CMCE) KEM context

CmceKemContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.cmce.CmceKemContext

Creates a decapsulation context bound to a private key.

CmceKemContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.cmce.CmceKemContext

Creates an encapsulation context bound to a recipient public key.

CMCE key generation specification - Section in class zeroecho.core.alg.cmce.CmceKeyGenSpec

CmceKeyGenSpec - Class in zeroecho.core.alg.cmce

CMCE key generation specification

CmceKeyGenSpec.Variant - Enum Class in zeroecho.core.alg.cmce

Enumeration of supported CMCE parameter set variants.

CmcePrivateKeySpec - Class in zeroecho.core.alg.cmce

Classic McEliece (CMCE) private key specification

CmcePrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.cmce.CmcePrivateKeySpec

Creates a new specification from a PKCS#8-encoded CMCE private key.

CmcePublicKeySpec - Class in zeroecho.core.alg.cmce

Classic McEliece (CMCE) public key specification

CmcePublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.cmce.CmcePublicKeySpec

Creates a new specification from an X.509-encoded CMCE public key.

CMD_SCRIPT - Enum constant in enum class zeroecho.sdk.content.api.ExportableDataContent.ExportMode

CMD script mode returns a Windows batch file containing encoded content that can be decoded and used locally.

CmpPbmPolicy - Record Class in zeroecho.pkix.cmp

Immutable PBM work and algorithm limits, checked before iterative derivation.

CmpPbmPolicy(int, int, int, int, Set, Set) - Constructor for record class zeroecho.pkix.cmp.CmpPbmPolicy

Validates and snapshots the bounded policy.

CmpProtectedMessage - Class in zeroecho.pkix.cmp

Immutable bounded CMP request with exact canonical protected bytes.

CmpProtectedMessage.Response - Class in zeroecho.pkix.cmp

Immutable unsigned response bound to one verified request.

CmpProtectedMessage.Verified - Class in zeroecho.pkix.cmp

Immutable proof token constructed only after exact message protection verification.

code() - Method in exception class zeroecho.core.storage.KeyringException

Returns the stable error code.

code() - Method in exception class zeroecho.core.storage.KeyringSignatureExecutor.Failure

Returns the stable failure category.

code() - Method in enum class zeroecho.pkix.crl.CrlReason

Returns the DER enumerated reason code.

CODE_SIGNING - Static variable in record class zeroecho.pkix.ExtendedKeyUsage

id-kp-codeSigning.

Codec<T,R> - Interface in zeroecho.core.marshal

General-purpose bidirectional codec between a domain type T and a serialized representation R.

Columns - Section in class zeroecho.core.util.GenerateCryptoCatalogTable

CommonEdDSASignatureContext - Class in zeroecho.core.alg.common.eddsa

Base class for EdDSA signature contexts that adapts a JCA Signature for streaming sign and verify.

CommonEdDSASignatureContext(CryptoAlgorithm, PrivateKey, String, int) - Constructor for class zeroecho.core.alg.common.eddsa.CommonEdDSASignatureContext

Constructs a signing context for the given EdDSA algorithm.

CommonEdDSASignatureContext(CryptoAlgorithm, PublicKey, String, int) - Constructor for class zeroecho.core.alg.common.eddsa.CommonEdDSASignatureContext

Constructs a verification context for the given EdDSA algorithm.

CompactOneLineFormatter - Class in zeroecho.logging

A compact single-line Formatter for JUL log records.

CompactOneLineFormatter() - Constructor for class zeroecho.logging.CompactOneLineFormatter

Creates a formatter using the system time zone for timestamps.

compatibilityAliases() - Static method in class zeroecho.core.alg.BootstrapAlgorithmIdentities

Returns the immutable finite built-in compatibility aliases.

Components - Section in package zeroecho.core.alg.aes

Components - Section in package zeroecho.core.alg.bike

Components - Section in package zeroecho.core.alg.chacha

Components - Section in package zeroecho.core.alg.cmce

Components - Section in package zeroecho.core.alg.common.agreement

Components - Section in package zeroecho.core.alg.common.eddsa

Components - Section in package zeroecho.core.alg.common.sig

Components - Section in package zeroecho.core.alg.dh

Components - Section in package zeroecho.core.alg.digest

Components - Section in package zeroecho.core.alg.ecdh

Components - Section in package zeroecho.core.alg.ecdsa

Components - Section in package zeroecho.core.alg.ed25519

Components - Section in package zeroecho.core.alg.ed448

Components - Section in package zeroecho.core.alg.elgamal

Components - Section in package zeroecho.core.alg.frodo

Components - Section in package zeroecho.core.alg.hmac

Components - Section in package zeroecho.core.alg.hqc

Components - Section in package zeroecho.core.alg.kyber

Components - Section in package zeroecho.core.alg.ntru

Components - Section in package zeroecho.core.alg.ntruprime

Components - Section in package zeroecho.core.alg.rsa

Components - Section in package zeroecho.core.alg.saber

Components - Section in package zeroecho.core.alg.sphincsplus

Components - Section in package zeroecho.core.alg.xdh

Components - Section in package zeroecho.logging

Components - Section in package zeroecho.sdk.content.builtin

computeCertId(X509Certificate, BigInteger, String) - Method in class zeroecho.pkix.bc.BcPkixProvider

computeCertId(X509Certificate, BigInteger, String) - Static method in class zeroecho.pkix.Pkix

Computes an OCSP CertId for a certificate under a given issuer.

computeCertId(X509Certificate, BigInteger, String) - Method in interface zeroecho.pkix.spi.PkixProvider

Computes an OCSP CertId for a certificate under a given issuer.

Concept - Section in package zeroecho.sdk.hybrid.signature

Concrete(String, String, SecurityLevel, S) - Constructor for record class zeroecho.core.ParameterSetDescriptor.Concrete

Validates a concrete descriptor.

Configuration - Section in class zeroecho.core.audit.JulAuditListenerStd

confirmationAccepted() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns whether a certConf accepts rather than rejects the certificate.

confirmationHash() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns a defensive confirmation hash, when this is certConf.

confirmationHashAlgorithm() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns the explicit RFC 9480 confirmation hash name, present only in version-three certConf.

confirmed() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage.Verified

Creates pkiConf after the server has checked and durably recorded certConf.

ConfluxKeys - Class in zeroecho.core

Shared typed keys for ephemeral cryptographic parameters.

constraints() - Method in record class zeroecho.core.ParameterSetDescriptor.Template

Returns immutable ordered constraints.

Constraints - Section in class zeroecho.core.alg.hmac.HmacKeyGenSpec

Construction - Section in class zeroecho.core.alg.chacha.ChaChaKeyImportSpec

Construction - Section in class zeroecho.core.alg.chacha.ChaChaSpec

Construction - Section in class zeroecho.core.alg.digest.DigestSpec

Construction - Section in class zeroecho.core.alg.rsa.RsaEncSpec

Construction - Section in class zeroecho.core.alg.rsa.RsaSigSpec

Construction - Section in class zeroecho.sdk.builders.TagTrailerDataContentBuilder

Construction - Section in class zeroecho.sdk.hybrid.kex.HybridKexExporter

Construction - Section in record class zeroecho.core.SecurityLevel

Construction and safety - Section in package zeroecho.core.alg

contains(String) - Method in class zeroecho.core.storage.KeyringStore

Reports whether an alias is present.

ContentDigests - Class in zeroecho.core.io

Streaming integrity helpers for repeatable content.

contentId() - Method in class zeroecho.core.io.ContentSlice

contentId() - Method in class zeroecho.core.io.ImmutableByteContent

contentId() - Method in interface zeroecho.core.io.RepeatableContent

Returns a stable, non-secret identifier for integrity and durable provenance.

Contents - Section in class zeroecho.core.alg.elgamal.ElgamalParamSpec

Contents - Section in class zeroecho.core.alg.elgamal.ElgamalPrivateKeySpec

Contents - Section in class zeroecho.core.alg.elgamal.ElgamalPublicKeySpec

ContentSigner - Interface in zeroecho.pkix.sign

A streaming producer of a signature over to-be-signed content, used by the ZeroEcho PKIX builders to sign certificates, CRLs, CSRs, and OCSP responses.

ContentSlice - Class in zeroecho.core.io

Immutable repeatable bounded view over another repeatable content source.

ContentSlice(RepeatableContent, long, long) - Constructor for class zeroecho.core.io.ContentSlice

Creates a repeatable slice.

contentStream() - Method in interface zeroecho.pkix.sign.ContentSigner

Returns the stream into which the to-be-signed bytes are written.

contentStream() - Method in interface zeroecho.pkix.sign.ContentVerifier

Returns the stream into which the to-be-signed bytes are written.

ContentVerifier - Interface in zeroecho.pkix.sign

A streaming verifier of a signature over to-be-signed content.

context() - Method in class zeroecho.core.alg.aes.AesCipherContext

Returns the currently set Conflux context (possibly null).

context() - Method in class zeroecho.core.alg.chacha.ChaChaCipherContext

Returns the context currently in use.

context() - Method in interface zeroecho.core.spi.ContextAware

Returns the context currently in use.

context(CtxInterface) - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Provides a Conflux session context for exchanging IV/AAD/tagBits and enabling header I/O.

context(CtxInterface) - Method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Sets an optional runtime context used to read or write parameters such as nonce, AAD, or counter.

context(CtxInterface) - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Sets an optional runtime context used to store the finalized digest when requested.

contextAlgorithmId() - Method in class zeroecho.core.alg.common.sig.SignatureInteropProfile

Returns the ZeroEcho context algorithm identifier.

Context and headers - Section in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

ContextAware - Interface in zeroecho.core.spi

Optional service-provider interface for cryptographic primitives that need to share or persist per-session parameters using a CtxInterface.

ContextFactoryKS<C,K,S> - Interface in zeroecho.core.spi

Creates a cryptographic context from a key and a context specification.

Context integration - Section in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Context kinds - Section in package zeroecho.core.context

contextSpec() - Method in class zeroecho.core.alg.common.sig.SignatureInteropProfile

Returns the explicit ZeroEcho context specification.

ContextSpec - Interface in zeroecho.core.spec

Marker interface for per-operation parameters.

contextType() - Method in record class zeroecho.core.Capability

Returns the value of the contextType record component.

Convenience factory - Section in class zeroecho.core.alg.chacha.ChaChaSpec

Conventions - Section in class zeroecho.core.marshal.PairSeqCodec

Conventions - Section in package zeroecho.core.marshal

copy() - Method in class zeroecho.core.storage.KeyringPassword

Returns a receiver-owned password copy.

copyBytes() - Method in class zeroecho.core.io.ImmutableByteContent

Returns a defensive copy for an explicitly bounded provider adapter.

core(Supplier) - Static method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder

Core mode: wraps an engine factory.

core(TagEngine) - Static method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder

Core mode: wraps a fixed engine instance.

Counter handling - Section in class zeroecho.core.alg.chacha.ChaChaCipherContext

create(Path) - Static method in class zeroecho.core.storage.LocalStatefulSigningAuthority

Creates an empty authority in a new owner-only directory.

create(Path, KeyringPassword) - Static method in class zeroecho.core.storage.KeyringStore

Creates a new encrypted keyring with the standard protection policy.

create(Path, KeyringPassword, KeyringProtection) - Static method in class zeroecho.core.storage.KeyringStore

Creates a new encrypted keyring.

create(Key, boolean) - Method in interface zeroecho.core.alg.common.sig.GenericJcaSignatureContext.EngineFactory

Creates and initializes a Signature for the given key and mode.

createContext(String, KeyUsage, K) - Method in class zeroecho.sdk.ZeroEchoSession

Creates a context using the selected algorithm's default specification.

createContext(String, KeyUsage, K, S) - Method in class zeroecho.sdk.ZeroEchoSession

Creates a context after applying this session's policy and audit configuration.

createContext(K, S) - Method in interface zeroecho.core.spi.ContextFactoryKS

Creates a context bound to the supplied key and specification.

createContext(KeyUsage, K, S) - Method in class zeroecho.core.CryptoAlgorithm

Creates a new CryptoContext for the given role, key, and optional spec.

CREATION_ITERATIONS - Static variable in record class zeroecho.core.storage.KeyringProtection

Iterations used when a new keyring is created.

critical() - Method in record class zeroecho.pkix.CertificateExtension

Returns the value of the critical record component.

CRITICAL: Statefulness - Section in class zeroecho.core.alg.lms.LmsAlgorithm

CRITICAL: Statefulness - Section in class zeroecho.core.alg.xmss.XmssAlgorithm

CRL_SIGN - Enum constant in enum class zeroecho.pkix.KeyUsage

cRLSign (bit 6).

crlBuilder() - Method in class zeroecho.pkix.bc.BcPkixProvider

crlBuilder() - Static method in class zeroecho.pkix.Pkix

Creates a CRL builder.

crlBuilder() - Method in interface zeroecho.pkix.spi.PkixProvider

Creates a new CRL builder.

CrlBuilder - Interface in zeroecho.pkix.crl

A fluent builder for a signed X.509 CRL that yields a standard X509CRL.

CrlEntry - Record Class in zeroecho.pkix.crl

A single revoked-certificate entry in a CRL.

CrlEntry(BigInteger, Instant, CrlReason) - Constructor for record class zeroecho.pkix.crl.CrlEntry

Canonicalizing constructor.

crlNumber(BigInteger) - Method in interface zeroecho.pkix.crl.CrlBuilder

Adds the CRLNumber extension.

CrlReason - Enum Class in zeroecho.pkix.crl

The X.509 CRL reasonCode values (RFC 5280, 5.3.1), each carrying its DER enumerated code.

CrmfRequest - Class in zeroecho.pkix.cmp

Immutable structural projection of one canonical CRMF CertReqMsg.

CrmfRequest.CertificateReference - Record Class in zeroecho.pkix.cmp

Immutable structural predecessor reference; possession and authority are not asserted.

CryptoAlgorithm - Class in zeroecho.core

Abstract base class for all cryptographic algorithm definitions in ZeroEcho.

CryptoAlgorithm(String, String) - Constructor for class zeroecho.core.CryptoAlgorithm

Create a new algorithm with default priority and provider.

CryptoAlgorithm(String, String, int, String) - Constructor for class zeroecho.core.CryptoAlgorithm

Create a new algorithm with explicit metadata.

CryptoAlgorithm(String, String, String) - Constructor for class zeroecho.core.CryptoAlgorithm

Create a new algorithm with default priority and a named provider.

CryptoAlgorithms - Class in zeroecho.core

Immutable registry of CryptoAlgorithm providers.

CryptoCatalog - Class in zeroecho.core

Immutable snapshot of discovered CryptoAlgorithm implementations, with utilities to validate and serialize the catalog.

CryptoContext - Interface in zeroecho.core.context

Common interface for all cryptographic operation contexts.

CryptoContext contract - Section in class zeroecho.core.alg.hmac.HmacMacContext

CryptoContext identity - Section in class zeroecho.sdk.hybrid.kex.HybridKexContext

CryptoPolicy<S,K> - Interface in zeroecho.core.policy

A strategy interface for validating cryptographic keys, usages, and specifications before contexts are created.

CsrAttribute - Record Class in zeroecho.pkix.csr

A PKCS#10 attribute: an OID and one or more DER-encoded values.

CsrAttribute(String, List) - Constructor for record class zeroecho.pkix.csr.CsrAttribute

Canonicalizing constructor.

ctr(SymmetricHeaderCodec) - Static method in class zeroecho.core.alg.aes.AesSpec

Creates a CTR specification with no padding and the provided header.

CTR - Enum constant in enum class zeroecho.core.alg.aes.AesSpec.Mode

Counter mode (CTR).

ctx - Variable in class zeroecho.core.alg.chacha.ChaChaCipherContext

Optional per-operation context for exchanging headers, IVs, etc.

cursor() - Method in class zeroecho.core.marshal.PairSeq

Returns a forward-only cursor for iterating the pairs.

Cursor() - Constructor for class zeroecho.core.marshal.PairSeq.Cursor

Creates a cursor positioned before the first pair in the enclosing sequence.

curveName() - Method in enum class zeroecho.core.alg.ecdh.EcdhCurveSpec

Returns the JCA-standardized name of the elliptic curve.

curveName() - Method in enum class zeroecho.core.alg.ecdsa.EcdsaCurveSpec

Returns the canonical JCA curve name.

Curves - Section in enum class zeroecho.core.alg.ecdh.EcdhCurveSpec

Curves - Section in enum class zeroecho.core.alg.ecdsa.EcdsaCurveSpec

D

DATA_ENCIPHERMENT - Enum constant in enum class zeroecho.pkix.KeyUsage

dataEncipherment (bit 3).

DataContent - Interface in zeroecho.sdk.content.api

Represents a generic unit of data content.

DataContentBuilder<T> - Interface in zeroecho.sdk.builders.core

A builder interface for constructing instances of DataContent.

DataContentChainBuilder - Interface in zeroecho.sdk.builders.core

A builder interface for constructing a chain of DataContent components, where each content unit passes its output as the input to the next one.

DataContentChainBuilder.DefaultDataContentChainBuilder - Class in zeroecho.sdk.builders.core

Default implementation of DataContentChainBuilder.

decapsulate(byte[]) - Method in class zeroecho.core.alg.bike.BikeKemContext

Recovers the shared secret from a ciphertext using the holder's private key.

decapsulate(byte[]) - Method in class zeroecho.core.alg.cmce.CmceKemContext

Extracts the shared secret from the given ciphertext using the stored private key.

decapsulate(byte[]) - Method in class zeroecho.core.alg.frodo.FrodoKemContext

Decapsulates a ciphertext to recover the shared secret.

decapsulate(byte[]) - Method in class zeroecho.core.alg.hqc.HqcKemContext

Performs HQC decapsulation, recovering the shared secret from a ciphertext.

decapsulate(byte[]) - Method in class zeroecho.core.alg.kyber.KyberKemContext

Performs Kyber decapsulation using the bound private key and returns the shared secret.

decapsulate(byte[]) - Method in class zeroecho.core.alg.ntru.NtruKemContext

Performs NTRU key decapsulation using the bound private key.

decapsulate(byte[]) - Method in class zeroecho.core.alg.ntruprime.NtrulPrimeKemContext

Derives the shared secret from the provided ciphertext using the holder private key.

decapsulate(byte[]) - Method in class zeroecho.core.alg.ntruprime.SntruPrimeKemContext

Derives the shared secret from the provided ciphertext using the holder private key.

decapsulate(byte[]) - Method in class zeroecho.core.alg.saber.SaberKemContext

Performs SABER decapsulation and returns the shared secret derived from ciphertext.

decapsulate(byte[]) - Method in class zeroecho.core.alg.xwing.XWingKemContext

Decapsulates an X-Wing ciphertext using the bound private key.

decapsulate(byte[]) - Method in interface zeroecho.core.context.KemContext

Performs decapsulation of the given ciphertext to recover the shared secret.

DECAPSULATE - Enum constant in enum class zeroecho.core.KeyUsage

Decapsulate a shared secret in a KEM flow.

DECIPHER_ONLY - Enum constant in enum class zeroecho.pkix.KeyUsage

decipherOnly (bit 8).

Declared capabilities - Section in class zeroecho.core.alg.elgamal.ElgamalAlgorithm

Declared capabilities - Section in class zeroecho.core.alg.hqc.HqcAlgorithm

Declared capabilities - Section in class zeroecho.core.alg.kyber.KyberAlgorithm

decode(byte[]) - Method in interface zeroecho.core.spec.AlgorithmIdentityCodec

Decodes complete canonical bytes.

decoy() - Method in class zeroecho.sdk.guard.EncCtxRecipient

Returns whether this recipient entry is marked as a decoy.

decoy() - Method in class zeroecho.sdk.guard.KemCtxRecipient

Returns whether this recipient entry is marked as a decoy.

decoy() - Method in class zeroecho.sdk.guard.PasswordRecipient

Returns whether this recipient entry is marked as a decoy.

decoy() - Method in interface zeroecho.sdk.guard.Recipient

Indicates whether this recipient entry is a decoy (fake recipient).

decrypt() - Static method in interface zeroecho.sdk.builders.core.DataContentChainBuilder

Creates a new DataContentChainBuilder configured for decryption mode.

DECRYPT - Enum constant in enum class zeroecho.core.KeyUsage

Decrypt data that was encrypted under the matching key/parameters.

decryptRequest(ScepCodec.VerifiedRequest, X509Certificate, PrivateKey) - Static method in class zeroecho.pkix.scep.ScepCodec

Decrypts an already verified request using one exact provisioned RA recipient.

DEFAULT - Enum constant in enum class zeroecho.core.alg.lms.LmsKeyGenSpec

Default LMS parameters: lms_sha256_n32_h5 / sha256_n32_w8.

DEFAULT - Enum constant in enum class zeroecho.core.alg.xmss.XmssKeyGenSpec

Default XMSS parameters: SHA2_10_256 (SHA-256, height 10).

DEFAULT - Enum constant in enum class zeroecho.core.alg.xwing.XWingKeyGenSpec

Singleton spec.

DEFAULT_BUF_SIZE - Static variable in class zeroecho.sdk.util.OutputToInputStreamAdapter

Default buffer size in bytes.

DEFAULT_MAX_READ_SIZE - Static variable in interface zeroecho.sdk.content.api.DataContent

Default maximum number of bytes that DataContent.toBytes() will read.

Default configuration - Section in class zeroecho.core.alg.ecdsa.EcdsaAlgorithm

Default parameters - Section in class zeroecho.core.alg.lms.LmsAlgorithm

defaultProfile(int) - Static method in record class zeroecho.sdk.hybrid.kex.HybridKexProfile

Constructs a profile with a default HKDF info label.

Defaults - Section in class zeroecho.core.alg.chacha.ChaCha20Poly1305Algorithm

Defaults - Section in class zeroecho.core.alg.chacha.ChaChaAlgorithm

Defaults - Section in class zeroecho.core.alg.hmac.HmacAlgorithm

Defaults - Section in class zeroecho.core.alg.hmac.HmacKeyGenSpec

Defaults - Section in class zeroecho.core.alg.hmac.HmacSpec

Defaults - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec

defaultSpec() - Static method in class zeroecho.core.alg.ed25519.Ed25519KeyGenSpec

Returns the canonical, shared default spec instance for Ed25519 key generation.

defaultSpec() - Static method in class zeroecho.core.alg.ed448.Ed448KeyGenSpec

Returns the shared default specification instance for Ed448 key generation.

defaultSpec() - Static method in class zeroecho.core.alg.mldsa.MldsaKeyGenSpec

Returns the default ML-DSA key generation spec.

defaultSpec() - Static method in class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec

Returns the default SLH-DSA key generation spec.

defaultSpec() - Static method in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec

Returns the default SPHINCS+ key generation spec.

defaultSpec() - Method in record class zeroecho.core.Capability

Returns the value of the defaultSpec record component.

defaultSpec() - Method in record class zeroecho.core.KeyOperationInfo

Returns the value of the defaultSpec record component.

defaultValue() - Method in record class zeroecho.core.ParameterConstraint

Returns the value of the defaultValue record component.

Delegation - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

deltaCrlIndicator(BigInteger) - Method in interface zeroecho.pkix.crl.CrlBuilder

Marks this as a delta CRL by adding the DeltaCRLIndicator extension.

DER_NULL - Enum constant in enum class zeroecho.pkix.AlgorithmIdentifier.ParameterForm

Parameters field present and equal to DER NULL.

deriveAad(int) - Method in class zeroecho.sdk.hybrid.derived.HybridDerived

Requests deterministic derivation of AAD bytes from the exporter.

derivedKeyBytes(int) - Method in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Sets the number of derived key bytes to feed into the selected symmetric builder.

deriveSecret() - Method in class zeroecho.core.alg.common.agreement.GenericJcaAgreementContext

Computes the raw shared secret using the configured local private key and the previously assigned peer public key.

deriveSecret() - Method in class zeroecho.core.alg.common.agreement.GenericJcaMessageAgreementContext

Performs the key agreement and returns the derived raw shared secret.

deriveSecret() - Method in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter

Derives the shared secret from this exchange.

deriveSecret() - Method in interface zeroecho.core.context.AgreementContext

Performs the key agreement and returns the derived raw shared secret.

deriveSecret() - Method in class zeroecho.sdk.hybrid.kex.HybridKexContext

Derives the final hybrid shared secret (OKM) using HKDF-SHA256.

derNull(String) - Static method in class zeroecho.pkix.AlgorithmIdentifier

Creates an identifier whose parameters field is DER NULL.

derValue() - Method in record class zeroecho.pkix.CertificateExtension

Returns the encoded extension value without exposing the record's internal array.

derValue() - Method in record class zeroecho.pkix.GeneralName.OtherName

Returns the encoded value without exposing the record's internal array.

derValues() - Method in record class zeroecho.pkix.csr.CsrAttribute

Returns the encoded attribute values without exposing their internal arrays.

Describable - Interface in zeroecho.core.annotation

Defines a contract for objects that can provide a concise, human-readable description.

description() - Method in record class zeroecho.core.alg.aes.AesKeyGenSpec

Provides a short textual description of the key size.

description() - Method in class zeroecho.core.alg.aes.AesSpec

Produces a compact human‑readable description of this specification, such as "AES-GCM(tag=128)" or "AES-CBC/PKCS7Padding".

description() - Method in class zeroecho.core.alg.bike.BikeKeyGenSpec

Returns a human-readable description of this spec.

description() - Method in class zeroecho.core.alg.chacha.ChaCha20Poly1305Spec

Human-readable description of this spec.

description() - Method in record class zeroecho.core.alg.chacha.ChaChaKeyGenSpec

Returns a short human-readable description of this spec.

description() - Method in class zeroecho.core.alg.chacha.ChaChaSpec

Human-readable description of this spec.

description() - Method in class zeroecho.core.alg.cmce.CmceKeyGenSpec

Returns a human-readable description of this specification.

description() - Method in class zeroecho.core.alg.dh.DhSpec

Returns a short, human-readable description of this object.

description() - Method in class zeroecho.core.alg.digest.DigestSpec

Returns a human-readable description of this specification.

description() - Method in enum class zeroecho.core.alg.ecdsa.EcdsaCurveSpec

Returns a short, human-readable description of this object.

description() - Method in class zeroecho.core.alg.elgamal.ElgamalEncSpec

Human-readable description of this spec.

description() - Method in class zeroecho.core.alg.elgamal.ElgamalKeyGenSpec

Human-readable description of this spec.

description() - Method in class zeroecho.core.alg.elgamal.ElgamalParamSpec

Human-readable description of this spec.

description() - Method in class zeroecho.core.alg.frodo.FrodoKeyGenSpec

Human-readable description of this spec.

description() - Method in class zeroecho.core.alg.hmac.HmacKeyGenSpec

Returns a short description of this key spec.

description() - Method in class zeroecho.core.alg.hmac.HmacKeyImportSpec

Returns a short human-readable description of this spec.

description() - Method in class zeroecho.core.alg.hmac.HmacSpec

Returns a human-readable description of this spec.

description() - Method in class zeroecho.core.alg.hqc.HqcKeyGenSpec

Returns a textual description of this spec.

description() - Method in class zeroecho.core.alg.kyber.KyberKeyGenSpec

Returns a human-readable description of this spec.

description() - Method in class zeroecho.core.alg.ntru.NtruKeyGenSpec

Returns a short, human-readable description of the selected parameter set.

description() - Method in class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec

Returns a textual description of this specification.

description() - Method in class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec

Returns a textual description of this specification.

description() - Method in class zeroecho.core.alg.rsa.RsaEncSpec

Returns a short human-readable description of this spec.

description() - Method in class zeroecho.core.alg.rsa.RsaKeyGenSpec

Returns a short description string.

description() - Method in class zeroecho.core.alg.rsa.RsaSigSpec

Returns a short human-readable description of this spec.

description() - Method in class zeroecho.core.alg.saber.SaberKeyGenSpec

Returns a textual description of this spec.

description() - Method in enum class zeroecho.core.alg.xdh.XdhSpec

Returns a short, human-readable description of this object.

description() - Method in interface zeroecho.core.annotation.Describable

Returns a short, human-readable description of this object.

description() - Method in record class zeroecho.core.TemplateParameter

Returns the value of the description record component.

description() - Method in class zeroecho.sdk.guard.UnlockMaterial.Password

Returns a short, human-readable description of this object.

description() - Method in record class zeroecho.sdk.guard.UnlockMaterial.Private

Returns a short, human-readable description of this object.

Design - Section in class zeroecho.core.alg.aes.AesSpec

Design - Section in class zeroecho.core.alg.dh.DhPrivateKeySpec

Design - Section in class zeroecho.core.alg.dh.DhPublicKeySpec

Design - Section in interface zeroecho.core.context.MessageAgreementContext

Design - Section in interface zeroecho.core.spec.AlgorithmKeySpec

Design and invariants - Section in class zeroecho.core.io.AbstractChunkTransformInputStream

Design and scope - Section in class zeroecho.core.alg.xdh.XdhKeyGenBuilder

Design considerations - Section in annotation interface zeroecho.core.annotation.DisplayName

Design considerations - Section in interface zeroecho.core.annotation.Describable

Design decision: separate unlocking material from openers - Section in package zeroecho.sdk.guard

Design goals - Section in class zeroecho.core.ConfluxKeys

Design goals - Section in class zeroecho.core.alg.xdh.XdhPrivateKeySpec

Design goals - Section in class zeroecho.core.alg.xdh.XdhPublicKeySpec

Design goals - Section in interface zeroecho.core.policy.CryptoPolicy

Design goals - Section in package zeroecho.core.alg.common.sig

Design goals - Section in package zeroecho.logging

Design goals - Section in package zeroecho.sdk.builders.alg

Design goals - Section in package zeroecho.sdk.hybrid.derived

Design guidelines - Section in interface zeroecho.core.spi.ContextAware

Design notes - Section in enum class zeroecho.core.alg.xdh.XdhSpec

Design notes - Section in interface zeroecho.core.marshal.Codec

Design notes - Section in package zeroecho.core.alg.common.eddsa

Design notes - Section in package zeroecho.core.alg.dh

Design notes - Section in package zeroecho.core.alg.digest

Design notes - Section in package zeroecho.core.alg.ecdh

Design notes - Section in package zeroecho.core.alg.ecdsa

Design notes - Section in package zeroecho.core.alg.ed25519

Design notes - Section in package zeroecho.core.alg.ed448

Design notes - Section in package zeroecho.core.alg.elgamal

Design notes - Section in package zeroecho.core.alg.frodo

Design notes - Section in package zeroecho.core.alg.hmac

Design notes - Section in package zeroecho.core.alg.hqc

Design notes - Section in package zeroecho.core.alg.kyber

Design notes - Section in package zeroecho.core.alg.ntru

Design notes - Section in package zeroecho.core.alg.rsa

Design notes - Section in package zeroecho.core.alg.saber

Design notes - Section in package zeroecho.core.alg.sphincsplus

Design notes - Section in package zeroecho.core.io

Design notes - Section in package zeroecho.core.policy

Design notes - Section in package zeroecho.core.spec

Design notes - Section in package zeroecho.core.tag

Design notes - Section in package zeroecho.sdk.io

Design notes - Section in package zeroecho.sdk.util

Design philosophy - Section in package zeroecho.core.annotation

Design principles - Section in Overview

Design principles - Section in package zeroecho.core

destroy() - Method in class zeroecho.core.alg.aes.AesKeyImportSpec

destroy() - Method in class zeroecho.core.alg.bike.BikePrivateKeySpec

destroy() - Method in class zeroecho.core.alg.chacha.ChaChaKeyImportSpec

destroy() - Method in class zeroecho.core.alg.cmce.CmcePrivateKeySpec

destroy() - Method in class zeroecho.core.alg.dh.DhPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.ecdsa.EcdsaPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.ed25519.Ed25519PrivateKeySpec

destroy() - Method in class zeroecho.core.alg.ed448.Ed448PrivateKeySpec

destroy() - Method in class zeroecho.core.alg.elgamal.ElgamalPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.frodo.FrodoPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.hmac.HmacKeyImportSpec

destroy() - Method in class zeroecho.core.alg.hqc.HqcPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.kyber.KyberPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.lms.LmsPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.mldsa.MldsaPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.ntru.NtruPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.ntruprime.NtrulPrimePrivateKeySpec

destroy() - Method in class zeroecho.core.alg.ntruprime.SntruPrimePrivateKeySpec

destroy() - Method in class zeroecho.core.alg.rsa.RsaPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.saber.SaberPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.xdh.XdhPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.xmss.XmssPrivateKeySpec

destroy() - Method in class zeroecho.core.alg.xwing.XWingPrivateKeySpec

destroy() - Method in class zeroecho.core.storage.KeyringPassword

Clears the owned password characters.

destroy() - Method in class zeroecho.core.storage.KeyringStore

Clears the master and nonce-reservation MAC keys and releases filesystem ownership.

destroy() - Method in class zeroecho.sdk.content.builtin.SecretPassword

destroy() - Method in interface zeroecho.sdk.guard.MultiRecipientContent

Destroys all recipient resources still owned by this content.

destroy() - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Destroys recipient secrets still owned by this builder.

destroy() - Method in class zeroecho.sdk.guard.PasswordRecipient

destroy() - Method in class zeroecho.sdk.guard.UnlockMaterial.Password

destroy() - Method in class zeroecho.sdk.hybrid.kex.HybridKexExporter

Overwrites the exporter root secret and salt.

destroyKey(String, String, Key) - Method in class zeroecho.sdk.ZeroEchoSession

Destroys a key and verifies that it entered the destroyed state.

Detached verification - Section in interface zeroecho.core.context.DigestContext

DhAlgorithm - Class in zeroecho.core.alg.dh

Diffie-Hellman algorithm registration for use in the pluggable cryptography catalog.

DhAlgorithm() - Constructor for class zeroecho.core.alg.dh.DhAlgorithm

Creates a Diffie-Hellman algorithm registration with standard defaults.

DhKeyGenBuilder - Class in zeroecho.core.alg.dh

DH key pair builder

DhKeyGenBuilder() - Constructor for class zeroecho.core.alg.dh.DhKeyGenBuilder

Creates a stateless Diffie-Hellman key-pair generator.

DH key pair builder - Section in class zeroecho.core.alg.dh.DhKeyGenBuilder

DhPrivateKeySpec - Class in zeroecho.core.alg.dh

Key specification for a Diffie-Hellman private key encoded in PKCS#8 format.

DhPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.dh.DhPrivateKeySpec

Creates a new specification from a PKCS#8 encoded DH private key.

DhPublicKeySpec - Class in zeroecho.core.alg.dh

Key specification for a Diffie-Hellman public key encoded in X.509 format.

DhPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.dh.DhPublicKeySpec

Creates a new specification from an X.509 encoded DH public key.

DhSpec - Class in zeroecho.core.alg.dh

Diffie-Hellman parameter specification

Diffie-Hellman parameter specification - Section in class zeroecho.core.alg.dh.DhSpec

digest() - Method in record class zeroecho.core.spec.AlgorithmIdentity.DigestParameters

Returns the value of the digest record component.

digest(ZeroEchoSession, DigestSpec) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for an unkeyed digest engine.

DIGEST - Enum constant in enum class zeroecho.core.AlgorithmFamily

Unkeyed hash functions or XOFs.

DIGEST - Enum constant in enum class zeroecho.core.KeyUsage

Compute an unkeyed hash (e.g., SHA-256), pipeline-friendly.

DIGEST - Enum constant in enum class zeroecho.core.spec.AlgorithmIdentity.Kind

Message digest.

DigestContext - Interface in zeroecho.core.context

Context for computing unkeyed message digests and extendable-output functions (XOFs) in streaming pipelines.

DigestDataContentBuilder - Class in zeroecho.sdk.builders.alg

DigestDataContentBuilder constructs streaming pipelines that compute message digests while reading an InputStream.

digestOids() - Method in record class zeroecho.pkix.cmp.CmpPbmPolicy

Returns the value of the digestOids record component.

DigestParameters(AlgorithmIdentity) - Constructor for record class zeroecho.core.spec.AlgorithmIdentity.DigestParameters

Creates digest-qualified parameters.

Digest parameters for SHA-2, SHA-3, and SHAKE - Section in class zeroecho.core.alg.digest.DigestSpec

DigestSpec - Class in zeroecho.core.alg.digest

Digest parameters for SHA-2, SHA-3, and SHAKE

DigestSpec.Algorithm - Enum Class in zeroecho.core.alg.digest

Enumeration of supported digest algorithms.

Digest trailer - Section in interface zeroecho.core.context.DigestContext

DIGITAL_SIGNATURE - Enum constant in enum class zeroecho.pkix.KeyUsage

digitalSignature (bit 0).

DirectoryName(X500Principal) - Constructor for record class zeroecho.pkix.GeneralName.DirectoryName

Canonicalizing constructor.

DirectoryStringType - Enum Class in zeroecho.pkix

The ASN.1 string type used to encode a distinguished-name attribute value.

directSecret() - Method in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Disables HKDF and uses the shared secret directly (or truncated) for the symmetric key.

Discovery and registry - Section in package zeroecho.core

displayName() - Method in class zeroecho.core.CryptoAlgorithm

Returns a human-readable display name for this algorithm.

displayName() - Method in record class zeroecho.core.ParameterSetDescriptor.Concrete

Returns the value of the displayName record component.

displayName() - Method in interface zeroecho.core.ParameterSetDescriptor

Human-readable label for UIs and documentation (e.g., "ML-KEM-768 (NIST Level 3)").

displayName() - Method in record class zeroecho.core.ParameterSetDescriptor.Template

Returns the value of the displayName record component.

displayName() - Method in record class zeroecho.core.TemplateParameter

Returns the value of the displayName record component.

DisplayName - Annotation Interface in zeroecho.core.annotation

Declares a human-friendly display name for a class, specification, or capability.

distinguishedName(List) - Method in class zeroecho.pkix.bc.BcPkixProvider

distinguishedName(List) - Static method in class zeroecho.pkix.Pkix

Builds a byte-exact distinguished name from typed relative distinguished names.

distinguishedName(List) - Method in interface zeroecho.pkix.spi.PkixProvider

Builds a byte-exact distinguished name from typed relative distinguished names.

distinguishedNameString(List) - Method in class zeroecho.pkix.bc.BcPkixProvider

distinguishedNameString(List) - Static method in class zeroecho.pkix.Pkix

Renders a distinguished name, built from typed relative distinguished names, as its canonical string form.

distinguishedNameString(List) - Method in interface zeroecho.pkix.spi.PkixProvider

Renders a distinguished name, built from typed relative distinguished names, as its canonical string form (attribute short names, most-significant first).

DnsName(String) - Constructor for record class zeroecho.pkix.GeneralName.DnsName

Canonicalizing constructor.

doFinal(byte[], int, int, byte[], int) - Method in class zeroecho.core.io.AbstractChunkTransformInputStream

Finalizes the transformation with an optional trailing incomplete chunk.

domainFingerprint() - Method in interface zeroecho.core.spi.AlgorithmExecutionCapability

Returns a deterministic description of the supported typed domain.

E

EC_P256_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

EC P-256 public-key identity.

EC_P384_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

EC P-384 public-key identity.

EC_P521_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

EC P-521 public-key identity.

EcdhAlgorithm - Class in zeroecho.core.alg.ecdh

Elliptic Curve Diffie-Hellman (ECDH) Algorithm

EcdhAlgorithm() - Constructor for class zeroecho.core.alg.ecdh.EcdhAlgorithm

Constructs a new ECDH algorithm definition.

EcdhCurveSpec - Enum Class in zeroecho.core.alg.ecdh

Standardized ECDH Curve Specifications

EcdhKeyGenBuilder - Class in zeroecho.core.alg.ecdh

ECDH Key Pair Generator

EcdhKeyGenBuilder() - Constructor for class zeroecho.core.alg.ecdh.EcdhKeyGenBuilder

Creates a stateless ECDH key-pair generator.

ECDH Key Pair Generator - Section in class zeroecho.core.alg.ecdh.EcdhKeyGenBuilder

ECDSA_DER_EXTERNAL_P1363_INTERNAL - Enum constant in enum class zeroecho.core.alg.common.sig.SignatureInteropProfile.SignatureRepresentation

External bytes use ASN.1 DER ECDSA encoding while ZeroEcho uses fixed-size IEEE P1363 bytes internally.

ECDSA_SHA256 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ECDSA with SHA-256, independent of the EC curve.

ECDSA_SHA256_P256 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

Current ECDSA P-256 signing suite.

ECDSA_SHA384 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ECDSA with SHA-384, independent of the EC curve.

ECDSA_SHA384_P384 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

Current ECDSA P-384 signing suite.

ECDSA_SHA512 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ECDSA with SHA-512, independent of the EC curve.

ECDSA_SHA512_P521 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

Current ECDSA P-521 signing suite.

EcdsaAlgorithm - Class in zeroecho.core.alg.ecdsa

Elliptic Curve Digital Signature Algorithm (ECDSA)

EcdsaAlgorithm() - Constructor for class zeroecho.core.alg.ecdsa.EcdsaAlgorithm

Constructs a new ECDSA algorithm instance and registers its capabilities: KeyUsage.SIGN with PrivateKey and EcdsaCurveSpec KeyUsage.VERIFY with PublicKey and EcdsaCurveSpec Asymmetric key builders for EcdsaCurveSpec, EcdsaPublicKeySpec, and EcdsaPrivateKeySpec

EcdsaCurveSpec - Enum Class in zeroecho.core.alg.ecdsa

ECDSA Curve Specifications

ECDSA Curve Specifications - Section in enum class zeroecho.core.alg.ecdsa.EcdsaCurveSpec

EcdsaKeyGenBuilder - Class in zeroecho.core.alg.ecdsa

ECDSA Key Pair Generator

EcdsaKeyGenBuilder() - Constructor for class zeroecho.core.alg.ecdsa.EcdsaKeyGenBuilder

Creates a stateless ECDSA key-pair generator.

ECDSA Key Pair Generator - Section in class zeroecho.core.alg.ecdsa.EcdsaKeyGenBuilder

ecdsaP256Sign(ZeroEchoSession, PrivateKey) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for an ECDSA P-256 signing engine.

ecdsaP256Verify(ZeroEchoSession, PublicKey) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for an ECDSA P-256 verification engine.

EcdsaPrivateKeyBuilder - Class in zeroecho.core.alg.ecdsa

ECDSA Private Key Builder

EcdsaPrivateKeyBuilder() - Constructor for class zeroecho.core.alg.ecdsa.EcdsaPrivateKeyBuilder

Creates a stateless PKCS#8 EC private-key importer.

ECDSA Private Key Builder - Section in class zeroecho.core.alg.ecdsa.EcdsaPrivateKeyBuilder

EcdsaPrivateKeySpec - Class in zeroecho.core.alg.ecdsa

ECDSA Private Key Specification

EcdsaPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.ecdsa.EcdsaPrivateKeySpec

Creates a new private key specification from a PKCS#8 encoded byte array.

ECDSA Private Key Specification - Section in class zeroecho.core.alg.ecdsa.EcdsaPrivateKeySpec

EcdsaPublicKeyBuilder - Class in zeroecho.core.alg.ecdsa

ECDSA Public Key Builder

EcdsaPublicKeyBuilder() - Constructor for class zeroecho.core.alg.ecdsa.EcdsaPublicKeyBuilder

Creates a stateless X.509 EC public-key importer.

ECDSA Public Key Builder - Section in class zeroecho.core.alg.ecdsa.EcdsaPublicKeyBuilder

EcdsaPublicKeySpec - Class in zeroecho.core.alg.ecdsa

ECDSA Public Key Specification

EcdsaPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.ecdsa.EcdsaPublicKeySpec

Creates a new public key specification from an X.509 encoded byte array.

ECDSA Public Key Specification - Section in class zeroecho.core.alg.ecdsa.EcdsaPublicKeySpec

ecdsaSign(ZeroEchoSession, PrivateKey, EcdsaCurveSpec) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for an ECDSA signing engine with the specified curve.

ecdsaVerify(ZeroEchoSession, PublicKey, EcdsaCurveSpec) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for an ECDSA verification engine with the specified curve.

ED25519_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

Ed25519 public-key identity.

ED25519_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

Ed25519 signature identity.

Ed25519Algorithm - Class in zeroecho.core.alg.ed25519

Ed25519 Digital Signature Algorithm

Ed25519Algorithm() - Constructor for class zeroecho.core.alg.ed25519.Ed25519Algorithm

Constructs the Ed25519 algorithm definition and registers its roles and key builders.

Ed25519 Digital Signature Algorithm - Section in class zeroecho.core.alg.ed25519.Ed25519Algorithm

Ed25519KeyGenBuilder - Class in zeroecho.core.alg.ed25519

Key-pair builder for Ed25519

Ed25519KeyGenBuilder() - Constructor for class zeroecho.core.alg.ed25519.Ed25519KeyGenBuilder

Creates a stateless Ed25519 key-pair generator.

Ed25519KeyGenSpec - Class in zeroecho.core.alg.ed25519

Specification for Ed25519 key-pair generation

Ed25519KeyGenSpec() - Constructor for class zeroecho.core.alg.ed25519.Ed25519KeyGenSpec

Creates the parameter-free Ed25519 key-generation specification.

Ed25519PrivateKeyBuilder - Class in zeroecho.core.alg.ed25519

Private key builder for Ed25519

Ed25519PrivateKeyBuilder() - Constructor for class zeroecho.core.alg.ed25519.Ed25519PrivateKeyBuilder

Creates a stateless Ed25519 private-key importer.

Ed25519PrivateKeySpec - Class in zeroecho.core.alg.ed25519

Specification for Ed25519 private keys

Ed25519PrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.ed25519.Ed25519PrivateKeySpec

Creates a new Ed25519 private key specification from its PKCS#8 encoding.

Ed25519PublicKeyBuilder - Class in zeroecho.core.alg.ed25519

Public key builder for Ed25519

Ed25519PublicKeyBuilder() - Constructor for class zeroecho.core.alg.ed25519.Ed25519PublicKeyBuilder

Creates a stateless Ed25519 public-key importer.

Ed25519PublicKeySpec - Class in zeroecho.core.alg.ed25519

Specification for Ed25519 public keys

Ed25519PublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.ed25519.Ed25519PublicKeySpec

Creates a new Ed25519 public key specification from its X.509 encoding.

ed25519Sign(ZeroEchoSession, PrivateKey) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for an Ed25519 signing engine.

Ed25519SignatureContext - Class in zeroecho.core.alg.ed25519

Signature context for Ed25519 with a fixed 64-byte tag length.

Ed25519SignatureContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.ed25519.Ed25519SignatureContext

Constructs a signing context bound to the given private key.

Ed25519SignatureContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.ed25519.Ed25519SignatureContext

Constructs a verification context bound to the given public key.

ed25519Verify(ZeroEchoSession, PublicKey) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for an Ed25519 verification engine.

ED448_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

Ed448 public-key identity.

ED448_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

Ed448 signature identity.

Ed448Algorithm - Class in zeroecho.core.alg.ed448

Ed448 Digital Signature Algorithm

Ed448Algorithm() - Constructor for class zeroecho.core.alg.ed448.Ed448Algorithm

Constructs and wires the Ed448 algorithm definition.

Ed448 Digital Signature Algorithm - Section in class zeroecho.core.alg.ed448.Ed448Algorithm

Ed448KeyGenBuilder - Class in zeroecho.core.alg.ed448

Ed448 Key-Pair Builder

Ed448KeyGenBuilder() - Constructor for class zeroecho.core.alg.ed448.Ed448KeyGenBuilder

Creates a stateless Ed448 key-pair generator.

Ed448 Key Generation Specification - Section in class zeroecho.core.alg.ed448.Ed448KeyGenSpec

Ed448KeyGenSpec - Class in zeroecho.core.alg.ed448

Ed448 Key Generation Specification

Ed448KeyGenSpec() - Constructor for class zeroecho.core.alg.ed448.Ed448KeyGenSpec

Creates the parameter-free Ed448 key-generation specification.

Ed448 Key-Pair Builder - Section in class zeroecho.core.alg.ed448.Ed448KeyGenBuilder

Ed448PrivateKeyBuilder - Class in zeroecho.core.alg.ed448

Ed448 Private Key Builder

Ed448PrivateKeyBuilder() - Constructor for class zeroecho.core.alg.ed448.Ed448PrivateKeyBuilder

Creates a stateless Ed448 private-key importer.

Ed448 Private Key Builder - Section in class zeroecho.core.alg.ed448.Ed448PrivateKeyBuilder

Ed448PrivateKeySpec - Class in zeroecho.core.alg.ed448

Ed448 Private Key Specification

Ed448PrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.ed448.Ed448PrivateKeySpec

Constructs a new Ed448 private key spec from the given PKCS#8-encoded bytes.

Ed448 Private Key Specification - Section in class zeroecho.core.alg.ed448.Ed448PrivateKeySpec

Ed448PublicKeyBuilder - Class in zeroecho.core.alg.ed448

Ed448 Public Key Builder

Ed448PublicKeyBuilder() - Constructor for class zeroecho.core.alg.ed448.Ed448PublicKeyBuilder

Creates a stateless Ed448 public-key importer.

Ed448 Public Key Builder - Section in class zeroecho.core.alg.ed448.Ed448PublicKeyBuilder

Ed448PublicKeySpec - Class in zeroecho.core.alg.ed448

Ed448 Public Key Specification

Ed448PublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.ed448.Ed448PublicKeySpec

Constructs a new Ed448 public key spec from the given X.509-encoded bytes.

Ed448 Public Key Specification - Section in class zeroecho.core.alg.ed448.Ed448PublicKeySpec

Ed448SignatureContext - Class in zeroecho.core.alg.ed448

Signature context for Ed448 with a fixed 114-byte tag length.

Ed448SignatureContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.ed448.Ed448SignatureContext

Constructs a signing context bound to the given private key.

Ed448SignatureContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.ed448.Ed448SignatureContext

Constructs a verification context bound to the given public key.

EgothorAlgorithmOids - Class in zeroecho.core.alg

OID constants for the Egothor organisation's private algorithm arc.

elgamal2048() - Static method in class zeroecho.core.alg.elgamal.ElgamalKeyGenSpec

Returns a default ElGamal spec with a 2048-bit modulus and 128 iterations for primality testing.

ElgamalAlgorithm - Class in zeroecho.core.alg.elgamal

ElGamal Asymmetric Encryption Algorithm

ElgamalAlgorithm() - Constructor for class zeroecho.core.alg.elgamal.ElgamalAlgorithm

Constructs a new ElGamal algorithm instance bound to the "ElGamal" identifier and backed by the Bouncy Castle provider.

ElGamal Asymmetric Encryption Algorithm - Section in class zeroecho.core.alg.elgamal.ElgamalAlgorithm

ElgamalCipherContext - Class in zeroecho.core.alg.elgamal

Streaming ElGamal cipher context that adapts an upstream stream into an encrypted or decrypted stream.

ElgamalCipherContext(CryptoAlgorithm, Key, ElgamalEncSpec, boolean) - Constructor for class zeroecho.core.alg.elgamal.ElgamalCipherContext

Creates a new ElGamal cipher context.

ElgamalEncDataContentBuilder - Class in zeroecho.sdk.builders.alg

ElgamalEncDataContentBuilder builds streaming ElGamal encryption or decryption pipelines that operate as an InputStream is consumed.

ElGamal Encryption Parameters - Section in class zeroecho.core.alg.elgamal.ElgamalEncSpec

ElgamalEncSpec - Class in zeroecho.core.alg.elgamal

ElGamal Encryption Parameters

ElgamalEncSpec.Padding - Enum Class in zeroecho.core.alg.elgamal

Supported padding modes for ElGamal encryption.

ElGamal Key Generation Specification - Section in class zeroecho.core.alg.elgamal.ElgamalKeyGenSpec

ElgamalKeyGenSpec - Class in zeroecho.core.alg.elgamal

ElGamal Key Generation Specification

ElgamalKeyGenSpec(int, int) - Constructor for class zeroecho.core.alg.elgamal.ElgamalKeyGenSpec

Constructs a new ElGamal key generation spec.

ElGamal Parameter Specification - Section in class zeroecho.core.alg.elgamal.ElgamalParamSpec

ElgamalParamSpec - Class in zeroecho.core.alg.elgamal

ElGamal Parameter Specification

ElgamalParamSpec(BigInteger, BigInteger) - Constructor for class zeroecho.core.alg.elgamal.ElgamalParamSpec

Creates a new ElGamal parameter spec with modulus and generator.

ElgamalPrivateKeySpec - Class in zeroecho.core.alg.elgamal

ElGamal Private Key Specification

ElgamalPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.elgamal.ElgamalPrivateKeySpec

Constructs a new private key spec from PKCS#8-encoded bytes.

ElGamal Private Key Specification - Section in class zeroecho.core.alg.elgamal.ElgamalPrivateKeySpec

ElgamalPublicKeySpec - Class in zeroecho.core.alg.elgamal

ElGamal Public Key Specification

ElgamalPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.elgamal.ElgamalPublicKeySpec

Constructs a new public key spec from X.509-encoded bytes.

ElGamal Public Key Specification - Section in class zeroecho.core.alg.elgamal.ElgamalPublicKeySpec

Elliptic Curve Diffie-Hellman (ECDH) Algorithm - Section in class zeroecho.core.alg.ecdh.EcdhAlgorithm

Elliptic Curve Digital Signature Algorithm (ECDSA) - Section in class zeroecho.core.alg.ecdsa.EcdsaAlgorithm

EMAIL_PROTECTION - Static variable in record class zeroecho.pkix.ExtendedKeyUsage

id-kp-emailProtection.

embedScts(byte[], List) - Method in class zeroecho.pkix.bc.BcPkixProvider

embedScts(byte[], List) - Static method in class zeroecho.pkix.Pkix

Embeds a list of SCTs into a TBSCertificate as the SCT list extension (OID 1.3.6.1.4.1.11129.2.4.2), replacing any existing CT poison or SCT list extension.

embedScts(byte[], List) - Method in interface zeroecho.pkix.spi.PkixProvider

Embeds a list of SCTs into a TBSCertificate as the SCT list extension (OID 1.3.6.1.4.1.11129.2.4.2), producing a modified TBSCertificate DER ready for final signing.

emitBase64Digest() - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Configures the builder to emit the finalized digest as Base64 text without padding.

emitBase64Signature() - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Configures sign mode to emit the finalized signature as Base64 text.

emitBase64Tag() - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Configures the pipeline to emit the finalized HMAC tag as Base64 text.

emitHexDigest() - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Configures the builder to emit the finalized digest as lowercase hexadecimal text.

emitHexSignature() - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Configures sign mode to emit the finalized signature as lowercase hexadecimal text.

emitHexTag() - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Configures the pipeline to emit the finalized HMAC tag as lowercase hexadecimal text.

emitRawDigest() - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Configures the builder to emit the finalized digest as raw bytes.

emitRawSignature() - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Configures sign mode to emit the finalized signature as raw bytes.

emitRawTag() - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Configures the pipeline to emit the finalized HMAC tag as raw bytes.

emitVerificationBoolean() - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Configures the pipeline to verify and emit a textual boolean result.

emitVerificationBoolean() - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Configures verify mode to emit a textual boolean result.

encapsulate() - Method in class zeroecho.core.alg.bike.BikeKemContext

Generates a new shared secret and ciphertext using the recipient's public key.

encapsulate() - Method in class zeroecho.core.alg.cmce.CmceKemContext

Generates a CMCE ciphertext and shared secret using the stored public key.

encapsulate() - Method in class zeroecho.core.alg.frodo.FrodoKemContext

Encapsulates a fresh shared secret to the recipient’s public key.

encapsulate() - Method in class zeroecho.core.alg.hqc.HqcKemContext

Performs HQC encapsulation, generating a ciphertext and a shared secret.

encapsulate() - Method in class zeroecho.core.alg.kyber.KyberKemContext

Performs Kyber encapsulation using the bound public key and returns the ciphertext and shared secret.

encapsulate() - Method in class zeroecho.core.alg.ntru.NtruKemContext

Performs NTRU key encapsulation using the bound public key.

encapsulate() - Method in class zeroecho.core.alg.ntruprime.NtrulPrimeKemContext

Generates a fresh shared secret and its ciphertext using the recipient public key.

encapsulate() - Method in class zeroecho.core.alg.ntruprime.SntruPrimeKemContext

Generates a fresh shared secret and its ciphertext using the recipient public key.

encapsulate() - Method in class zeroecho.core.alg.saber.SaberKemContext

Performs SABER encapsulation and returns the ciphertext and shared secret.

encapsulate() - Method in class zeroecho.core.alg.xwing.XWingKemContext

Encapsulates a fresh shared secret to the recipient's X-Wing public key.

encapsulate() - Method in interface zeroecho.core.context.KemContext

Performs encapsulation, generating both the encapsulated ciphertext and the derived shared secret.

ENCAPSULATE - Enum constant in enum class zeroecho.core.KeyUsage

Encapsulate a shared secret in a KEM flow.

EncCtxOpener - Class in zeroecho.sdk.guard

Reusable opener for CTX-ENC:<algorithm> entries.

EncCtxOpener(ZeroEchoSession) - Constructor for class zeroecho.sdk.guard.EncCtxOpener

Creates an opener that derives contexts through the explicit session.

EncCtxRecipient - Class in zeroecho.sdk.guard

Recipient implementation that delegates content-encryption key (CEK) wrapping to a provided EncryptionContext.

EncCtxRecipient(EncryptionContext) - Constructor for class zeroecho.sdk.guard.EncCtxRecipient

Constructs a recipient that uses the given EncryptionContext.

EncCtxRecipient(EncryptionContext, boolean) - Constructor for class zeroecho.sdk.guard.EncCtxRecipient

Constructs a recipient backed by the specified EncryptionContext.

ENCIPHER_ONLY - Enum constant in enum class zeroecho.pkix.KeyUsage

encipherOnly (bit 7).

encode(AlgorithmIdentity.Parameters) - Method in interface zeroecho.core.spec.AlgorithmIdentityCodec

Encodes complete typed parameters.

encodeAlgorithmIdentifier(AlgorithmIdentifier) - Method in class zeroecho.pkix.bc.BcPkixProvider

encodeAlgorithmIdentifier(AlgorithmIdentifier) - Static method in class zeroecho.pkix.Pkix

Returns the DER encoding of an X.509 AlgorithmIdentifier.

encodeAlgorithmIdentifier(AlgorithmIdentifier) - Method in interface zeroecho.pkix.spi.PkixProvider

Returns the DER encoding of an X.509 AlgorithmIdentifier.

encodeCertsOnly(List) - Method in class zeroecho.pkix.bc.BcPkixProvider

encodeCertsOnly(List) - Static method in class zeroecho.pkix.Pkix

Encodes a list of X.509 certificates as a CMS certs-only message, suitable for EST /cacerts and /simpleenroll responses.

encodeCertsOnly(List) - Method in interface zeroecho.pkix.spi.PkixProvider

Encodes a list of X.509 certificates as a CMS certs-only message (SignedData with no signers, only the certificate bag).

encodeCsrAttrs(List) - Method in class zeroecho.pkix.bc.BcPkixProvider

encodeCsrAttrs(List) - Static method in class zeroecho.pkix.Pkix

Encodes a list of CSR attributes as an RFC 7030 CsrAttrs DER structure, suitable for EST /csrattrs responses.

encodeCsrAttrs(List) - Method in interface zeroecho.pkix.spi.PkixProvider

Encodes a list of CSR attributes as an RFC 7030 CsrAttrs structure (DER-encoded ASN.1 sequence of OIDs and optional attribute values).

encoded() - Method in class zeroecho.core.alg.dh.DhPrivateKeySpec

Returns a clone of the encoded PKCS#8 bytes.

encoded() - Method in class zeroecho.core.alg.dh.DhPublicKeySpec

Returns a clone of the encoded X.509 bytes.

encoded() - Method in class zeroecho.core.alg.ecdsa.EcdsaPrivateKeySpec

Returns a defensive copy of the encoded PKCS#8 data.

encoded() - Method in class zeroecho.core.alg.ecdsa.EcdsaPublicKeySpec

Returns a defensive copy of the encoded X.509 data.

encoded() - Method in class zeroecho.core.alg.ed25519.Ed25519PrivateKeySpec

Returns a defensive copy of the PKCS#8-encoded private key bytes.

encoded() - Method in class zeroecho.core.alg.ed25519.Ed25519PublicKeySpec

Returns a defensive copy of the X.509-encoded public key bytes.

encoded() - Method in class zeroecho.core.alg.ed448.Ed448PrivateKeySpec

Returns a defensive copy of the PKCS#8-encoded private key bytes.

encoded() - Method in class zeroecho.core.alg.ed448.Ed448PublicKeySpec

Returns a defensive copy of the X.509-encoded public key bytes.

encoded() - Method in class zeroecho.core.alg.elgamal.ElgamalPrivateKeySpec

Returns a defensive copy of the PKCS#8-encoded private key.

encoded() - Method in class zeroecho.core.alg.elgamal.ElgamalPublicKeySpec

Returns a defensive copy of the X.509-encoded public key.

encoded() - Method in class zeroecho.core.alg.mldsa.MldsaPrivateKeySpec

Returns a defensive copy of the PKCS#8-encoded private key bytes.

encoded() - Method in class zeroecho.core.alg.mldsa.MldsaPublicKeySpec

Returns a defensive copy of the X.509-encoded public key bytes.

encoded() - Method in class zeroecho.core.alg.rsa.RsaPrivateKeySpec

Returns a clone of the PKCS#8-encoded private key.

encoded() - Method in class zeroecho.core.alg.rsa.RsaPublicKeySpec

Returns a clone of the X.509-encoded public key.

encoded() - Method in class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeySpec

Returns a defensive copy of the PKCS#8-encoded private key bytes.

encoded() - Method in class zeroecho.core.alg.slhdsa.SlhDsaPublicKeySpec

Returns a defensive copy of the X.509-encoded public key bytes.

encoded() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeySpec

Returns a defensive copy of the PKCS#8-encoded private key.

encoded() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusPublicKeySpec

Returns a defensive copy of the X.509-encoded public key.

encoded() - Method in class zeroecho.core.alg.xdh.XdhPrivateKeySpec

Returns a defensive copy of the PKCS#8-encoded private key bytes.

encoded() - Method in class zeroecho.core.alg.xdh.XdhPublicKeySpec

Returns a defensive copy of the X.509-encoded public key bytes.

encoded() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns a defensive copy of the complete canonical request.

encoded() - Method in class zeroecho.pkix.cmp.CrmfRequest

Returns the exact request bytes.

encoded() - Method in interface zeroecho.pkix.csr.CertificationRequest

Returns the exact DER encoding of the whole request.

encodedPkcs8(S) - Method in class zeroecho.core.alg.common.eddsa.AbstractEncodedPrivateKeyBuilder

Extracts the raw PKCS#8-encoded private key bytes from the given spec.

encodedPkcs8(Ed25519PrivateKeySpec) - Method in class zeroecho.core.alg.ed25519.Ed25519PrivateKeyBuilder

Returns the PKCS#8 encoded bytes from the given key spec.

encodedPkcs8(Ed448PrivateKeySpec) - Method in class zeroecho.core.alg.ed448.Ed448PrivateKeyBuilder

Returns the PKCS#8-encoded private key bytes from the given specification.

encodedX509(S) - Method in class zeroecho.core.alg.common.eddsa.AbstractEncodedPublicKeyBuilder

Extracts the raw X.509-encoded public key bytes from the given spec.

encodedX509(Ed25519PublicKeySpec) - Method in class zeroecho.core.alg.ed25519.Ed25519PublicKeyBuilder

Returns the X.509 encoded bytes from the given key spec.

encodedX509(Ed448PublicKeySpec) - Method in class zeroecho.core.alg.ed448.Ed448PublicKeyBuilder

Returns the X.509-encoded public key bytes from the given specification.

Encoding - Section in class zeroecho.core.alg.common.agreement.GenericJcaMessageAgreementContext

Encoding - Section in class zeroecho.core.alg.ecdsa.EcdsaPrivateKeyBuilder

Encoding - Section in class zeroecho.core.alg.ecdsa.EcdsaPrivateKeySpec

Encoding - Section in class zeroecho.core.alg.ecdsa.EcdsaPublicKeyBuilder

Encoding - Section in class zeroecho.core.alg.ecdsa.EcdsaPublicKeySpec

Encoding - Section in class zeroecho.core.alg.ed448.Ed448PrivateKeySpec

Encoding - Section in class zeroecho.core.alg.ed448.Ed448PublicKeySpec

Encoding - Section in class zeroecho.core.alg.kyber.KyberPrivateKeySpec

Encoding - Section in class zeroecho.core.alg.kyber.KyberPublicKeySpec

Encoding - Section in class zeroecho.core.alg.mldsa.MldsaPrivateKeySpec

Encoding - Section in class zeroecho.core.alg.mldsa.MldsaPublicKeySpec

Encoding - Section in class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeySpec

Encoding - Section in class zeroecho.core.alg.slhdsa.SlhDsaPublicKeySpec

Encoding - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeySpec

Encoding - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusPublicKeySpec

Encoding - Section in class zeroecho.sdk.hybrid.kex.HybridKexTranscript

Encoding format - Section in class zeroecho.core.alg.frodo.FrodoPrivateKeySpec

Encoding format - Section in class zeroecho.core.alg.frodo.FrodoPublicKeySpec

encrypt - Variable in class zeroecho.core.alg.chacha.ChaChaCipherContext

Operation mode flag - true for encryption, false for decryption.

encrypt() - Static method in interface zeroecho.sdk.builders.core.DataContentChainBuilder

Creates a new DataContentChainBuilder configured for encryption mode.

ENCRYPT - Enum constant in enum class zeroecho.core.KeyUsage

Encrypt data for confidentiality.

EncryptedContent - Interface in zeroecho.sdk.content.api

Represents encrypted content, which is the result of an encryption process and can be safely deployed to a public space without security concerns.

EncryptionContext - Interface in zeroecho.core.context

Context for performing encryption or decryption in streaming pipelines.

encryptPrivateKeyForRecipient(byte[], X509Certificate) - Method in class zeroecho.pkix.bc.BcPkixProvider

encryptPrivateKeyForRecipient(byte[], X509Certificate) - Static method in class zeroecho.pkix.Pkix

Encrypts a PKCS#8 private key for a single recipient using CMS EnvelopedData with AES-256-GCM content encryption, for use in EST /serverkeygen responses.

encryptPrivateKeyForRecipient(byte[], X509Certificate) - Method in interface zeroecho.pkix.spi.PkixProvider

Encrypts a PKCS#8 private key for a single recipient using CMS EnvelopedData with AES-256-GCM content encryption.

endEntity() - Static method in record class zeroecho.pkix.BasicConstraints

An end-entity (non-CA) basic constraints value.

enforce(HybridKexProfile, AgreementContext, MessageAgreementContext) - Method in class zeroecho.sdk.hybrid.kex.HybridKexPolicy

Enforces the policy for a given hybrid configuration.

Engines and verification - Section in package zeroecho.core.tag

EOF rules - Section in class zeroecho.core.alg.elgamal.ElgamalCipherContext

eofSeen - Variable in class zeroecho.core.io.AbstractChunkTransformInputStream

Flag indicating that end-of-stream has been reached.

equals(Object) - Method in record class zeroecho.core.alg.aes.AesKeyGenSpec

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.alg.chacha.ChaChaKeyGenSpec

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.alg.rsa.BlockGeometry

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.Capability

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.KeyOperationInfo

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in class zeroecho.core.NullKey

Compares this object to another for equality.

equals(Object) - Method in record class zeroecho.core.ParameterConstraint

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.ParameterSetDescriptor.Concrete

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.ParameterSetDescriptor.Template

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.SecurityLevel

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.spec.AlgorithmIdentity.DigestParameters

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in class zeroecho.core.spec.AlgorithmIdentity

equals(Object) - Method in record class zeroecho.core.spec.AlgorithmIdentity.Family

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.spec.AlgorithmIdentity.NamedParameters

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.spec.AlgorithmIdentity.RsaPssParameters

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.spec.AlgorithmSuite

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.storage.KeyringProtection

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.storage.KeyringStore.PrivateWithId

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.storage.KeyringStore.PublicWithId

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.storage.KeyringStore.SecretWithId

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.core.TemplateParameter

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in class zeroecho.pkix.AlgorithmIdentifier

equals(Object) - Method in record class zeroecho.pkix.BasicConstraints

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.CertificateExtension

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.cmp.CmpPbmPolicy

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.cmp.CrmfRequest.CertificateReference

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.crl.CrlEntry

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.csr.CsrAttribute

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.ct.PreCertificateResult

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.ct.SignedCertificateTimestamp

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.ExtendedKeyUsage

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.GeneralName.DirectoryName

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.GeneralName.DnsName

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.GeneralName.IpAddress

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.GeneralName.OtherName

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.GeneralName.RegisteredId

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.GeneralName.Rfc822Name

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.GeneralName.UniformResourceIdentifier

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.ocsp.CertId

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.ocsp.CertStatus.Good

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.ocsp.CertStatus.Revoked

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.ocsp.CertStatus.Unknown

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.ocsp.OcspResponse.SingleResponse

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.ocsp.ResponderId.ByKey

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.ocsp.ResponderId.ByName

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.RelativeDistinguishedName

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.pkix.scep.ScepPkiMessage

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.sdk.guard.UnlockMaterial.Private

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.sdk.hybrid.kex.HybridKexProfile

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.sdk.hybrid.signature.HybridSignatureProfile

Indicates whether some other object is "equal to" this one.

equals(Object) - Method in record class zeroecho.sdk.Pbkdf2Limits

Indicates whether some other object is "equal to" this one.

equivalentSubjectPublicKeyInfoSha256() - Method in class zeroecho.pkix.PublicKeyIdentity

Returns immutable, sorted legacy SPKI hashes of both supported encodings.

Error handling - Section in class zeroecho.logging.ClasspathJulConfig

Error handling - Section in class zeroecho.sdk.hybrid.kex.HybridKexContext

Error handling - Section in class zeroecho.sdk.hybrid.kex.HybridKexContexts

Error handling and verification - Section in package zeroecho.sdk.builders.alg

estimateBits(String, Key) - Static method in class zeroecho.core.policy.SecurityStrengthAdvisor

Estimates the security strength in bits for a given algorithm family id and key.

EstKeygen - Class in zeroecho.pkix

Strict RFC 7030 server-key-generation template and recipient validation.

Events and correlation - Section in class zeroecho.core.audit.AuditedContexts

exact(String, byte[]) - Static method in class zeroecho.pkix.AlgorithmIdentifier

Creates an identifier whose parameters field is exact canonical DER.

EXACT_DER - Enum constant in enum class zeroecho.pkix.AlgorithmIdentifier.ParameterForm

Parameters field present and equal to exact canonical DER.

Example - Section in annotation interface zeroecho.core.annotation.DisplayName

Example - Section in class zeroecho.core.alg.bike.BikeAlgorithm

Example - Section in class zeroecho.core.alg.chacha.ChaCha20Poly1305Algorithm

Example - Section in class zeroecho.core.alg.chacha.ChaCha20Poly1305Spec

Example - Section in class zeroecho.core.alg.dh.DhPrivateKeySpec

Example - Section in class zeroecho.core.alg.dh.DhPublicKeySpec

Example - Section in class zeroecho.core.alg.dh.DhSpec

Example - Section in class zeroecho.core.alg.ecdh.EcdhAlgorithm

Example - Section in class zeroecho.core.alg.elgamal.ElgamalAlgorithm

Example - Section in class zeroecho.core.alg.ntruprime.NtrulPrimeAlgorithm

Example - Section in class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec

Example - Section in class zeroecho.core.alg.ntruprime.SntruPrimeAlgorithm

Example - Section in class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec

Example - Section in class zeroecho.core.alg.rsa.RsaAlgorithm

Example - Section in class zeroecho.core.alg.rsa.RsaCipherContext

Example - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusAlgorithm

Example - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenBuilder

Example - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec

Example - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeyBuilder

Example - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeySpec

Example - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusPublicKeyBuilder

Example - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusPublicKeySpec

Example - Section in class zeroecho.core.alg.xdh.XdhAlgorithm

Example - Section in class zeroecho.core.alg.xdh.XdhKeyGenBuilder

Example - Section in class zeroecho.core.audit.JulAuditListenerStd.Builder

Example - Section in class zeroecho.core.io.AbstractChunkTransformInputStream

Example - Section in class zeroecho.core.io.AbstractPassthroughInputStream

Example - Section in class zeroecho.core.marshal.PairSeqCodec

Example - Section in exception class zeroecho.core.err.ProviderFailureException

Example - Section in exception class zeroecho.core.err.UnsupportedRoleException

Example - Section in exception class zeroecho.core.err.UnsupportedSpecException

Example - Section in interface zeroecho.core.alg.chacha.ChaChaBaseSpec

Example - Section in interface zeroecho.core.annotation.Describable

Example - Section in interface zeroecho.core.marshal.Codec

Example - Section in record class zeroecho.core.alg.rsa.BlockGeometry

Example - Section in zeroecho.core.alg.kyber.KyberAlgorithm.KyberAlgorithm()

Example - Section in zeroecho.sdk.builders.alg.DigestDataContentBuilder.builder(ZeroEchoSession)

Example - Section in zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder.builder(ZeroEchoSession)

Example - Section in zeroecho.sdk.builders.alg.HmacDataContentBuilder.builder(ZeroEchoSession)

Example output - Section in class zeroecho.logging.CompactOneLineFormatter

Examples - Section in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Examples - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Examples - Section in class zeroecho.core.io.CipherTransformInputStreamBuilder

Examples - Section in class zeroecho.core.policy.SecurityStrengthAdvisor

Examples - Section in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Examples - Section in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Examples - Section in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Examples - Section in zeroecho.core.util.Strings.toShortHexString(byte[])

Examples - Section in zeroecho.core.util.Strings.toShortString(byte[])

Examples - Section in zeroecho.sdk.builders.alg.ChaChaDataContentBuilder.builder(ZeroEchoSession)

Examples - Section in zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder.build(boolean)

Example usage - Section in class zeroecho.core.alg.frodo.FrodoAlgorithm

Exception categories - Section in package zeroecho.core.err

expectedSignature(byte[]) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Supplies the expected signature as raw bytes for verification.

expectedSignatureBase64(String) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Supplies the expected signature as a Base64 string for verification.

expectedSignatureHex(String) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Supplies the expected signature as a hexadecimal string for verification.

expectedTag(byte[]) - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Supplies the expected HMAC tag as raw bytes for verification.

expectedTagBase64(String) - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Supplies the expected HMAC tag as a Base64 string for verification.

expectedTagHex(String) - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Supplies the expected HMAC tag as a hexadecimal string for verification.

explicitParamConstant() - Method in class zeroecho.core.alg.mldsa.MldsaKeyGenSpec

Returns the explicit parameter constant override, if set.

explicitParamConstant() - Method in class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec

Returns the explicit parameter constant override, if set.

explicitParamConstant() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec

Returns the explicit parameter constant override, if set.

export(String, byte[], int) - Method in class zeroecho.sdk.hybrid.kex.HybridKexExporter

Derives outLenBytes bytes for a specific purpose.

export(String, int) - Method in class zeroecho.sdk.hybrid.kex.HybridKexExporter

Derives outLenBytes bytes for a specific purpose using only the label.

ExportableDataContent - Interface in zeroecho.sdk.content.api

An extension of DataContent that provides export capabilities in different modes.

ExportableDataContent.ExportMode - Enum Class in zeroecho.sdk.content.api

Enumeration of supported export modes.

exporterFromOkm(byte[]) - Method in class zeroecho.sdk.builders.HybridKexBuilder

Creates an exporter seeded from a derived OKM value.

extendedKeyUsage(ExtendedKeyUsage, boolean) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Adds an ExtendedKeyUsage extension.

ExtendedKeyUsage - Record Class in zeroecho.pkix

An X.509 ExtendedKeyUsage extension value (RFC 5280, 4.2.1.12): an ordered list of key-purpose OIDs.

ExtendedKeyUsage(List) - Constructor for record class zeroecho.pkix.ExtendedKeyUsage

Canonicalizing constructor.

Extensibility - Section in package zeroecho.core.alg

extension(Collection) - Static method in class zeroecho.core.spec.AlgorithmIdentityCatalog

Creates a trusted extension catalog.

extensions() - Method in record class zeroecho.pkix.ct.SignedCertificateTimestamp

Returns an independent copy of the extensions bytes.

externalToInternalSignature(byte[]) - Method in class zeroecho.core.alg.common.sig.SignatureInteropProfile

Converts external signature bytes into the internal ZeroEcho representation.

extraCertificates() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns untrusted certificate candidates; these are outside the protected bytes.

extractChallengePassword(byte[]) - Static method in class zeroecho.pkix.scep.ScepCodec

Extracts the PKCS#9 challengePassword attribute string from a DER-encoded PKCS#10 CSR.

F

factory() - Method in record class zeroecho.core.ParameterSetDescriptor.Template

Returns the value of the factory record component.

Factory - Section in class zeroecho.core.alg.elgamal.ElgamalKeyGenSpec

Factory method - Section in record class zeroecho.core.alg.chacha.ChaChaKeyGenSpec

FAIL_BAD_CERT_ID - Static variable in class zeroecho.pkix.scep.ScepCodec

failInfo value for badCertId (certificate not found).

FAIL_BAD_REQUEST - Static variable in class zeroecho.pkix.scep.ScepCodec

failInfo value for badRequest (challenge password mismatch).

Failure modes - Section in class zeroecho.core.alg.chacha.ChaCha20Poly1305HeaderCodec

Families - Section in enum class zeroecho.core.AlgorithmFamily

family() - Method in record class zeroecho.core.Capability

Returns the value of the family record component.

family() - Method in class zeroecho.core.spec.AlgorithmIdentity

Returns the stable family.

Family(String, String) - Constructor for record class zeroecho.core.spec.AlgorithmIdentity.Family

Creates a validated family name.

FAST - Enum constant in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Variant

Larger, faster signatures.

FAST - Enum constant in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Variant

Larger, faster signatures.

Features - Section in class zeroecho.core.alg.dh.DhAlgorithm

Features - Section in class zeroecho.core.alg.digest.JcaDigestContext

ffdhe2048() - Static method in class zeroecho.core.alg.dh.DhSpec

Returns the standard FFDHE-2048 group.

ffdhe2048() - Static method in class zeroecho.core.alg.elgamal.ElgamalParamSpec

Returns the RFC 7919 FFDHE2048 safe prime with generator 2.

ffdhe3072() - Static method in class zeroecho.core.alg.dh.DhSpec

Returns the standard FFDHE-3072 group.

ffdhe4096() - Static method in class zeroecho.core.alg.dh.DhSpec

Returns the standard FFDHE-4096 group.

ffdhe6144() - Static method in class zeroecho.core.alg.dh.DhSpec

Returns the standard FFDHE-6144 group.

ffdhe8192() - Static method in class zeroecho.core.alg.dh.DhSpec

Returns the standard FFDHE-8192 group.

Fields - Section in class zeroecho.core.alg.chacha.ChaChaSpec

Fields - Section in class zeroecho.core.alg.hmac.HmacKeyImportSpec

Fields - Section in class zeroecho.core.alg.hmac.HmacSpec

Finalization headroom - Section in class zeroecho.core.io.CipherTransformInputStreamBuilder

finalizationOutputChunks() - Method in record class zeroecho.core.alg.rsa.BlockGeometry

Returns the value of the finalizationOutputChunks record component.

firesaberkem128r3() - Static method in class zeroecho.core.alg.saber.SaberKeyGenSpec

Creates a specification for the FireSaberKEM128R3 variant.

FIRESABERKEM128R3 - Enum constant in enum class zeroecho.core.alg.saber.SaberKeyGenSpec.Variant

FireSaber KEM, round-3, strong 128-bit security with larger parameters.

firesaberkem192r3() - Static method in class zeroecho.core.alg.saber.SaberKeyGenSpec

Creates a specification for the FireSaberKEM192R3 variant.

FIRESABERKEM192R3 - Enum constant in enum class zeroecho.core.alg.saber.SaberKeyGenSpec.Variant

FireSaber KEM, round-3, strong 192-bit security with larger parameters.

firesaberkem256r3() - Static method in class zeroecho.core.alg.saber.SaberKeyGenSpec

Creates a specification for the FireSaberKEM256R3 variant.

FIRESABERKEM256R3 - Enum constant in enum class zeroecho.core.alg.saber.SaberKeyGenSpec.Variant

FireSaber KEM, round-3, strong 256-bit security with larger parameters.

fixed(int) - Static method in interface zeroecho.core.alg.common.sig.GenericJcaSignatureContext.SignLengthResolver

Returns a resolver that always reports a fixed length.

fixed(int) - Static method in interface zeroecho.core.alg.common.sig.GenericJcaSignatureContext.VerifyLengthResolver

Returns a resolver that always reports a fixed length.

flagInContext(CtxInterface, Key) - Method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder

Instead of throwing on mismatch, records the verification outcome into a context flag.

flagInContext(CtxInterface, Key) - Method in class zeroecho.sdk.builders.TagTrailerDataContentBuilder

Configures decryption to flag the verification outcome in the provided context instead of throwing.

FlagOkInCtx(ThrowingBiPredicate.VerificationBiPredicate, CtxInterface, Key) - Constructor for class zeroecho.core.tag.ThrowingBiPredicate.FlagOkInCtx

Creates a new context-flagging decorator.

format(LogRecord) - Method in class zeroecho.logging.CompactOneLineFormatter

Formats a LogRecord into a single line.

forRsa(RsaEncSpec, Key, boolean) - Static method in record class zeroecho.core.alg.rsa.BlockGeometry

Computes RSA block geometry for the given specification and key.

FRODO_1344_AES - Enum constant in enum class zeroecho.core.alg.frodo.FrodoKeyGenSpec.Variant

~256-bit security, AES-based pseudorandomness.

FRODO_1344_SHAKE - Enum constant in enum class zeroecho.core.alg.frodo.FrodoKeyGenSpec.Variant

~256-bit security, SHAKE-based pseudorandomness.

FRODO_640_AES - Enum constant in enum class zeroecho.core.alg.frodo.FrodoKeyGenSpec.Variant

128-bit security, AES-based pseudorandomness.

FRODO_640_SHAKE - Enum constant in enum class zeroecho.core.alg.frodo.FrodoKeyGenSpec.Variant

128-bit security, SHAKE-based pseudorandomness.

FRODO_976_AES - Enum constant in enum class zeroecho.core.alg.frodo.FrodoKeyGenSpec.Variant

~192-bit security, AES-based pseudorandomness.

FRODO_976_SHAKE - Enum constant in enum class zeroecho.core.alg.frodo.FrodoKeyGenSpec.Variant

~192-bit security, SHAKE-based pseudorandomness.

frodo1344aes() - Static method in class zeroecho.core.alg.frodo.FrodoKeyGenSpec

Convenience factory for the FrodoKeyGenSpec.Variant.FRODO_1344_AES parameter set.

frodo1344shake() - Static method in class zeroecho.core.alg.frodo.FrodoKeyGenSpec

Convenience factory for the FrodoKeyGenSpec.Variant.FRODO_1344_SHAKE parameter set.

frodo640aes() - Static method in class zeroecho.core.alg.frodo.FrodoKeyGenSpec

Convenience factory for the FrodoKeyGenSpec.Variant.FRODO_640_AES parameter set.

frodo640shake() - Static method in class zeroecho.core.alg.frodo.FrodoKeyGenSpec

Convenience factory for the FrodoKeyGenSpec.Variant.FRODO_640_SHAKE parameter set.

frodo976aes() - Static method in class zeroecho.core.alg.frodo.FrodoKeyGenSpec

Convenience factory for the FrodoKeyGenSpec.Variant.FRODO_976_AES parameter set.

frodo976shake() - Static method in class zeroecho.core.alg.frodo.FrodoKeyGenSpec

Convenience factory for the FrodoKeyGenSpec.Variant.FRODO_976_SHAKE parameter set.

FrodoAlgorithm - Class in zeroecho.core.alg.frodo

Frodo Key Encapsulation Mechanism (KEM)

FrodoAlgorithm() - Constructor for class zeroecho.core.alg.frodo.FrodoAlgorithm

Constructs and registers the Frodo post-quantum algorithm.

FrodoKemContext - Class in zeroecho.core.alg.frodo

FrodoKEM runtime context

FrodoKemContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.frodo.FrodoKemContext

Constructs a context bound to a private key for the KeyUsage.DECAPSULATE role.

FrodoKemContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.frodo.FrodoKemContext

Constructs a context bound to a public key for the KeyUsage.ENCAPSULATE role.

FrodoKEM runtime context - Section in class zeroecho.core.alg.frodo.FrodoKemContext

Frodo Key Encapsulation Mechanism (KEM) - Section in class zeroecho.core.alg.frodo.FrodoAlgorithm

FrodoKeyGenSpec - Class in zeroecho.core.alg.frodo

Key generation specification for FrodoKEM

FrodoKeyGenSpec.Variant - Enum Class in zeroecho.core.alg.frodo

Enumerates the standardized FrodoKEM parameter sets.

FrodoPrivateKeySpec - Class in zeroecho.core.alg.frodo

Specification for importing a Frodo private key

FrodoPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.frodo.FrodoPrivateKeySpec

Creates a new specification from a PKCS#8 DER-encoded key.

FrodoPublicKeySpec - Class in zeroecho.core.alg.frodo

Specification for importing a Frodo public key

FrodoPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.frodo.FrodoPublicKeySpec

Creates a new specification from an X.509 DER-encoded public key.

from(HybridKexExporter) - Static method in class zeroecho.sdk.hybrid.derived.HybridDerived

Creates a new derived-material builder backed by an exporter.

fromBase64(String) - Static method in class zeroecho.core.alg.aes.AesKeyImportSpec

Creates a specification from a Base64-encoded string.

fromBase64(String) - Static method in class zeroecho.core.alg.chacha.ChaChaKeyImportSpec

Creates a spec from a Base64 string.

fromBase64(String, String) - Static method in class zeroecho.core.alg.hmac.HmacKeyImportSpec

Creates a spec from a Base64-encoded key string.

fromCompatibilityAlias(String) - Static method in class zeroecho.core.alg.BootstrapAlgorithmIdentities

Resolves a finite legacy provider alias at the compatibility boundary.

fromHex(String) - Static method in class zeroecho.core.alg.aes.AesKeyImportSpec

Creates a specification from a hex-encoded string.

fromHex(String) - Static method in class zeroecho.core.alg.chacha.ChaChaKeyImportSpec

Creates a spec from a hexadecimal string.

fromHex(String, String) - Static method in class zeroecho.core.alg.hmac.HmacKeyImportSpec

Creates a spec from a hex-encoded key string.

fromProviders(Collection) - Static method in class zeroecho.core.spi.AlgorithmExecutionCapabilities

Builds one deterministic snapshot from already selected trusted providers.

fromRaw(byte[]) - Static method in class zeroecho.core.alg.aes.AesKeyImportSpec

Creates a specification from raw key bytes.

fromRaw(byte[]) - Static method in class zeroecho.core.alg.chacha.ChaChaKeyImportSpec

Creates a spec from a raw byte array.

fromRaw(String, byte[]) - Static method in class zeroecho.core.alg.hmac.HmacKeyImportSpec

Creates a spec from raw bytes.

fromSignatureAlgorithmId(String) - Static method in enum class zeroecho.core.alg.ecdsa.EcdsaCurveSpec

Resolves a standard external ECDSA signature algorithm identifier to the corresponding curve specification used by ZeroEcho.

fromSignatureAlgorithmId(String) - Static method in class zeroecho.core.alg.rsa.RsaSigSpec

Resolves a standard external signature algorithm identifier to an explicit RSA signature specification.

fromSubjectPublicKeyInfo(byte[]) - Static method in class zeroecho.pkix.PublicKeyIdentity

Parses and validates one supported mathematical key without retaining input.

G

GCM - Enum constant in enum class zeroecho.core.alg.aes.AesSpec.Mode

Galois/Counter Mode (GCM), an authenticated encryption mode (AEAD).

gcm128(SymmetricHeaderCodec) - Static method in class zeroecho.core.alg.aes.AesSpec

Creates a GCM specification with a 128‑bit authentication tag and the provided header codec.

GeneralName - Interface in zeroecho.pkix

A typed X.509 GeneralName (RFC 5280, 4.2.1.6), used for subject/issuer alternative names and related extensions.

GeneralName.DirectoryName - Record Class in zeroecho.pkix

directoryName (tag 4).

GeneralName.DnsName - Record Class in zeroecho.pkix

dNSName (tag 2).

GeneralName.IpAddress - Record Class in zeroecho.pkix

iPAddress (tag 7), as a textual IPv4/IPv6 literal.

GeneralName.OtherName - Record Class in zeroecho.pkix

otherName (tag 0): a type-id OID plus the exact DER of the value.

GeneralName.RegisteredId - Record Class in zeroecho.pkix

registeredID (tag 8).

GeneralName.Rfc822Name - Record Class in zeroecho.pkix

rfc822Name (tag 1), an e-mail address.

GeneralName.UniformResourceIdentifier - Record Class in zeroecho.pkix

uniformResourceIdentifier (tag 6).

generate(String, S) - Method in class zeroecho.sdk.KeyBuilders.Symmetric

Generates a symmetric key using the exact runtime specification type.

GenerateCryptoCatalogTable - Class in zeroecho.core.util

Emits an HTML fragment with a table that summarizes discovered cryptographic algorithms.

generatedKey() - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Returns the generated secret key associated with this instance.

generateKey() - Method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Requests generation of a fresh ChaCha key using a default 256-bit specification.

generateKey(int) - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Requests generation of a fresh AES key of the given size.

generateKey(int) - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Requests generation of a new secret key sized for the configured MAC.

generateKeyPair() - Static method in class zeroecho.sdk.util.BikeKeySupport

Generates a fresh BIKE-256 key pair using the BCPQC provider.

generateKeyPair(int) - Method in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Requests generation of a fresh ElGamal key pair with the specified modulus length and default certainty.

generateKeyPair(int, int) - Method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Requests generation of a fresh RSA key pair using the given modulus size and public exponent.

generateKeyPair(String, S) - Method in class zeroecho.sdk.KeyBuilders.Asymmetric

Generates a key pair using the exact runtime specification type.

generateKeyPair(S) - Method in class zeroecho.core.alg.common.eddsa.AbstractEdDSAKeyGenBuilder

Generates a new EdDSA key pair using JCA defaults.

generateKeyPair(S) - Method in interface zeroecho.core.spi.AsymmetricKeyPairGenerator

Generates a key pair.

generateKeyPair(DhSpec) - Method in class zeroecho.core.alg.dh.DhKeyGenBuilder

Generates a Diffie-Hellman key pair for the given specification.

generateKeyPair(EcdhCurveSpec) - Method in class zeroecho.core.alg.ecdh.EcdhKeyGenBuilder

Generates a new elliptic curve key pair for use in ECDH key agreement.

generateKeyPair(EcdsaCurveSpec) - Method in class zeroecho.core.alg.ecdsa.EcdsaKeyGenBuilder

Generates a new elliptic curve key pair for the given curve specification.

generateKeyPair(ElgamalKeyGenSpec) - Method in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Requests generation of a fresh ElGamal key pair using the provided key generation specification.

generateKeyPair(ElgamalParamSpec) - Method in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Requests generation of a fresh ElGamal key pair using a predefined parameter set.

generateKeyPair(MldsaKeyGenSpec) - Method in class zeroecho.core.alg.mldsa.MldsaKeyGenBuilder

Generates a key pair according to the given specification.

generateKeyPair(RsaKeyGenSpec) - Method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Requests generation of a fresh RSA key pair with the provided key generation specification.

generateKeyPair(RsaKeyGenSpec) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Requests generation of a fresh RSA key pair with the provided key generation specification.

generateKeyPair(SlhDsaKeyGenSpec) - Method in class zeroecho.core.alg.slhdsa.SlhDsaKeyGenBuilder

generateKeyPair(SphincsPlusKeyGenSpec) - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenBuilder

Generates a pure SLH-DSA key pair for the SPHINCS+ compatibility binding.

generateKeyPair(XdhSpec) - Method in class zeroecho.core.alg.xdh.XdhKeyGenBuilder

Generates a new XDH key pair using the JCA KeyPairGenerator.

generatePrintablePasswordChars(int) - Static method in class zeroecho.sdk.util.Password

Generates a printable password in a caller-owned character array.

generateRandom(byte[]) - Static method in class zeroecho.core.util.RandomSupport

Fills the supplied array with random bytes.

generateRandom(byte[]) - Static method in class zeroecho.sdk.util.Password

Fills the supplied array with cryptographically strong random bytes.

generateRandom(int) - Static method in class zeroecho.core.util.RandomSupport

Allocates and fills a random byte array.

generateSecret(S) - Method in interface zeroecho.core.spi.SymmetricKeyGenerator

Generates a symmetric key.

generateStatefulKey(String, String, LocalStatefulSigningAuthority) - Method in class zeroecho.core.storage.KeyringStore

Generates and enrolls a new default LMS or XMSS key under an independently preserved local authority.

generator(String, Class) - Method in class zeroecho.sdk.KeyBuilders.Symmetric

Resolves an exact symmetric generator.

GenericJcaAgreementContext - Class in zeroecho.core.alg.common.agreement

Generic JCA-based Key Agreement Context

GenericJcaAgreementContext(CryptoAlgorithm, PrivateKey, String, String) - Constructor for class zeroecho.core.alg.common.agreement.GenericJcaAgreementContext

Creates a new JCA-based agreement context.

Generic JCA-based Key Agreement Context - Section in class zeroecho.core.alg.common.agreement.GenericJcaAgreementContext

GenericJcaMessageAgreementContext - Class in zeroecho.core.alg.common.agreement

Message-oriented JCA key agreement context where the handshake message is a public key encoding.

GenericJcaMessageAgreementContext(CryptoAlgorithm, KeyPairKey, String, String, String, String) - Constructor for class zeroecho.core.alg.common.agreement.GenericJcaMessageAgreementContext

Creates a message-oriented agreement context over a JCA key agreement.

GenericJcaSignatureContext - Class in zeroecho.core.alg.common.sig

Adapts a JCA Signature to the streaming SignatureContext/TagEngine model.

GenericJcaSignatureContext(CryptoAlgorithm, PrivateKey, GenericJcaSignatureContext.EngineFactory, GenericJcaSignatureContext.SignLengthResolver) - Constructor for class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Constructs a SIGN-mode context.

GenericJcaSignatureContext(CryptoAlgorithm, PublicKey, GenericJcaSignatureContext.EngineFactory, GenericJcaSignatureContext.VerifyLengthResolver) - Constructor for class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Constructs a VERIFY-mode context.

GenericJcaSignatureContext.EngineFactory - Interface in zeroecho.core.alg.common.sig

Factory of initialized Signature engines.

GenericJcaSignatureContext.SignLengthResolver - Interface in zeroecho.core.alg.common.sig

Strategy for determining the signature trailer length in SIGN mode.

GenericJcaSignatureContext.VerifyLengthResolver - Interface in zeroecho.core.alg.common.sig

Strategy for determining the expected signature length in VERIFY mode.

get() - Method in class zeroecho.core.tag.TagEngineBuilder

Returns a new TagEngine produced by the underlying factory.

getAlgorithm() - Method in class zeroecho.core.alg.common.agreement.KeyPairKey

Returns the algorithm name of the wrapped private key.

getAlgorithm() - Method in class zeroecho.core.NullKey

Returns the algorithm identifier for this sentinel key.

getEncoded() - Method in class zeroecho.core.alg.common.agreement.KeyPairKey

Returns null.

getEncoded() - Method in class zeroecho.core.NullKey

Returns the key in its primary encoding.

getExportMode() - Method in class zeroecho.sdk.content.api.AbstractExportableDataContent

Returns the currently selected export mode.

getExportMode() - Method in interface zeroecho.sdk.content.api.ExportableDataContent

Returns the current export mode.

getFlagOkInCtx(CtxInterface, Key) - Method in class zeroecho.core.tag.ThrowingBiPredicate.VerificationBiPredicate

Returns a decorator that records the verification outcome into the supplied context.

getFormat() - Method in class zeroecho.core.alg.common.agreement.KeyPairKey

Returns null.

getFormat() - Method in class zeroecho.core.NullKey

Returns the primary encoding format for this sentinel key.

getPeerMessage() - Method in class zeroecho.core.alg.common.agreement.GenericJcaMessageAgreementContext

Returns the local party's handshake message.

getPeerMessage() - Method in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter

Returns the ciphertext produced by encapsulation.

getPeerMessage() - Method in interface zeroecho.core.context.MessageAgreementContext

Retrieves the peer message produced by this context.

getPeerMessage() - Method in class zeroecho.sdk.hybrid.kex.HybridKexContext

Returns the hybrid message to be sent to the peer.

getPrivate(String) - Method in class zeroecho.core.storage.KeyringStore

Resolves a private key.

getPrivateWithId(String) - Method in class zeroecho.core.storage.KeyringStore

Resolves a private key and its canonical algorithm identifier.

getPublic(String) - Method in class zeroecho.core.storage.KeyringStore

Resolves a public key.

getPublicWithId(String) - Method in class zeroecho.core.storage.KeyringStore

Resolves a public key and its canonical algorithm identifier.

getRandom() - Static method in class zeroecho.core.util.RandomSupport

Returns the shared thread-safe random source.

getSecret(String) - Method in class zeroecho.core.storage.KeyringStore

Resolves a secret key.

getSecretWithId(String) - Method in class zeroecho.core.storage.KeyringStore

Resolves a secret key and its canonical algorithm identifier.

getStream() - Method in interface zeroecho.sdk.content.api.DataContent

Returns an InputStream representing the content's data.

getStream() - Method in class zeroecho.sdk.content.builtin.PlainBytes

Returns an InputStream for reading the byte array.

getStream() - Method in class zeroecho.sdk.content.builtin.PlainFile

Returns an InputStream for reading from the file.

getStream() - Method in class zeroecho.sdk.content.builtin.PlainString

Returns an InputStream of the UTF-8 encoded string.

getStream() - Method in class zeroecho.sdk.content.builtin.SecretPassword

Returns a stream over a private UTF-8 buffer.

getStream() - Method in interface zeroecho.sdk.guard.MultiRecipientContent

Creates the processed stream and releases all recipient resources.

getThrowOnMismatch() - Method in class zeroecho.core.tag.ThrowingBiPredicate.VerificationBiPredicate

Returns a decorator that throws VerificationException if verification fails.

getVerificationCore() - Method in class zeroecho.core.alg.common.eddsa.CommonEdDSASignatureContext

Returns the core verification predicate used by this context.

getVerificationCore() - Method in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Returns the core verification predicate for signature comparison.

getVerificationCore() - Method in class zeroecho.core.alg.digest.JcaDigestContext

Returns the core verification predicate for digest tags.

getVerificationCore() - Method in class zeroecho.core.alg.hmac.HmacMacContext

Returns the core verification predicate for HMAC tags.

getVerificationCore() - Method in class zeroecho.core.alg.lms.LmsSignatureContext

getVerificationCore() - Method in class zeroecho.core.alg.mldsa.MldsaSignatureContext

Returns the verification predicate core that can be used to select a mismatch handling strategy.

getVerificationCore() - Method in class zeroecho.core.alg.rsa.RsaSignatureContext

Returns the core verification predicate for RSA signatures.

getVerificationCore() - Method in class zeroecho.core.alg.slhdsa.SlhDsaSignatureContext

Returns the verification predicate core that can be used to select a particular mismatch handling strategy (e.g., throw on mismatch).

getVerificationCore() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Returns the core verification predicate in use.

getVerificationCore() - Method in class zeroecho.core.alg.xmss.XmssSignatureContext

getVerificationCore() - Method in interface zeroecho.core.tag.TagEngine

Returns the current verification approach.

good() - Static method in interface zeroecho.pkix.ocsp.CertStatus

Returns a good status.

Good() - Constructor for record class zeroecho.pkix.ocsp.CertStatus.Good

Creates an instance of a Good record class.

Guaranteed uniqueness - Section in interface zeroecho.core.ParameterSetDescriptor

H

Handshake model - Section in class zeroecho.sdk.hybrid.kex.HybridKexContexts

HARAKA - Enum constant in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Hash

Haraka (AES-based permutation) instantiation.

Hardening options - Section in package zeroecho.sdk.guard

hash() - Method in class zeroecho.core.alg.rsa.RsaEncSpec

Returns the hash function used in OAEP.

hash() - Method in class zeroecho.core.alg.rsa.RsaSigSpec

Returns the hash algorithm.

hash() - Method in class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec

Returns the SLH-DSA hash family.

hash() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec

Returns the hash family of this specification.

hash() - Method in record class zeroecho.core.spec.AlgorithmIdentity.RsaPssParameters

Returns the value of the hash record component.

hashAlgorithm() - Method in record class zeroecho.pkix.ocsp.CertId

Returns the value of the hashAlgorithm record component.

hashCode() - Method in record class zeroecho.core.alg.aes.AesKeyGenSpec

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.alg.chacha.ChaChaKeyGenSpec

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.alg.rsa.BlockGeometry

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.Capability

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.KeyOperationInfo

Returns a hash code value for this object.

hashCode() - Method in class zeroecho.core.NullKey

Returns a stable hash code consistent with NullKey.equals(Object).

hashCode() - Method in record class zeroecho.core.ParameterConstraint

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.ParameterSetDescriptor.Concrete

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.ParameterSetDescriptor.Template

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.SecurityLevel

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.spec.AlgorithmIdentity.DigestParameters

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.spec.AlgorithmIdentity.Family

Returns a hash code value for this object.

hashCode() - Method in class zeroecho.core.spec.AlgorithmIdentity

hashCode() - Method in record class zeroecho.core.spec.AlgorithmIdentity.NamedParameters

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.spec.AlgorithmIdentity.RsaPssParameters

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.spec.AlgorithmSuite

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.storage.KeyringProtection

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.storage.KeyringStore.PrivateWithId

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.storage.KeyringStore.PublicWithId

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.storage.KeyringStore.SecretWithId

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.core.TemplateParameter

Returns a hash code value for this object.

hashCode() - Method in class zeroecho.pkix.AlgorithmIdentifier

hashCode() - Method in record class zeroecho.pkix.BasicConstraints

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.CertificateExtension

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.cmp.CmpPbmPolicy

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.cmp.CrmfRequest.CertificateReference

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.crl.CrlEntry

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.csr.CsrAttribute

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.ct.PreCertificateResult

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.ct.SignedCertificateTimestamp

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.ExtendedKeyUsage

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.GeneralName.DirectoryName

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.GeneralName.DnsName

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.GeneralName.IpAddress

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.GeneralName.OtherName

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.GeneralName.RegisteredId

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.GeneralName.Rfc822Name

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.GeneralName.UniformResourceIdentifier

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.ocsp.CertId

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.ocsp.CertStatus.Good

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.ocsp.CertStatus.Revoked

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.ocsp.CertStatus.Unknown

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.ocsp.OcspResponse.SingleResponse

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.ocsp.ResponderId.ByKey

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.ocsp.ResponderId.ByName

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.RelativeDistinguishedName

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.pkix.scep.ScepPkiMessage

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.sdk.guard.UnlockMaterial.Private

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.sdk.hybrid.kex.HybridKexProfile

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.sdk.hybrid.signature.HybridSignatureProfile

Returns a hash code value for this object.

hashCode() - Method in record class zeroecho.sdk.Pbkdf2Limits

Returns a hash code value for this object.

header() - Method in class zeroecho.core.alg.aes.AesSpec

Returns the embedded header codec, if any.

header() - Method in class zeroecho.core.alg.chacha.ChaCha20Poly1305Spec

Returns the optional header codec.

header() - Method in interface zeroecho.core.alg.chacha.ChaChaBaseSpec

Returns the optional header codec used to serialize/deserialize stream headers for this ChaCha mode.

header() - Method in class zeroecho.core.alg.chacha.ChaChaSpec

Returns the optional header codec.

header(SymmetricHeaderCodec) - Method in class zeroecho.core.alg.aes.AesSpec.Builder

Installs a header codec used by the cipher context to persist and recover runtime parameters (e.g., IV, tag length, AAD hash).

header(SymmetricHeaderCodec) - Method in class zeroecho.core.alg.chacha.ChaCha20Poly1305Spec.Builder

Sets an optional streaming header codec.

header(SymmetricHeaderCodec) - Method in class zeroecho.core.alg.chacha.ChaChaSpec.Builder

Sets the optional header codec.

Header format - Section in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Header format - Section in package zeroecho.sdk.guard

Header layout - Section in class zeroecho.core.alg.chacha.ChaCha20Poly1305HeaderCodec

Header layout - Section in class zeroecho.core.alg.chacha.ChaChaHeaderCodec

headerLimits(int, int) - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Applies defensive limits for parsing the recipient table.

Headers, trailers, and verification - Section in package zeroecho.sdk.builders

Header support - Section in interface zeroecho.core.alg.chacha.ChaChaBaseSpec

hkdfInfo() - Method in record class zeroecho.sdk.hybrid.kex.HybridKexProfile

Returns an owned copy of the optional HKDF information.

hkdfSalt() - Method in record class zeroecho.sdk.hybrid.kex.HybridKexProfile

Returns an owned copy of the optional HKDF salt.

hkdfSha256(byte[]) - Method in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Configures HKDF-SHA256 as the key derivation function using the provided info context string.

hkdfSha256(byte[], byte[], byte[], int) - Static method in class zeroecho.sdk.util.Kdf

Derives length bytes of key material using HKDF-SHA256 as specified in RFC 5869.

hmac(ZeroEchoSession, SecretKey, HmacSpec) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for a keyed HMAC engine.

HmacAlgorithm - Class in zeroecho.core.alg.hmac

HMAC Algorithm Integration

HmacAlgorithm() - Constructor for class zeroecho.core.alg.hmac.HmacAlgorithm

Constructs and registers the HMAC algorithm.

HMAC Algorithm Integration - Section in class zeroecho.core.alg.hmac.HmacAlgorithm

HmacDataContentBuilder - Class in zeroecho.sdk.builders.alg

HmacDataContentBuilder constructs streaming pipelines that compute or verify HMAC tags while an InputStream is consumed.

HmacDataContentBuilder.Mode - Enum Class in zeroecho.sdk.builders.alg

Mode selects whether the pipeline computes an HMAC tag or verifies one.

HmacKeyGenSpec - Class in zeroecho.core.alg.hmac

Specification for HMAC key generation

HmacKeyGenSpec(String, int) - Constructor for class zeroecho.core.alg.hmac.HmacKeyGenSpec

Constructs a new specification for HMAC key generation.

HmacKeyImportSpec - Class in zeroecho.core.alg.hmac

Specification for importing raw HMAC keys into a SecretKey.

HmacKeyImportSpec(String, byte[]) - Constructor for class zeroecho.core.alg.hmac.HmacKeyImportSpec

Constructs a new HMAC key import specification.

HmacMacContext - Class in zeroecho.core.alg.hmac

Streaming HMAC context backed by the JCA Mac API.

HmacMacContext(CryptoAlgorithm, SecretKey, String) - Constructor for class zeroecho.core.alg.hmac.HmacMacContext

Constructs an HMAC context for the given algorithm and key.

HmacSpec - Class in zeroecho.core.alg.hmac

Specification for HMAC operation parameters

HmacSpec(String) - Constructor for class zeroecho.core.alg.hmac.HmacSpec

Constructs a new HMAC spec for the given algorithm.

How estimation works - Section in class zeroecho.core.policy.SecurityStrengthAdvisor

How it works - Section in class zeroecho.core.io.TailStrippingInputStream

hps2048_509() - Static method in class zeroecho.core.alg.ntru.NtruKeyGenSpec

Returns a spec for the NTRU-HPS-2048-509 parameter set.

HPS2048_509 - Enum constant in enum class zeroecho.core.alg.ntru.NtruKeyGenSpec.Variant

NTRU-HPS-2048-509 parameter set.

hps2048_677() - Static method in class zeroecho.core.alg.ntru.NtruKeyGenSpec

Returns a spec for the NTRU-HPS-2048-677 parameter set.

HPS2048_677 - Enum constant in enum class zeroecho.core.alg.ntru.NtruKeyGenSpec.Variant

NTRU-HPS-2048-677 parameter set.

hps4096_1229() - Static method in class zeroecho.core.alg.ntru.NtruKeyGenSpec

Returns a spec for the NTRU-HPS-4096-1229 parameter set.

HPS4096_1229 - Enum constant in enum class zeroecho.core.alg.ntru.NtruKeyGenSpec.Variant

NTRU-HPS-4096-1229 parameter set.

hps4096_821() - Static method in class zeroecho.core.alg.ntru.NtruKeyGenSpec

Returns a spec for the NTRU-HPS-4096-821 parameter set.

HPS4096_821 - Enum constant in enum class zeroecho.core.alg.ntru.NtruKeyGenSpec.Variant

NTRU-HPS-4096-821 parameter set.

HQC_128 - Enum constant in enum class zeroecho.core.alg.hqc.HqcKeyGenSpec.Variant

HQC-128 parameter set (128-bit classical security).

HQC_192 - Enum constant in enum class zeroecho.core.alg.hqc.HqcKeyGenSpec.Variant

HQC-192 parameter set (192-bit classical security).

HQC_256 - Enum constant in enum class zeroecho.core.alg.hqc.HqcKeyGenSpec.Variant

HQC-256 parameter set (256-bit classical security).

HQC (Hamming Quasi-Cyclic) Algorithm Integration - Section in class zeroecho.core.alg.hqc.HqcAlgorithm

hqc128() - Static method in class zeroecho.core.alg.hqc.HqcKeyGenSpec

Returns a specification for the HQC-128 parameter set.

hqc192() - Static method in class zeroecho.core.alg.hqc.HqcKeyGenSpec

Returns a specification for the HQC-192 parameter set.

hqc256() - Static method in class zeroecho.core.alg.hqc.HqcKeyGenSpec

Returns a specification for the HQC-256 parameter set.

HqcAlgorithm - Class in zeroecho.core.alg.hqc

HQC (Hamming Quasi-Cyclic) Algorithm Integration

HqcAlgorithm() - Constructor for class zeroecho.core.alg.hqc.HqcAlgorithm

Constructs and registers the HQC algorithm with the BouncyCastle PQC provider.

HqcKemContext - Class in zeroecho.core.alg.hqc

HQC KEM Context

HqcKemContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.hqc.HqcKemContext

Constructs a decapsulation context using the recipient's private key.

HqcKemContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.hqc.HqcKemContext

Constructs an encapsulation context using the recipient's public key.

HQC KEM Context - Section in class zeroecho.core.alg.hqc.HqcKemContext

HQC Key Generation Specification - Section in class zeroecho.core.alg.hqc.HqcKeyGenSpec

HqcKeyGenSpec - Class in zeroecho.core.alg.hqc

HQC Key Generation Specification

HqcKeyGenSpec.Variant - Enum Class in zeroecho.core.alg.hqc

Enumeration of HQC parameter sets.

HqcPrivateKeySpec - Class in zeroecho.core.alg.hqc

HQC Private Key Specification

HqcPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.hqc.HqcPrivateKeySpec

Constructs a new private key spec from a PKCS#8-encoded byte array.

HQC Private Key Specification - Section in class zeroecho.core.alg.hqc.HqcPrivateKeySpec

HqcPublicKeySpec - Class in zeroecho.core.alg.hqc

HQC Public Key Specification

HqcPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.hqc.HqcPublicKeySpec

Constructs a new public key spec from an X.509-encoded byte array.

HQC Public Key Specification - Section in class zeroecho.core.alg.hqc.HqcPublicKeySpec

hrss1373() - Static method in class zeroecho.core.alg.ntru.NtruKeyGenSpec

Returns a spec for the NTRU-HRSS-1373 parameter set.

HRSS1373 - Enum constant in enum class zeroecho.core.alg.ntru.NtruKeyGenSpec.Variant

NTRU-HRSS-1373 parameter set.

hrss701() - Static method in class zeroecho.core.alg.ntru.NtruKeyGenSpec

Returns a spec for the NTRU-HRSS-701 parameter set.

HRSS701 - Enum constant in enum class zeroecho.core.alg.ntru.NtruKeyGenSpec.Variant

NTRU-HRSS-701 parameter set.

hybrid(ZeroEchoSession) - Static method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder

Enters hybrid signature construction helpers.

HybridDerived - Class in zeroecho.sdk.hybrid.derived

Builder-style utility for deriving purpose-separated key material from a hybrid KEX exporter and applying it to streaming algorithm builders.

HybridKexBuilder - Class in zeroecho.sdk.builders

Fluent builder for constructing hybrid KEX contexts.

HybridKexBuilder.ClassicAgreement - Class in zeroecho.sdk.builders

Configurator for the classic leg in HybridKexBuilder.ClassicMode.CLASSIC_AGREEMENT mode.

HybridKexBuilder.ClassicPairMessage - Class in zeroecho.sdk.builders

Configurator for the classic leg in HybridKexBuilder.ClassicMode.PAIR_MESSAGE mode.

HybridKexBuilder.PqcKem - Class in zeroecho.sdk.builders

Configurator for the PQC leg (KEM adapter).

HybridKexContext - Class in zeroecho.sdk.hybrid.kex

Hybrid key exchange (KEX) context that combines a classic agreement and a post-quantum KEM-style agreement.

HybridKexContext(HybridKexProfile, AgreementContext, MessageAgreementContext) - Constructor for class zeroecho.sdk.hybrid.kex.HybridKexContext

Creates a hybrid KEX context by composing two underlying contexts.

HybridKexContexts - Class in zeroecho.sdk.hybrid.kex

Factory utilities for constructing hybrid key exchange (KEX) contexts.

HybridKexExporter - Class in zeroecho.sdk.hybrid.kex

Deterministic exporter for deriving multiple independent keys from a single hybrid KEX.

HybridKexExporter(byte[], byte[]) - Constructor for class zeroecho.sdk.hybrid.kex.HybridKexExporter

Creates an exporter seeded from a root secret.

HybridKexPolicy - Class in zeroecho.sdk.hybrid.kex

Hybrid KEX policy helper for minimum security strength enforcement.

HybridKexPolicy(int, int, int) - Constructor for class zeroecho.sdk.hybrid.kex.HybridKexPolicy

Creates a hybrid policy.

HybridKexProfile - Record Class in zeroecho.sdk.hybrid.kex

Profile for a hybrid key exchange (KEX) composition.

HybridKexProfile(byte[], byte[], int) - Constructor for record class zeroecho.sdk.hybrid.kex.HybridKexProfile

Canonical constructor with validation and defensive copies.

HybridKexTranscript - Class in zeroecho.sdk.hybrid.kex

Canonical transcript builder for binding hybrid KEX derivation to public handshake context.

HybridKexTranscript() - Constructor for class zeroecho.sdk.hybrid.kex.HybridKexTranscript

Creates a new empty transcript.

HybridSignatureContexts - Class in zeroecho.sdk.hybrid.signature

Factory for SignatureContext-compatible hybrid signature contexts.

HybridSignatureProfile - Record Class in zeroecho.sdk.hybrid.signature

Immutable definition of a hybrid signature composition.

HybridSignatureProfile(String, String, ContextSpec, ContextSpec, HybridSignatureProfile.VerifyRule) - Constructor for record class zeroecho.sdk.hybrid.signature.HybridSignatureProfile

Canonical constructor with invariant checks.

HybridSignatureProfile.VerifyRule - Enum Class in zeroecho.sdk.hybrid.signature

Verification aggregation rule for hybrid signatures.

I

IA5 - Enum constant in enum class zeroecho.pkix.DirectoryStringType

IA5String — e.g.

id() - Method in class zeroecho.core.CryptoAlgorithm

Returns the canonical identifier of this algorithm.

id() - Method in record class zeroecho.core.ParameterSetDescriptor.Concrete

Returns the value of the id record component.

id() - Method in interface zeroecho.core.ParameterSetDescriptor

Machine-readable identifier, unique within the algorithm (e.g., "ML-KEM-768", "RSA-3072", "rsa-custom").

id() - Method in record class zeroecho.core.ParameterSetDescriptor.Template

Returns the value of the id record component.

id() - Method in interface zeroecho.core.spec.AlgorithmIdentityCodec

Returns the stable namespaced codec identifier.

id() - Method in class zeroecho.pkix.bc.BcPkixProvider

id() - Method in interface zeroecho.pkix.spi.PkixProvider

Returns the stable provider identifier (for diagnostics and selection).

id() - Method in class zeroecho.sdk.guard.EncCtxRecipient

Returns the identifier string for this recipient mechanism.

id() - Method in class zeroecho.sdk.guard.KemCtxRecipient

Returns the identifier string for this recipient mechanism.

id() - Method in class zeroecho.sdk.guard.PasswordRecipient

Returns the recipient entry identifier used in the header.

id() - Method in interface zeroecho.sdk.guard.Recipient

Returns a stable, self-describing identifier for this recipient entry.

identities() - Method in class zeroecho.core.spec.AlgorithmIdentityCatalog

Returns identities in deterministic canonical order.

IDENTITY - Enum constant in enum class zeroecho.core.alg.common.sig.SignatureInteropProfile.SignatureRepresentation

External and internal signature bytes are identical.

Identity and uniqueness - Section in class zeroecho.core.CryptoCatalog

Immutability - Section in class zeroecho.core.alg.saber.SaberPublicKeySpec

Immutability & thread-safety - Section in class zeroecho.core.CryptoCatalog

ImmutableByteContent - Class in zeroecho.core.io

Explicit small-value adapter from immutable bytes to repeatable content.

ImmutableByteContent(byte[]) - Constructor for class zeroecho.core.io.ImmutableByteContent

Creates an owned immutable byte value.

immutableCopy() - Method in record class zeroecho.core.spec.AlgorithmIdentity.DigestParameters

immutableCopy() - Method in record class zeroecho.core.spec.AlgorithmIdentity.NamedParameters

immutableCopy() - Method in enum class zeroecho.core.spec.AlgorithmIdentity.NoParameters

immutableCopy() - Method in interface zeroecho.core.spec.AlgorithmIdentity.Parameters

Returns an independently owned immutable copy.

immutableCopy() - Method in record class zeroecho.core.spec.AlgorithmIdentity.RsaPssParameters

Implementation - Section in class zeroecho.core.alg.xwing.XWingAlgorithm

implementationId() - Method in interface zeroecho.core.spi.AlgorithmExecutionCapability

Returns a stable installed implementation identifier.

Implementation notes - Section in interface zeroecho.core.tag.TagEngine

importer(String, Class) - Method in class zeroecho.sdk.KeyBuilders.Symmetric

Resolves an exact symmetric importer.

Import from hex/Base64 - Section in class zeroecho.core.alg.hmac.HmacKeyImportSpec

Import from raw bytes - Section in class zeroecho.core.alg.hmac.HmacKeyImportSpec

importKey(String, S) - Method in class zeroecho.sdk.KeyBuilders.Symmetric

Imports a symmetric key using the exact runtime specification type.

importKeyBase64(String) - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Imports a Base64‑encoded AES key (no padding required).

importKeyBase64(String) - Method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Imports a secret key from a Base64 string.

importKeyBase64(String) - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Imports a secret key from a Base64 string.

importKeyHex(String) - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Imports a hex‑encoded AES key (32/48/64 hex chars).

importKeyHex(String) - Method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Imports a secret key from a hexadecimal string.

importKeyHex(String) - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Imports a secret key from a hexadecimal string.

importKeyRaw(byte[]) - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Imports a raw AES key (16/24/32 bytes).

importKeyRaw(byte[]) - Method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Imports a secret key from raw key bytes appropriate for the selected ChaCha variant.

importKeyRaw(byte[]) - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Imports a secret key from raw bytes.

importPrivate(String, S) - Method in class zeroecho.sdk.KeyBuilders.Asymmetric

Imports a private key using the exact runtime specification type.

importPrivate(S) - Method in class zeroecho.core.alg.common.eddsa.AbstractEncodedPrivateKeyBuilder

Imports an EdDSA private key from its PKCS#8-encoded form.

importPrivate(S) - Method in interface zeroecho.core.spi.PrivateKeyImporter

Imports a private key.

importPrivate(EcdsaPrivateKeySpec) - Method in class zeroecho.core.alg.ecdsa.EcdsaPrivateKeyBuilder

Imports a private key from a PKCS#8 encoded specification.

importPrivate(MldsaPrivateKeySpec) - Method in class zeroecho.core.alg.mldsa.MldsaPrivateKeyBuilder

Imports a private key from PKCS#8 encoding.

importPrivate(SlhDsaPrivateKeySpec) - Method in class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeyBuilder

importPrivate(SphincsPlusPrivateKeySpec) - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeyBuilder

Imports a SPHINCS+ private key from PKCS#8 encoding.

importPrivatePkcs8(byte[]) - Method in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Imports a private key from PKCS#8-encoded bytes.

importPrivatePkcs8(byte[]) - Method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Imports a private key from PKCS#8-encoded bytes.

importPrivatePkcs8(byte[]) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Imports a private key from PKCS#8-encoded bytes.

importPublic(String, S) - Method in class zeroecho.sdk.KeyBuilders.Asymmetric

Imports a public key using the exact runtime specification type.

importPublic(S) - Method in class zeroecho.core.alg.common.eddsa.AbstractEncodedPublicKeyBuilder

Imports an EdDSA public key from its X.509-encoded form.

importPublic(S) - Method in interface zeroecho.core.spi.PublicKeyImporter

Imports a public key.

importPublic(EcdsaPublicKeySpec) - Method in class zeroecho.core.alg.ecdsa.EcdsaPublicKeyBuilder

Imports a public key from an X.509 SubjectPublicKeyInfo specification.

importPublic(MldsaPublicKeySpec) - Method in class zeroecho.core.alg.mldsa.MldsaPublicKeyBuilder

Imports a public key from X.509 encoding.

importPublic(SlhDsaPublicKeySpec) - Method in class zeroecho.core.alg.slhdsa.SlhDsaPublicKeyBuilder

importPublic(SphincsPlusPublicKeySpec) - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusPublicKeyBuilder

Imports a SPHINCS+ public key from X.509 encoding.

importPublicX509(byte[]) - Method in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Imports a public key from X.509 SubjectPublicKeyInfo bytes.

importPublicX509(byte[]) - Method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Imports a public key from X.509 SubjectPublicKeyInfo bytes.

importPublicX509(byte[]) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Imports a public key from X.509 SubjectPublicKeyInfo bytes.

importSecret(S) - Method in interface zeroecho.core.spi.SymmetricKeyImporter

Imports a symmetric key.

inBuf - Variable in class zeroecho.core.io.AbstractChunkTransformInputStream

Input buffer storing data read from the upstream stream.

inBuf - Variable in class zeroecho.core.io.AbstractPassthroughInputStream

Scratch buffer used to read from FilterInputStream.in.

inChunkSize - Variable in class zeroecho.core.io.AbstractChunkTransformInputStream

Size of one logical input chunk.

inChunkSize() - Method in record class zeroecho.core.alg.rsa.BlockGeometry

Returns the value of the inChunkSize record component.

includeStackTraces(boolean) - Method in class zeroecho.core.audit.JulAuditListenerStd.Builder

Controls whether JulAuditListenerStd.onFailure(String, String, String, Throwable) appends a stack trace in addition to the structured summary.

infoLevel(Level) - Method in class zeroecho.core.audit.JulAuditListenerStd.Builder

Sets the level for informational events.

init() - Static method in class zeroecho.sdk.util.BouncyCastleActivator

Explicitly logs the activation of the Bouncy Castle provider.

initCipher(Cipher, byte[]) - Method in class zeroecho.core.alg.chacha.ChaChaCipherContext

Initializes the cipher in the configured mode with the supplied nonce and counter.

initialCounter() - Method in class zeroecho.core.alg.chacha.ChaChaSpec

Returns the configured initial counter.

initialCounter(int) - Method in class zeroecho.core.alg.chacha.ChaChaSpec.Builder

Sets the initial counter value.

initialCounter(int) - Method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Sets the initial counter for ChaCha20 stream mode.

Initialization steps - Section in zeroecho.core.alg.hmac.HmacAlgorithm.HmacAlgorithm()

initiator(ZeroEchoSession, HybridKexProfile, String, PrivateKey, PublicKey, ContextSpec, String, PublicKey, ContextSpec) - Static method in class zeroecho.sdk.hybrid.kex.HybridKexContexts

Creates an initiator-side hybrid KEX context.

INITIATOR - Enum constant in enum class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter.Role

Initiator: produces a peer message via encapsulation.

initiatorPairMessage(ZeroEchoSession, HybridKexProfile, String, KeyPairKey, ContextSpec, String, PublicKey, ContextSpec) - Static method in class zeroecho.sdk.hybrid.kex.HybridKexContexts

Creates an initiator-side hybrid KEX where the classic leg is message-based (PAIR_MESSAGE).

inLen - Variable in class zeroecho.core.io.AbstractChunkTransformInputStream

Number of valid bytes currently in inBuf.

innerContent() - Method in record class zeroecho.pkix.scep.ScepPkiMessage

Copies the plaintext request.

input - Variable in class zeroecho.sdk.content.api.AbstractExportableDataContent

The input data to be exported.

Inputs and parsing - Section in class zeroecho.core.policy.SecurityStrengthAdvisor

installed() - Static method in class zeroecho.core.spi.AlgorithmExecutionCapabilities

Discovers installed providers using the existing ServiceLoader convention.

INSTANCE - Enum constant in enum class zeroecho.core.spec.AlgorithmIdentity.NoParameters

Singleton empty-parameter value.

INSTANCE - Enum constant in enum class zeroecho.core.spec.VoidSpec

Singleton instance representing the absence of per-operation parameters.

INSTANCE - Static variable in class zeroecho.core.NullKey

Singleton instance for all uses where a Key is required but no key exists.

INTEGER - Enum constant in enum class zeroecho.core.ParameterConstraint.ValueKind

Exactly a boxed Java integer.

Integration of BIKE (Bit Flipping Key Encapsulation) algorithm - Section in class zeroecho.core.alg.bike.BikeAlgorithm

Integration with pipeline builders - Section in package zeroecho.sdk.hybrid.signature

Intended usage - Section in package zeroecho.sdk.hybrid.kex

Intended use - Section in Overview

Intended uses - Section in class zeroecho.core.NullKey

internalToExternalSignature(byte[]) - Method in class zeroecho.core.alg.common.sig.SignatureInteropProfile

Converts internal ZeroEcho signature bytes into the external representation.

IpAddress(String) - Constructor for record class zeroecho.pkix.GeneralName.IpAddress

Canonicalizing constructor.

isCancelled() - Method in interface zeroecho.core.io.CancellationSignal

Reports whether cancellation was requested.

isComplete() - Method in class zeroecho.sdk.util.Pack7LStreamWriter

Checks whether the payload has been fully written.

isDestroyed() - Method in class zeroecho.core.alg.aes.AesKeyImportSpec

isDestroyed() - Method in class zeroecho.core.alg.bike.BikePrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.chacha.ChaChaKeyImportSpec

isDestroyed() - Method in class zeroecho.core.alg.cmce.CmcePrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.dh.DhPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.ecdsa.EcdsaPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.ed25519.Ed25519PrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.ed448.Ed448PrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.elgamal.ElgamalPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.frodo.FrodoPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.hmac.HmacKeyImportSpec

isDestroyed() - Method in class zeroecho.core.alg.hqc.HqcPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.kyber.KyberPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.lms.LmsPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.mldsa.MldsaPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.ntru.NtruPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.ntruprime.NtrulPrimePrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.ntruprime.SntruPrimePrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.rsa.RsaPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.saber.SaberPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.xdh.XdhPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.xmss.XmssPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.alg.xwing.XWingPrivateKeySpec

isDestroyed() - Method in class zeroecho.core.storage.KeyringPassword

Reports whether the password has been destroyed.

isDestroyed() - Method in class zeroecho.core.storage.KeyringStore

Reports whether the keyring has been destroyed.

isDestroyed() - Method in class zeroecho.sdk.content.builtin.SecretPassword

isDestroyed() - Method in interface zeroecho.sdk.guard.MultiRecipientContent

Reports whether this content has released its recipient resources.

isDestroyed() - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Reports whether this builder has released its owned recipient secrets.

isDestroyed() - Method in class zeroecho.sdk.guard.PasswordRecipient

isDestroyed() - Method in class zeroecho.sdk.guard.UnlockMaterial.Password

isDestroyed() - Method in class zeroecho.sdk.hybrid.kex.HybridKexExporter

Reports whether this exporter has been destroyed.

isPbm() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns whether the declared protection mode is standard PBM; not proof validity.

isSigned() - Method in interface zeroecho.pkix.ocsp.OcspRequest

Indicates whether the request carries an optional signature.

isStateful(String) - Static method in class zeroecho.core.alg.common.sig.StatefulSigningGuard

Identifies LMS/HSS and XMSS/XMSSMT names and their supported OID families.

isSuccessful() - Method in interface zeroecho.pkix.ocsp.OcspResponse

Indicates whether the response status is successful.

issuer() - Method in record class zeroecho.pkix.cmp.CrmfRequest.CertificateReference

Returns the value of the issuer record component.

issuer(X500Principal) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Sets the issuer distinguished name (required).

issuer(X500Principal) - Method in interface zeroecho.pkix.crl.CrlBuilder

Sets the CRL issuer distinguished name (required).

issuerKeyHash() - Method in record class zeroecho.pkix.ocsp.CertId

Returns the issuer-key digest without exposing the record's internal array.

issuerNameHash() - Method in record class zeroecho.pkix.ocsp.CertId

Returns the issuer-name digest without exposing the record's internal array.

isXof() - Method in enum class zeroecho.core.alg.digest.DigestSpec.Algorithm

Indicates whether this algorithm is an XOF (extendable-output function).

iv(String) - Static method in class zeroecho.core.ConfluxKeys

Returns a typed key for the initialization vector (IV) of a given algorithm.

J

jca() - Method in enum class zeroecho.core.alg.digest.DigestSpec.Algorithm

Returns the canonical JCA algorithm name.

JcaDigestContext - Class in zeroecho.core.alg.digest

Digest context that adapts a JCA MessageDigest to a pull-based streaming pipeline.

JcaDigestContext(CryptoAlgorithm, MessageDigest, DigestSpec) - Constructor for class zeroecho.core.alg.digest.JcaDigestContext

Creates a new digest context bound to a JCA MessageDigest.

jcaFactory() - Method in enum class zeroecho.core.alg.ecdh.EcdhCurveSpec

Returns the JCA factory name of the corresponding signature algorithm (ECDSA with hash, P1363 encoding).

jcaFactory() - Method in enum class zeroecho.core.alg.ecdsa.EcdsaCurveSpec

Returns the JCA algorithm identifier for this curve.

jcaFactory(String, String) - Static method in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Convenience factory that produces a JCA Signature initialized for sign or verify.

jcaKeyFactoryAlg() - Method in class zeroecho.core.alg.common.eddsa.AbstractEncodedPrivateKeyBuilder

Returns the canonical JCA algorithm identifier used by KeyFactory.getInstance(String).

jcaKeyFactoryAlg() - Method in class zeroecho.core.alg.common.eddsa.AbstractEncodedPublicKeyBuilder

Returns the canonical JCA algorithm identifier used by KeyFactory.getInstance(String).

jcaKeyFactoryAlg() - Method in class zeroecho.core.alg.ed25519.Ed25519PrivateKeyBuilder

Returns the canonical JCA algorithm name for Ed25519 key factories.

jcaKeyFactoryAlg() - Method in class zeroecho.core.alg.ed25519.Ed25519PublicKeyBuilder

Returns the canonical JCA algorithm name for Ed25519 key factories.

jcaKeyFactoryAlg() - Method in class zeroecho.core.alg.ed448.Ed448PrivateKeyBuilder

Returns the canonical JCA key factory algorithm name for Ed448.

jcaKeyFactoryAlg() - Method in class zeroecho.core.alg.ed448.Ed448PublicKeyBuilder

Returns the canonical JCA key factory algorithm name for Ed448.

jcaKeyPairAlg() - Method in class zeroecho.core.alg.common.eddsa.AbstractEdDSAKeyGenBuilder

Returns the JCA algorithm name understood by KeyPairGenerator.

jcaKeyPairAlg() - Method in class zeroecho.core.alg.ed25519.Ed25519KeyGenBuilder

Returns the canonical JCA algorithm name for Ed25519 key-pair generation.

jcaKeyPairAlg() - Method in class zeroecho.core.alg.ed448.Ed448KeyGenBuilder

Returns the canonical JCA algorithm identifier for Ed448 key pair generation.

jceName() - Method in class zeroecho.core.alg.chacha.ChaChaCipherContext

Returns "ChaCha20" as the JCE transformation.

JSON structured logging - Section in class zeroecho.logging.ClasspathJulConfig

JulAuditListenerStd - Class in zeroecho.core.audit

AuditListener implementation that emits structured Java Util Logging records.

JulAuditListenerStd.Builder - Class in zeroecho.core.audit

Fluent factory for JulAuditListenerStd.

K

Kdf - Class in zeroecho.sdk.util

HKDF utilities for deriving symmetric keys from a KEM shared secret.

kem(String) - Method in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Sets the canonical KEM algorithm identifier to use (e.g., "ML-KEM").

KEM - Enum constant in enum class zeroecho.core.AlgorithmFamily

Key encapsulation mechanisms (encapsulate/decapsulate).

KEM - Enum constant in enum class zeroecho.core.spec.AlgorithmIdentity.Kind

Key-encapsulation mechanism.

KemContext - Interface in zeroecho.core.context

Context for performing key encapsulation and decapsulation (KEM) operations.

KemContext.KemResult - Class in zeroecho.core.context

Encapsulation result holding both ciphertext and shared secret.

KemCtxOpener - Class in zeroecho.sdk.guard

Reusable opener for KEM:<algorithm>:GCM-WRAP entries.

KemCtxOpener(ZeroEchoSession) - Constructor for class zeroecho.sdk.guard.KemCtxOpener

Creates an opener that derives contexts through the explicit session.

KemCtxRecipient - Class in zeroecho.sdk.guard

Recipient implementation that derives a key-encryption key (KEK) via a KemContext encapsulation and uses it to wrap a content-encryption key (CEK).

KemCtxRecipient(KemContext, int, int) - Constructor for class zeroecho.sdk.guard.KemCtxRecipient

Constructs a recipient that uses the given KEM context and parameters.

KemCtxRecipient(KemContext, int, int, boolean) - Constructor for class zeroecho.sdk.guard.KemCtxRecipient

Constructs a recipient that wraps content-encryption keys (CEKs) using the given KEM context and HKDF-based key derivation parameters.

KemDataContentBuilder - Class in zeroecho.sdk.builders.alg

KEM-based envelope builder that first collects KEM parameters and only then delegates to an explicit symmetric builder for the payload.

KEM envelopes - Section in package zeroecho.sdk.builders.alg

KemMessageAgreementAdapter - Class in zeroecho.core.alg.common.agreement

Adapter: using a KEM as a message-based agreement primitive

KemMessageAgreementAdapter.Builder - Class in zeroecho.core.alg.common.agreement

Builder for KemMessageAgreementAdapter.

KemMessageAgreementAdapter.Role - Enum Class in zeroecho.core.alg.common.agreement

Role of the adapter: initiator or responder.

KemResult(byte[], byte[]) - Constructor for class zeroecho.core.context.KemContext.KemResult

Retains the provided arrays without copying or validating them.

key - Variable in class zeroecho.core.alg.chacha.ChaChaCipherContext

Symmetric key used by this context.

key() - Method in class zeroecho.core.alg.aes.AesCipherContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.aes.AesKeyImportSpec

Returns a defensive copy of the key bytes.

key() - Method in class zeroecho.core.alg.bike.BikeKemContext

Returns the underlying key bound to this context.

key() - Method in class zeroecho.core.alg.chacha.ChaChaCipherContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.chacha.ChaChaKeyImportSpec

Returns a defensive copy of the raw key.

key() - Method in class zeroecho.core.alg.cmce.CmceKemContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.common.agreement.GenericJcaAgreementContext

Returns the local private key bound to this agreement context.

key() - Method in class zeroecho.core.alg.common.agreement.GenericJcaMessageAgreementContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter

Returns the key bound to the underlying KEM context.

key() - Method in class zeroecho.core.alg.common.eddsa.CommonEdDSASignatureContext

Returns the signing or verification key bound to this context.

key() - Method in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.digest.JcaDigestContext

Returns the key associated with this context.

key() - Method in class zeroecho.core.alg.elgamal.ElgamalCipherContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.frodo.FrodoKemContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.hmac.HmacKeyImportSpec

Returns a defensive copy of the raw key material.

key() - Method in class zeroecho.core.alg.hmac.HmacMacContext

Returns the key used for HMAC operations.

key() - Method in class zeroecho.core.alg.hqc.HqcKemContext

Returns the bound key (public or private) for this context.

key() - Method in class zeroecho.core.alg.kyber.KyberKemContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.lms.LmsSignatureContext

key() - Method in class zeroecho.core.alg.mldsa.MldsaSignatureContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.ntru.NtruKemContext

Returns the key this context is bound to.

key() - Method in class zeroecho.core.alg.ntruprime.NtrulPrimeKemContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.ntruprime.SntruPrimeKemContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.rsa.RsaCipherContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.rsa.RsaSignatureContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.saber.SaberKemContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.slhdsa.SlhDsaSignatureContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.alg.xmss.XmssSignatureContext

key() - Method in class zeroecho.core.alg.xwing.XWingKemContext

key() - Method in interface zeroecho.core.context.CryptoContext

Returns the key bound to this context.

key() - Method in class zeroecho.core.marshal.PairSeq.Cursor

Returns the current key.

key() - Method in record class zeroecho.core.storage.KeyringStore.PrivateWithId

Returns the value of the key record component.

key() - Method in record class zeroecho.core.storage.KeyringStore.PublicWithId

Returns the value of the key record component.

key() - Method in record class zeroecho.core.storage.KeyringStore.SecretWithId

Returns the value of the key record component.

key() - Method in record class zeroecho.sdk.guard.UnlockMaterial.Private

Returns the value of the key record component.

key() - Method in class zeroecho.sdk.hybrid.kex.HybridKexContext

Returns the representative key of this context.

KEY_AGREEMENT - Enum constant in enum class zeroecho.pkix.KeyUsage

keyAgreement (bit 4).

KEY_CERT_SIGN - Enum constant in enum class zeroecho.pkix.KeyUsage

keyCertSign (bit 5).

KEY_COMPROMISE - Enum constant in enum class zeroecho.pkix.crl.CrlReason

keyCompromise (1).

KEY_ENCIPHERMENT - Enum constant in enum class zeroecho.pkix.KeyUsage

keyEncipherment (bit 2).

KEY_UNAVAILABLE - Enum constant in enum class zeroecho.core.storage.KeyringSignatureExecutor.FailureCode

A requested key entry is absent or has the wrong entry kind.

keyAgreementName() - Method in enum class zeroecho.core.alg.xdh.XdhSpec

Returns the canonical JCA name for KeyAgreement.

keyAlgorithmId() - Method in class zeroecho.core.alg.common.sig.SignatureInteropProfile

Returns the ZeroEcho key algorithm identifier.

keyAlgorithmIdOrSelf(String) - Static method in class zeroecho.core.alg.common.sig.SignatureInteropProfiles

Returns the key algorithm identifier associated with a signature algorithm.

keyAt(int) - Method in class zeroecho.core.marshal.PairSeq

Returns the key at the given index.

keyBuilders() - Method in class zeroecho.sdk.ZeroEchoSession

Returns exact session-bound key operations.

KeyBuilders - Class in zeroecho.sdk

Session-bound entry point for exact key-material operations.

Key builders - Section in class zeroecho.core.alg.ecdh.EcdhAlgorithm

Key builders - Section in class zeroecho.core.alg.ecdsa.EcdsaAlgorithm

Key builders - Section in class zeroecho.core.alg.hqc.HqcAlgorithm

Key builders - Section in class zeroecho.core.alg.kyber.KyberAlgorithm

Key builders - Section in class zeroecho.core.alg.ntru.NtruAlgorithm

Key builders - Section in class zeroecho.core.alg.rsa.RsaAlgorithm

Key builders - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusAlgorithm

KeyBuilders.Asymmetric - Class in zeroecho.sdk

Asymmetric generation and import lookups.

KeyBuilders.Symmetric - Class in zeroecho.sdk

Symmetric generation and import lookups.

Key concepts - Section in package zeroecho.core.alg

Key derivation - Section in class zeroecho.sdk.hybrid.kex.HybridKexContext

Key derivation - Section in package zeroecho.sdk.hybrid.kex

Key elements - Section in package zeroecho.core.annotation

Key elements - Section in package zeroecho.core.audit

Key elements - Section in package zeroecho.core.io

Key elements - Section in package zeroecho.core.marshal

Key elements - Section in package zeroecho.core.policy

Key elements - Section in package zeroecho.core.spec

Key elements - Section in package zeroecho.sdk.content.api

Key elements - Section in package zeroecho.sdk.io

Key elements - Section in package zeroecho.sdk.util

Key generation - Section in class zeroecho.core.alg.xwing.XWingAlgorithm

Key generation specification for FrodoKEM - Section in class zeroecho.core.alg.frodo.FrodoKeyGenSpec

Key handling - Section in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

keyHash() - Method in record class zeroecho.pkix.ocsp.ResponderId.ByKey

Returns the responder key hash without exposing the record's internal array.

Key ideas - Section in package zeroecho.sdk.guard

Key management - Section in class zeroecho.core.alg.hmac.HmacAlgorithm

Key management - Section in package zeroecho.core.alg.slhdsa

Key management - Section in package zeroecho.sdk.builders.alg

Key Management - Section in class zeroecho.core.alg.frodo.FrodoAlgorithm

Key material - Section in class zeroecho.core.alg.ed25519.Ed25519Algorithm

Key material - Section in class zeroecho.core.alg.ed448.Ed448Algorithm

Key material - Section in class zeroecho.core.alg.elgamal.ElgamalAlgorithm

Key material - Section in class zeroecho.core.alg.ntruprime.NtrulPrimeAlgorithm

Key material - Section in class zeroecho.core.alg.ntruprime.SntruPrimeAlgorithm

Key material - Section in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Key material - Section in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Key material - Section in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Key material and builders - Section in class zeroecho.core.alg.xdh.XdhAlgorithm

Key material and formats - Section in class zeroecho.core.alg.ntru.NtruKemContext

Key material import and generation - Section in class zeroecho.core.alg.saber.SaberAlgorithm

KeyOperation - Enum Class in zeroecho.core

Identifies one exact key-material operation exposed by an algorithm.

KeyOperationInfo - Record Class in zeroecho.core

Immutable metadata for one exact key operation.

KeyOperationInfo(KeyOperation, Class, AlgorithmKeySpec) - Constructor for record class zeroecho.core.KeyOperationInfo

Validates the metadata invariant.

keyOperations() - Method in class zeroecho.core.CryptoAlgorithm

Returns deterministic metadata for every exact key operation.

Key operations - Section in class zeroecho.core.CryptoAlgorithm

keyPair() - Method in class zeroecho.core.alg.common.agreement.KeyPairKey

Returns the wrapped KeyPair.

keyPair(KeyPairKey) - Method in class zeroecho.sdk.builders.HybridKexBuilder.ClassicPairMessage

Sets the local classic key pair.

Key-pair builder for Ed25519 - Section in class zeroecho.core.alg.ed25519.Ed25519KeyGenBuilder

keyPairGenerator(String, Class) - Method in class zeroecho.sdk.KeyBuilders.Asymmetric

Resolves an exact key-pair generator.

KeyPairKey - Class in zeroecho.core.alg.common.agreement

A Key wrapper that carries a KeyPair through APIs that are constrained to Key types.

KeyPairKey(KeyPair) - Constructor for class zeroecho.core.alg.common.agreement.KeyPairKey

Creates a wrapper around a KeyPair.

keyPurposeOids() - Method in record class zeroecho.pkix.ExtendedKeyUsage

Returns the value of the keyPurposeOids record component.

Key resolution order - Section in zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder.build(boolean)

KEYRING_ALREADY_OPEN - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

Another process or session already owns the keyring lock.

KEYRING_CLOSED - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

The requested operation used a closed keyring.

KEYRING_DURABILITY_UNCONFIRMED - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

An update completed without confirmed durable publication.

KEYRING_FILESYSTEM_UNSUPPORTED - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

Filesystem ownership, permissions, links, or atomicity do not meet the security policy.

KEYRING_FORMAT_INVALID - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

Persisted keyring framing or authenticated metadata is invalid.

KEYRING_IMPORT_MAPPING_INVALID - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

Imported key metadata cannot be mapped to an exact supported algorithm.

KEYRING_IMPORT_METADATA_INVALID - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

Imported key metadata is missing, inconsistent, or malformed.

KEYRING_IO_FAILED - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

Keyring storage I/O failed.

KEYRING_KEY_NOT_CANONICALIZABLE - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

Imported key material cannot be converted to its canonical representation.

KEYRING_LIMIT_EXCEEDED - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

A configured size, count, or derivation bound was exceeded.

KEYRING_NON_EXPORTABLE_KEY - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

The requested key is intentionally non-exportable.

KEYRING_STATEFUL_EXHAUSTED - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

No unused signature leaves remain.

KEYRING_STATEFUL_RECOVERY_REQUIRED - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

Stateful signing authority is missing, pending, mismatched or uncertain.

KEYRING_UNLOCK_FAILED - Enum constant in enum class zeroecho.core.storage.KeyringException.Code

Supplied unlock material could not authenticate the keyring.

KeyringException - Exception Class in zeroecho.core.storage

Redacted checked failure raised by encrypted keyring operations.

KeyringException(KeyringException.Code) - Constructor for exception class zeroecho.core.storage.KeyringException

Creates a redacted keyring exception.

KeyringException.Code - Enum Class in zeroecho.core.storage

Stable keyring failure categories.

KeyringPassword - Class in zeroecho.core.storage

Destroyable owner of a keyring password.

KeyringPassword(char[]) - Constructor for class zeroecho.core.storage.KeyringPassword

Creates a password owner.

KeyringProtection - Record Class in zeroecho.core.storage

Operational limits applied while opening an encrypted software keyring.

KeyringProtection(int) - Constructor for record class zeroecho.core.storage.KeyringProtection

Validates the operational limit.

KeyringSignatureExecutor - Class in zeroecho.core.storage

Executes a streaming signature while confining private-key resolution to the keyring-owning library boundary.

KeyringSignatureExecutor(KeyringStore, ZeroEchoSession) - Constructor for class zeroecho.core.storage.KeyringSignatureExecutor

Creates an executor bound to an open keyring and a session.

KeyringSignatureExecutor.Cancellation - Exception Class in zeroecho.core.storage

Cause-free marker indicating cancellation observed at a documented signing checkpoint.

KeyringSignatureExecutor.Failure - Exception Class in zeroecho.core.storage

Checked, redacted failure raised by key resolution or provider execution.

KeyringSignatureExecutor.FailureCode - Enum Class in zeroecho.core.storage

Stable, non-sensitive failure categories.

KeyringStore - Class in zeroecho.core.storage

Path-bound encrypted local software keystore.

KeyringStore.Encoding - Enum Class in zeroecho.core.storage

Standard encoded key forms supported by the encrypted store.

KeyringStore.Kind - Enum Class in zeroecho.core.storage

Key classifications supported by the encrypted store.

KeyringStore.PrivateWithId - Record Class in zeroecho.core.storage

Algorithm identifier paired with an imported private key.

KeyringStore.PublicWithId - Record Class in zeroecho.core.storage

Algorithm identifier paired with an imported public key.

KeyringStore.SecretWithId - Record Class in zeroecho.core.storage

Algorithm identifier paired with an imported secret key.

KeyringUnlockProvider - Interface in zeroecho.core.spi

Supplies a fresh destroyable password for one keyring open operation.

keySize() - Method in class zeroecho.core.alg.elgamal.ElgamalKeyGenSpec

Returns the modulus size in bits.

keySize() - Method in class zeroecho.core.alg.elgamal.ElgamalParamSpec

Returns the modulus size in bits.

keySize() - Method in class zeroecho.core.alg.rsa.RsaKeyGenSpec

Returns the modulus length in bits.

keySizeBits() - Method in record class zeroecho.core.alg.aes.AesKeyGenSpec

Returns the value of the keySizeBits record component.

keySizeBits() - Method in record class zeroecho.core.alg.chacha.ChaChaKeyGenSpec

Returns the value of the keySizeBits record component.

keySizeBits() - Method in class zeroecho.core.alg.hmac.HmacKeyGenSpec

Returns the key size requested for generation.

keyType() - Method in record class zeroecho.core.Capability

Returns the value of the keyType record component.

keyUsage(Set, boolean) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Adds a KeyUsage extension.

KeyUsage - Enum Class in zeroecho.core

Declares the intended purpose(s) of a cryptographic key.

KeyUsage - Enum Class in zeroecho.pkix

The X.509 KeyUsage bits (RFC 5280, 4.2.1.3), in the standard bit order.

kind() - Method in record class zeroecho.core.ParameterConstraint

Returns the value of the kind record component.

kind() - Method in class zeroecho.core.spec.AlgorithmIdentity

Returns the semantic identity kind.

kpgName() - Method in enum class zeroecho.core.alg.xdh.XdhSpec

Returns the canonical JCA name for KeyPairGenerator.

kyber1024() - Static method in class zeroecho.core.alg.kyber.KyberKeyGenSpec

Creates a specification for Kyber-1024 key generation.

KYBER1024 - Enum constant in enum class zeroecho.core.alg.kyber.KyberKeyGenSpec.Variant

Kyber-1024, NIST level 5 security strength.

kyber512() - Static method in class zeroecho.core.alg.kyber.KyberKeyGenSpec

Creates a specification for Kyber-512 key generation.

KYBER512 - Enum constant in enum class zeroecho.core.alg.kyber.KyberKeyGenSpec.Variant

Kyber-512, NIST level 1 security strength.

kyber768() - Static method in class zeroecho.core.alg.kyber.KyberKeyGenSpec

Creates a specification for Kyber-768 key generation.

KYBER768 - Enum constant in enum class zeroecho.core.alg.kyber.KyberKeyGenSpec.Variant

Kyber-768, NIST level 3 security strength.

KyberAlgorithm - Class in zeroecho.core.alg.kyber

Concrete CryptoAlgorithm implementation for the post-quantum key encapsulation mechanism (KEM) Kyber, standardized as ML-KEM.

KyberAlgorithm() - Constructor for class zeroecho.core.alg.kyber.KyberAlgorithm

Provides ML-KEM (Kyber) integration backed by the Bouncy Castle provider and registers capabilities and key builders required for KEM usage and message agreement.

KyberKemContext - Class in zeroecho.core.alg.kyber

KyberKemContext is a lightweight KEM context used to perform Kyber (ML-KEM) encapsulation or decapsulation.

KyberKemContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.kyber.KyberKemContext

Creates a context in decapsulation role bound to the given private key.

KyberKemContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.kyber.KyberKemContext

Creates a context in encapsulation role bound to the given public key.

KyberKeyGenSpec - Class in zeroecho.core.alg.kyber

Key generation specification for the Kyber (ML-KEM) algorithm family.

KyberKeyGenSpec.Variant - Enum Class in zeroecho.core.alg.kyber

Enumerates the supported Kyber parameter sets.

KyberPrivateKeySpec - Class in zeroecho.core.alg.kyber

Specification wrapper for a Kyber (ML-KEM) private key encoded in PKCS#8.

KyberPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.kyber.KyberPrivateKeySpec

Creates a new spec from PKCS#8-encoded private key bytes.

KyberPublicKeySpec - Class in zeroecho.core.alg.kyber

Specification wrapper for a Kyber (ML-KEM) public key encoded in X.509.

KyberPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.kyber.KyberPublicKeySpec

Creates a new spec from X.509-encoded public key bytes.

L

L1_128 - Enum constant in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Security

NIST Level 1 (~128-bit security).

L1_128 - Enum constant in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Security

NIST Level 1 (~128-bit security).

L3_192 - Enum constant in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Security

NIST Level 3 (~192-bit security).

L3_192 - Enum constant in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Security

NIST Level 3 (~192-bit security).

L5_256 - Enum constant in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Security

NIST Level 5 (~256-bit security).

L5_256 - Enum constant in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Security

NIST Level 5 (~256-bit security).

label() - Method in class zeroecho.core.alg.rsa.RsaEncSpec

Returns the OAEP label as a defensive copy.

label(String) - Method in class zeroecho.sdk.hybrid.derived.HybridDerived

Sets the base label used for purpose separation.

Labeling - Section in class zeroecho.sdk.hybrid.derived.HybridDerived

lastPeerMessageOrNull() - Method in class zeroecho.sdk.hybrid.kex.HybridKexContext

Returns the last hybrid peer message that was produced or set on this instance.

Layering - Section in Overview

LEGACY - Enum constant in enum class zeroecho.core.ParameterConstraint.ValueKind

Legacy constructor metadata with no inferred domain constraints.

length() - Method in class zeroecho.core.io.ContentSlice

length() - Method in class zeroecho.core.io.ImmutableByteContent

length() - Method in interface zeroecho.core.io.OneShotContent

Returns the known source length when available.

length() - Method in interface zeroecho.core.io.RepeatableContent

Returns the known aggregate length when cheaply and authoritatively available.

Length resolution - Section in package zeroecho.core.alg.common.sig

Length resolvers - Section in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Lifecycle - Section in class zeroecho.core.alg.common.agreement.GenericJcaAgreementContext

Lifecycle - Section in class zeroecho.core.alg.common.agreement.GenericJcaMessageAgreementContext

Lifecycle - Section in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter

Lifecycle - Section in class zeroecho.core.alg.saber.SaberPrivateKeySpec

Lifecycle - Section in interface zeroecho.core.context.AgreementContext

Lifecycle - Section in interface zeroecho.core.context.CryptoContext

Lifecycle - Section in interface zeroecho.core.context.EncryptionContext

Lifecycle - Section in interface zeroecho.core.context.KemContext

Lifecycle - Section in interface zeroecho.core.context.MessageAgreementContext

Lifecycle - Section in interface zeroecho.pkix.sign.ContentSigner

Lifecycle - Section in interface zeroecho.pkix.sign.ContentVerifier

Lifecycle and safety - Section in package zeroecho.core.context

Lifecycle and thread-safety - Section in class zeroecho.core.alg.saber.SaberKemContext

Lifecycle and usage notes - Section in package zeroecho.core.alg.common.agreement

lightsaberkem128r3() - Static method in class zeroecho.core.alg.saber.SaberKeyGenSpec

Creates a specification for the LightSaberKEM128R3 variant.

LIGHTSABERKEM128R3 - Enum constant in enum class zeroecho.core.alg.saber.SaberKeyGenSpec.Variant

LightSaber KEM, round-3, targeting ~128-bit security with smallest footprint.

lightsaberkem192r3() - Static method in class zeroecho.core.alg.saber.SaberKeyGenSpec

Creates a specification for the LightSaberKEM192R3 variant.

LIGHTSABERKEM192R3 - Enum constant in enum class zeroecho.core.alg.saber.SaberKeyGenSpec.Variant

LightSaber KEM, round-3, targeting ~192-bit security.

lightsaberkem256r3() - Static method in class zeroecho.core.alg.saber.SaberKeyGenSpec

Creates a specification for the LightSaberKEM256R3 variant.

LIGHTSABERKEM256R3 - Enum constant in enum class zeroecho.core.alg.saber.SaberKeyGenSpec.Variant

LightSaber KEM, round-3, targeting ~256-bit security.

listCapabilities() - Method in class zeroecho.core.CryptoAlgorithm

Returns an immutable view of the algorithm’s declared capabilities.

LmsAlgorithm - Class in zeroecho.core.alg.lms

Concrete CryptoAlgorithm for LMS (Leighton–Micali Signatures).

LmsAlgorithm() - Constructor for class zeroecho.core.alg.lms.LmsAlgorithm

Creates the LMS algorithm instance and registers its capabilities and the default key-pair generator.

LmsKeyGenSpec - Enum Class in zeroecho.core.alg.lms

Key generation specification for LMS.

LmsPrivateKeySpec - Class in zeroecho.core.alg.lms

Encoded representation of an LMS private key in PKCS#8 format.

LmsPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.lms.LmsPrivateKeySpec

Constructs a new spec from PKCS#8 DER encoded LMS private key bytes.

LmsPublicKeySpec - Class in zeroecho.core.alg.lms

Encoded representation of an LMS public key in X.509 (SubjectPublicKeyInfo) format.

LmsPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.lms.LmsPublicKeySpec

Constructs a new spec from X.509 DER encoded LMS public key bytes.

LmsSignatureContext - Class in zeroecho.core.alg.lms

Streaming signature context for LMS (Leighton–Micali Signatures).

LmsSignatureContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.lms.LmsSignatureContext

Rejects LMS signing without using or changing the private key.

LmsSignatureContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.lms.LmsSignatureContext

Creates an LMS verification context bound to the given public key.

load() - Static method in class zeroecho.core.CryptoCatalog

Returns a catalog view of the authoritative registry initialized by CryptoAlgorithms.

loadCertificate(String) - Static method in class zeroecho.sdk.util.X509Support

Loads an X509Certificate from a PEM file.

loadCSR(String) - Static method in class zeroecho.sdk.util.X509Support

Loads a PKCS#10 Certification Request (CSR) from a PEM file.

loadPrivateKey(byte[]) - Static method in class zeroecho.sdk.util.BikeKeySupport

Decodes a BIKE private key from a PKCS#8 structure.

loadPublicKey(byte[]) - Static method in class zeroecho.sdk.util.BikeKeySupport

Decodes a BIKE public key from a SubjectPublicKeyInfo structure.

LocalStatefulSigningAuthority - Class in zeroecho.core.storage

Default local monotonic authority for stateful signatures.

LOG - Static variable in interface zeroecho.core.tag.TagEngine

Logger shared by default tag-engine diagnostics.

LOG_ID_LENGTH - Static variable in record class zeroecho.pkix.ct.SignedCertificateTimestamp

Required byte length of a CT log ID.

logger(Logger) - Method in class zeroecho.core.audit.JulAuditListenerStd.Builder

Sets the JUL logger that will receive audit messages.

Logging format - Section in class zeroecho.core.audit.JulAuditListenerStd

logId() - Method in record class zeroecho.pkix.ct.SignedCertificateTimestamp

Returns an independent copy of the log ID bytes.

LONG - Enum constant in enum class zeroecho.core.ParameterConstraint.ValueKind

Exactly a boxed Java long.

M

mac() - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Switches the builder to MAC mode.

MAC - Enum constant in enum class zeroecho.core.KeyUsage

Compute a keyed message authentication code (e.g., HMAC, KMAC).

MAC - Enum constant in enum class zeroecho.sdk.builders.alg.HmacDataContentBuilder.Mode

Compute an HMAC tag over the input stream.

MacContext - Interface in zeroecho.core.context

Context for computing message authentication codes (MACs) in streaming pipelines.

macName() - Method in class zeroecho.core.alg.hmac.HmacKeyGenSpec

Returns the JCA algorithm name of the HMAC variant.

macName() - Method in class zeroecho.core.alg.hmac.HmacKeyImportSpec

Returns the HMAC algorithm name.

macName() - Method in class zeroecho.core.alg.hmac.HmacSpec

Returns the canonical JCA algorithm name of this spec.

macOids() - Method in record class zeroecho.pkix.cmp.CmpPbmPolicy

Returns the value of the macOids record component.

main(String[]) - Static method in class zeroecho.core.util.GenerateCryptoCatalogTable

Generates a standalone HTML fragment (no <html> or <head>) to the given file.

Main types - Section in package zeroecho.sdk.hybrid.signature

MANUAL - Enum constant in enum class zeroecho.core.audit.AuditMode

Emits no automatic audit events and returns the original context.

markSupported() - Method in class zeroecho.core.io.TailStrippingInputStream

Indicates that mark/reset is not supported.

marshal(T) - Method in interface zeroecho.core.marshal.Codec

Converts a domain value into its serialized representation.

marshal(T) - Method in class zeroecho.core.marshal.PairSeqCodec

Encodes a domain object to PairSeq by invoking its marshal() method.

marshal(AesKeyImportSpec) - Static method in class zeroecho.core.alg.aes.AesKeyImportSpec

Serializes this specification into a key/value sequence, encoding the key in Base64.

marshal(BikePrivateKeySpec) - Static method in class zeroecho.core.alg.bike.BikePrivateKeySpec

Serializes the spec to a PairSeq with base64 encoding.

marshal(BikePublicKeySpec) - Static method in class zeroecho.core.alg.bike.BikePublicKeySpec

Serializes the spec to a PairSeq with base64 encoding.

marshal(ChaChaKeyImportSpec) - Static method in class zeroecho.core.alg.chacha.ChaChaKeyImportSpec

Serializes this spec into a PairSeq, storing the key as Base64.

marshal(CmcePrivateKeySpec) - Static method in class zeroecho.core.alg.cmce.CmcePrivateKeySpec

Serializes the given private key spec into a PairSeq.

marshal(CmcePublicKeySpec) - Static method in class zeroecho.core.alg.cmce.CmcePublicKeySpec

Serializes the given public key spec into a PairSeq.

marshal(DhPrivateKeySpec) - Static method in class zeroecho.core.alg.dh.DhPrivateKeySpec

Marshals the given DH private key spec into a PairSeq.

marshal(DhPublicKeySpec) - Static method in class zeroecho.core.alg.dh.DhPublicKeySpec

Marshals the given DH public key spec into a PairSeq.

marshal(EcdsaPrivateKeySpec) - Static method in class zeroecho.core.alg.ecdsa.EcdsaPrivateKeySpec

Serializes this specification into a PairSeq.

marshal(EcdsaPublicKeySpec) - Static method in class zeroecho.core.alg.ecdsa.EcdsaPublicKeySpec

Serializes this specification into a PairSeq.

marshal(Ed25519PrivateKeySpec) - Static method in class zeroecho.core.alg.ed25519.Ed25519PrivateKeySpec

Serializes the given private key spec to a base64-encoded PairSeq.

marshal(Ed25519PublicKeySpec) - Static method in class zeroecho.core.alg.ed25519.Ed25519PublicKeySpec

Serializes the given public key spec to a base64-encoded PairSeq.

marshal(Ed448PrivateKeySpec) - Static method in class zeroecho.core.alg.ed448.Ed448PrivateKeySpec

Serializes this key spec into a PairSeq record.

marshal(Ed448PublicKeySpec) - Static method in class zeroecho.core.alg.ed448.Ed448PublicKeySpec

Serializes this key spec into a PairSeq record.

marshal(ElgamalPrivateKeySpec) - Static method in class zeroecho.core.alg.elgamal.ElgamalPrivateKeySpec

Serializes this spec into a PairSeq.

marshal(ElgamalPublicKeySpec) - Static method in class zeroecho.core.alg.elgamal.ElgamalPublicKeySpec

Serializes this spec into a PairSeq.

marshal(FrodoPrivateKeySpec) - Static method in class zeroecho.core.alg.frodo.FrodoPrivateKeySpec

Serializes this spec into a PairSeq, encoding the key as Base64 without padding.

marshal(FrodoPublicKeySpec) - Static method in class zeroecho.core.alg.frodo.FrodoPublicKeySpec

Serializes this spec into a PairSeq, encoding the key in Base64 without padding.

marshal(HmacKeyImportSpec) - Static method in class zeroecho.core.alg.hmac.HmacKeyImportSpec

Serializes a spec into a PairSeq.

marshal(HqcPrivateKeySpec) - Static method in class zeroecho.core.alg.hqc.HqcPrivateKeySpec

Serializes this spec into a PairSeq with Base64-encoded key data.

marshal(HqcPublicKeySpec) - Static method in class zeroecho.core.alg.hqc.HqcPublicKeySpec

Serializes this spec into a PairSeq with Base64-encoded key data.

marshal(KyberPrivateKeySpec) - Static method in class zeroecho.core.alg.kyber.KyberPrivateKeySpec

Serializes this spec into a PairSeq using Base64 encoding.

marshal(KyberPublicKeySpec) - Static method in class zeroecho.core.alg.kyber.KyberPublicKeySpec

Serializes this spec into a PairSeq using Base64 encoding.

marshal(LmsPrivateKeySpec) - Static method in class zeroecho.core.alg.lms.LmsPrivateKeySpec

Serializes this spec to a PairSeq.

marshal(LmsPublicKeySpec) - Static method in class zeroecho.core.alg.lms.LmsPublicKeySpec

Serializes this spec to a PairSeq.

marshal(MldsaPrivateKeySpec) - Static method in class zeroecho.core.alg.mldsa.MldsaPrivateKeySpec

Serializes the given spec into a PairSeq.

marshal(MldsaPublicKeySpec) - Static method in class zeroecho.core.alg.mldsa.MldsaPublicKeySpec

Serializes the given spec into a PairSeq.

marshal(NtruPrivateKeySpec) - Static method in class zeroecho.core.alg.ntru.NtruPrivateKeySpec

Serializes this specification into a simple name-value sequence.

marshal(NtruPublicKeySpec) - Static method in class zeroecho.core.alg.ntru.NtruPublicKeySpec

Serializes this specification into a simple name-value sequence.

marshal(NtrulPrimePrivateKeySpec) - Static method in class zeroecho.core.alg.ntruprime.NtrulPrimePrivateKeySpec

Serializes this specification into a PairSeq.

marshal(NtrulPrimePublicKeySpec) - Static method in class zeroecho.core.alg.ntruprime.NtrulPrimePublicKeySpec

Serializes this specification into a PairSeq.

marshal(SntruPrimePrivateKeySpec) - Static method in class zeroecho.core.alg.ntruprime.SntruPrimePrivateKeySpec

Serializes this specification into a PairSeq.

marshal(SntruPrimePublicKeySpec) - Static method in class zeroecho.core.alg.ntruprime.SntruPrimePublicKeySpec

Serializes this specification into a PairSeq.

marshal(RsaPrivateKeySpec) - Static method in class zeroecho.core.alg.rsa.RsaPrivateKeySpec

Marshals this spec to a PairSeq.

marshal(RsaPublicKeySpec) - Static method in class zeroecho.core.alg.rsa.RsaPublicKeySpec

Marshals this spec to a PairSeq.

marshal(SaberPrivateKeySpec) - Static method in class zeroecho.core.alg.saber.SaberPrivateKeySpec

Serializes this specification into a compact PairSeq form.

marshal(SaberPublicKeySpec) - Static method in class zeroecho.core.alg.saber.SaberPublicKeySpec

Serializes this specification into a compact PairSeq form.

marshal(SlhDsaPrivateKeySpec) - Static method in class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeySpec

Serializes the given spec into a PairSeq.

marshal(SlhDsaPublicKeySpec) - Static method in class zeroecho.core.alg.slhdsa.SlhDsaPublicKeySpec

Serializes the given spec into a PairSeq.

marshal(SphincsPlusPrivateKeySpec) - Static method in class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeySpec

Serializes this specification into a PairSeq.

marshal(SphincsPlusPublicKeySpec) - Static method in class zeroecho.core.alg.sphincsplus.SphincsPlusPublicKeySpec

Serializes this specification into a PairSeq.

marshal(XdhPrivateKeySpec) - Static method in class zeroecho.core.alg.xdh.XdhPrivateKeySpec

Serializes the given key specification into a PairSeq with base64 encoding.

marshal(XdhPublicKeySpec) - Static method in class zeroecho.core.alg.xdh.XdhPublicKeySpec

Serializes the given key specification into a PairSeq with base64 encoding.

marshal(XmssPrivateKeySpec) - Static method in class zeroecho.core.alg.xmss.XmssPrivateKeySpec

Serializes this spec to a PairSeq.

marshal(XmssPublicKeySpec) - Static method in class zeroecho.core.alg.xmss.XmssPublicKeySpec

Serializes this spec to a PairSeq.

marshal(XWingPrivateKeySpec) - Static method in class zeroecho.core.alg.xwing.XWingPrivateKeySpec

Serializes this spec to a PairSeq.

marshal(XWingPublicKeySpec) - Static method in class zeroecho.core.alg.xwing.XWingPublicKeySpec

Serializes this spec to a PairSeq.

Marshalling - Section in class zeroecho.core.alg.chacha.ChaChaKeyImportSpec

Marshalling - Section in class zeroecho.core.alg.cmce.CmcePrivateKeySpec

Marshalling - Section in class zeroecho.core.alg.cmce.CmcePublicKeySpec

mask() - Method in record class zeroecho.core.spec.AlgorithmIdentity.RsaPssParameters

Returns the value of the mask record component.

MASK_GENERATION - Enum constant in enum class zeroecho.core.spec.AlgorithmIdentity.Kind

Mask-generation function.

maskHash() - Method in record class zeroecho.core.spec.AlgorithmIdentity.RsaPssParameters

Returns the value of the maskHash record component.

MAX_DECODED_ITERATIONS - Static variable in record class zeroecho.core.storage.KeyringProtection

Absolute safety ceiling for decoded PBKDF2 iteration counts.

MAX_OPERATIONAL_ITERATIONS - Static variable in record class zeroecho.core.storage.KeyringProtection

Largest operationally accepted PBKDF2 iteration count.

maximum() - Method in record class zeroecho.core.ParameterConstraint

Returns the value of the maximum record component.

MAXIMUM_ENCODED_BYTES - Static variable in class zeroecho.pkix.cmp.CrmfRequest

Maximum complete CertReqMsg size in bytes.

MAXIMUM_EXTRA_CERTIFICATES - Static variable in class zeroecho.pkix.cmp.CmpProtectedMessage

Maximum supported request certificate candidates.

MAXIMUM_MESSAGE_BYTES - Static variable in class zeroecho.pkix.cmp.CmpProtectedMessage

Maximum complete incoming message size.

MAXIMUM_REQUEST_BYTES - Static variable in class zeroecho.pkix.scep.ScepCodec

Maximum accepted encoded request size, before CMS parsing or decryption.

MAXIMUM_SPKI_BYTES - Static variable in class zeroecho.pkix.PublicKeyIdentity

Maximum accepted encoded SPKI size.

maximumIterations() - Method in record class zeroecho.pkix.cmp.CmpPbmPolicy

Returns the value of the maximumIterations record component.

maximumSaltBytes() - Method in record class zeroecho.pkix.cmp.CmpPbmPolicy

Returns the value of the maximumSaltBytes record component.

maxKemCiphertextLen(int) - Method in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Sets a safety limit for the KEM ciphertext length accepted in decryption.

MCELIECE_348864 - Enum constant in enum class zeroecho.core.alg.cmce.CmceKeyGenSpec.Variant

McEliece 348864, standard parameter set (128-bit security).

MCELIECE_348864F - Enum constant in enum class zeroecho.core.alg.cmce.CmceKeyGenSpec.Variant

McEliece 348864, fast parameter set (128-bit security).

MCELIECE_460896 - Enum constant in enum class zeroecho.core.alg.cmce.CmceKeyGenSpec.Variant

McEliece 460896, standard parameter set (128-bit security, larger keys).

MCELIECE_460896F - Enum constant in enum class zeroecho.core.alg.cmce.CmceKeyGenSpec.Variant

McEliece 460896, fast parameter set (128-bit security, larger keys).

MCELIECE_6688128 - Enum constant in enum class zeroecho.core.alg.cmce.CmceKeyGenSpec.Variant

McEliece 6688128, standard parameter set (192-bit security).

MCELIECE_6688128F - Enum constant in enum class zeroecho.core.alg.cmce.CmceKeyGenSpec.Variant

McEliece 6688128, fast parameter set (192-bit security).

MCELIECE_6960119 - Enum constant in enum class zeroecho.core.alg.cmce.CmceKeyGenSpec.Variant

McEliece 6960119, standard parameter set (192-bit security, alternative form).

MCELIECE_6960119F - Enum constant in enum class zeroecho.core.alg.cmce.CmceKeyGenSpec.Variant

McEliece 6960119, fast parameter set (192-bit security, alternative form).

MCELIECE_8192128 - Enum constant in enum class zeroecho.core.alg.cmce.CmceKeyGenSpec.Variant

McEliece 8192128, standard parameter set (256-bit security).

MCELIECE_8192128F - Enum constant in enum class zeroecho.core.alg.cmce.CmceKeyGenSpec.Variant

McEliece 8192128, fast parameter set (256-bit security).

mceliece348864() - Static method in class zeroecho.core.alg.cmce.CmceKeyGenSpec

Convenience factory for CmceKeyGenSpec.Variant.MCELIECE_348864.

mceliece348864f() - Static method in class zeroecho.core.alg.cmce.CmceKeyGenSpec

Convenience factory for CmceKeyGenSpec.Variant.MCELIECE_348864F.

mceliece460896() - Static method in class zeroecho.core.alg.cmce.CmceKeyGenSpec

Convenience factory for CmceKeyGenSpec.Variant.MCELIECE_460896.

mceliece460896f() - Static method in class zeroecho.core.alg.cmce.CmceKeyGenSpec

Convenience factory for CmceKeyGenSpec.Variant.MCELIECE_460896F.

mceliece6688128() - Static method in class zeroecho.core.alg.cmce.CmceKeyGenSpec

Convenience factory for CmceKeyGenSpec.Variant.MCELIECE_6688128.

mceliece6688128f() - Static method in class zeroecho.core.alg.cmce.CmceKeyGenSpec

Convenience factory for CmceKeyGenSpec.Variant.MCELIECE_6688128F.

mceliece6960119() - Static method in class zeroecho.core.alg.cmce.CmceKeyGenSpec

Convenience factory for CmceKeyGenSpec.Variant.MCELIECE_6960119.

mceliece6960119f() - Static method in class zeroecho.core.alg.cmce.CmceKeyGenSpec

Convenience factory for CmceKeyGenSpec.Variant.MCELIECE_6960119F.

mceliece8192128() - Static method in class zeroecho.core.alg.cmce.CmceKeyGenSpec

Convenience factory for CmceKeyGenSpec.Variant.MCELIECE_8192128.

mceliece8192128f() - Static method in class zeroecho.core.alg.cmce.CmceKeyGenSpec

Convenience factory for CmceKeyGenSpec.Variant.MCELIECE_8192128F.

merge(List) - Method in class zeroecho.core.spec.AlgorithmIdentityCatalog

Returns a new additive snapshot containing this catalog and all extensions.

MessageAgreementContext - Interface in zeroecho.core.context

Extension of AgreementContext for message-based key agreement protocols.

messageTime() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns the optional sender time; the server applies its freshness policy.

messageType() - Method in class zeroecho.pkix.scep.ScepCodec.VerifiedRequest

Returns the authenticated operation.

messageType() - Method in record class zeroecho.pkix.scep.ScepPkiMessage

Returns the value of the messageType record component.

Metadata - Section in class zeroecho.core.CryptoAlgorithm

MGF1 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

MGF1 mask-generation identity.

minimum() - Method in record class zeroecho.core.ParameterConstraint

Returns the value of the minimum record component.

MINIMUM - Static variable in record class zeroecho.sdk.Pbkdf2Limits

Mandatory minimum PBKDF2 iteration count.

minimumIterations() - Method in record class zeroecho.pkix.cmp.CmpPbmPolicy

Returns the value of the minimumIterations record component.

minimumSaltBytes() - Method in record class zeroecho.pkix.cmp.CmpPbmPolicy

Returns the value of the minimumSaltBytes record component.

minStrength(int) - Static method in interface zeroecho.core.policy.CryptoPolicy

Returns a policy that enforces a minimum estimated key strength.

ML_DSA_44 - Enum constant in enum class zeroecho.core.alg.mldsa.MldsaKeyGenSpec.ParameterSet

ML-DSA-44 (~128-bit security).

ML_DSA_44 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ML-DSA-44 signing suite (FIPS 204, security level 2).

ML_DSA_44_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ML-DSA-44 public-key identity (FIPS 204).

ML_DSA_44_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ML-DSA-44 signature identity (FIPS 204, security level 2).

ML_DSA_65 - Enum constant in enum class zeroecho.core.alg.mldsa.MldsaKeyGenSpec.ParameterSet

ML-DSA-65 (~192-bit security).

ML_DSA_65 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ML-DSA-65 signing suite (FIPS 204, security level 3).

ML_DSA_65_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ML-DSA-65 public-key identity (FIPS 204).

ML_DSA_65_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ML-DSA-65 signature identity (FIPS 204, security level 3).

ML_DSA_87 - Enum constant in enum class zeroecho.core.alg.mldsa.MldsaKeyGenSpec.ParameterSet

ML-DSA-87 (~256-bit security).

ML_DSA_87 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ML-DSA-87 signing suite (FIPS 204, security level 5).

ML_DSA_87_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ML-DSA-87 public-key identity (FIPS 204).

ML_DSA_87_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ML-DSA-87 signature identity (FIPS 204, security level 5).

MldsaAlgorithm - Class in zeroecho.core.alg.mldsa

ML-DSA (FIPS 204) signature algorithm binding for the ZeroEcho framework.

MldsaAlgorithm() - Constructor for class zeroecho.core.alg.mldsa.MldsaAlgorithm

Creates a new ML-DSA algorithm instance and registers its capabilities.

MldsaKeyGenBuilder - Class in zeroecho.core.alg.mldsa

Key pair builder for ML-DSA (FIPS 204) using the Bouncy Castle provider.

MldsaKeyGenBuilder() - Constructor for class zeroecho.core.alg.mldsa.MldsaKeyGenBuilder

Creates a stateless ML-DSA key-pair generator.

MldsaKeyGenSpec - Class in zeroecho.core.alg.mldsa

Specification for generating ML-DSA key pairs (FIPS 204).

MldsaKeyGenSpec.ParameterSet - Enum Class in zeroecho.core.alg.mldsa

ML-DSA parameter sets as defined by FIPS 204.

MldsaKeyGenSpec.PreHash - Enum Class in zeroecho.core.alg.mldsa

Optional pre-hash variant selection.

MldsaPrivateKeyBuilder - Class in zeroecho.core.alg.mldsa

Builder for importing ML-DSA private keys from encoded specifications.

MldsaPrivateKeyBuilder() - Constructor for class zeroecho.core.alg.mldsa.MldsaPrivateKeyBuilder

Creates a stateless ML-DSA private-key importer.

MldsaPrivateKeySpec - Class in zeroecho.core.alg.mldsa

Encoded representation of an ML-DSA private key.

MldsaPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.mldsa.MldsaPrivateKeySpec

Creates a new specification using the default provider "BC".

MldsaPrivateKeySpec(byte[], String) - Constructor for class zeroecho.core.alg.mldsa.MldsaPrivateKeySpec

Creates a new specification using the supplied provider.

MldsaPublicKeyBuilder - Class in zeroecho.core.alg.mldsa

Builder for importing ML-DSA public keys from encoded specifications.

MldsaPublicKeyBuilder() - Constructor for class zeroecho.core.alg.mldsa.MldsaPublicKeyBuilder

Creates a stateless ML-DSA public-key importer.

MldsaPublicKeySpec - Class in zeroecho.core.alg.mldsa

Encoded representation of an ML-DSA public key.

MldsaPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.mldsa.MldsaPublicKeySpec

Creates a new specification using the default provider "BC".

MldsaPublicKeySpec(byte[], String) - Constructor for class zeroecho.core.alg.mldsa.MldsaPublicKeySpec

Creates a new specification using the supplied provider.

mldsaSign(ZeroEchoSession, PrivateKey) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for an ML-DSA signing engine.

MldsaSignatureContext - Class in zeroecho.core.alg.mldsa

Streaming signature context for ML-DSA (FIPS 204).

MldsaSignatureContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.mldsa.MldsaSignatureContext

Creates a signing context bound to a private key.

MldsaSignatureContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.mldsa.MldsaSignatureContext

Creates a verification context bound to a public key.

mldsaVerify(ZeroEchoSession, PublicKey) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for an ML-DSA verification engine.

mode - Variable in class zeroecho.sdk.content.api.AbstractExportableDataContent

The export mode (RAW, BASH_SCRIPT, CMD_SCRIPT, etc.).

mode() - Method in class zeroecho.core.alg.aes.AesSpec

Returns the selected AES mode.

mode() - Method in class zeroecho.core.alg.rsa.RsaSigSpec

Returns the signature mode.

mode() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec

Returns the construction mode of this specification.

mode(AesSpec.Mode) - Method in class zeroecho.core.alg.aes.AesSpec.Builder

Selects the AES mode.

modeCbcNoPadding() - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Selects CBC/NOPADDING.

modeCbcPkcs5() - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Selects CBC/PKCS5PADDING.

modeCtr() - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Selects CTR with NOPADDING.

modeGcm(int) - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Selects GCM and sets the authentication tag length in bits.

Modes - Section in class zeroecho.core.alg.rsa.RsaSignatureContext

Modes and outputs - Section in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Modes and usage - Section in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Mode selection - Section in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder

MSG_CERT_REP - Static variable in class zeroecho.pkix.scep.ScepCodec

SCEP messageType value for CertRep.

MSG_GET_CERT - Static variable in class zeroecho.pkix.scep.ScepCodec

SCEP messageType value for GetCert.

MSG_GET_CERT_INITIAL - Static variable in class zeroecho.pkix.scep.ScepCodec

SCEP messageType value for GetCertInitial.

MSG_GET_CRL - Static variable in class zeroecho.pkix.scep.ScepCodec

SCEP messageType value for GetCRL.

MSG_PKCS_REQ - Static variable in class zeroecho.pkix.scep.ScepCodec

SCEP messageType value for PKCSReq.

MultiRecipientContent - Interface in zeroecho.sdk.guard

Represents one-shot multi-recipient content that owns temporary recipient resources until processing or explicit cleanup.

MultiRecipientDataSourceBuilder - Class in zeroecho.sdk.guard

Builds a data content pipeline that supports multiple recipients and delegates payload encryption to AES or ChaCha builders.

N

name() - Method in record class zeroecho.core.ParameterConstraint

Returns the value of the name record component.

name() - Method in record class zeroecho.core.spec.AlgorithmIdentity.Family

Returns the value of the name record component.

name() - Method in record class zeroecho.core.TemplateParameter

Returns the value of the name record component.

name() - Method in record class zeroecho.pkix.ocsp.ResponderId.ByName

Returns the value of the name record component.

NamedParameters(AlgorithmIdentity.Family) - Constructor for record class zeroecho.core.spec.AlgorithmIdentity.NamedParameters

Creates named parameters.

namespace() - Method in record class zeroecho.core.spec.AlgorithmIdentity.Family

Returns the value of the namespace record component.

next() - Method in class zeroecho.core.marshal.PairSeq.Cursor

Advances to the next pair if available.

nextInt(int) - Static method in class zeroecho.core.util.RandomSupport

Returns a uniform value below the bound.

nextUpdate() - Method in record class zeroecho.pkix.ocsp.OcspResponse.SingleResponse

Returns the value of the nextUpdate record component.

nextUpdate(Instant) - Method in interface zeroecho.pkix.crl.CrlBuilder

Sets nextUpdate (optional but recommended).

nist(int, int) - Static method in record class zeroecho.core.SecurityLevel

Creates a post-quantum security level with a NIST PQC category.

nistLevel() - Method in record class zeroecho.core.SecurityLevel

Returns the value of the nistLevel record component.

NIST PQC categories - Section in record class zeroecho.core.SecurityLevel

NON_REPUDIATION - Enum constant in enum class zeroecho.pkix.KeyUsage

nonRepudiation / contentCommitment (bit 1).

nonce() - Method in interface zeroecho.pkix.ocsp.OcspRequest

Returns the request nonce, if present.

nonce() - Method in interface zeroecho.pkix.ocsp.OcspResponse

Returns the response nonce, if present.

nonce(byte[]) - Method in interface zeroecho.pkix.ocsp.OcspResponseBuilder

Adds a response nonce (echoing the request nonce).

nonce(String) - Static method in class zeroecho.core.ConfluxKeys

Returns a typed key for a nonce value of a given algorithm.

NONE - Enum constant in enum class zeroecho.core.alg.mldsa.MldsaKeyGenSpec.PreHash

No pre-hash parameter set (pure ML-DSA).

NONE - Enum constant in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.PreHash

No pre-hash parameter set (pure SLH-DSA).

NONE - Static variable in interface zeroecho.core.io.CancellationSignal

A signal that never requests cancellation.

noop() - Static method in interface zeroecho.core.audit.AuditListener

Returns a ready-to-use listener that performs no actions.

noPadding() - Static method in class zeroecho.core.alg.elgamal.ElgamalEncSpec

Returns an ElgamalEncSpec with no padding.

noPadding() - Method in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Selects the no-padding variant of ElGamal encryption.

NOPADDING - Enum constant in enum class zeroecho.core.alg.aes.AesSpec.Padding

No padding.

NOPADDING - Enum constant in enum class zeroecho.core.alg.elgamal.ElgamalEncSpec.Padding

No padding applied.

Notes - Section in class zeroecho.core.alg.chacha.ChaCha20Poly1305Spec

Notes - Section in class zeroecho.core.alg.common.agreement.GenericJcaAgreementContext

Notes - Section in class zeroecho.core.alg.ecdh.EcdhAlgorithm

Notes - Section in class zeroecho.core.alg.rsa.RsaSignatureContext

Notes - Section in class zeroecho.sdk.util.Kdf

Notes - Section in interface zeroecho.core.context.SignatureContext

Notes - Section in package zeroecho.sdk.builders.core

Notes - Section in package zeroecho.sdk.content.api

Notes - Section in record class zeroecho.sdk.hybrid.kex.HybridKexProfile

Notes - Section in zeroecho.core.io.CipherTransformInputStreamBuilder.withFinalizationOutputChunks(int)

NtruAlgorithm - Class in zeroecho.core.alg.ntru

NtruAlgorithm exposes the NTRU KEM from the Bouncy Castle PQC provider and adapts it for both KEM and message-based agreement roles.

NtruAlgorithm() - Constructor for class zeroecho.core.alg.ntru.NtruAlgorithm

Creates an algorithm instance that registers KEM and AGREEMENT roles and wires asymmetric key builders for generation and X.509/PKCS#8 import.

NtruKemContext - Class in zeroecho.core.alg.ntru

NtruKemContext performs NTRU key encapsulation and decapsulation against a single key and parameter set.

NtruKemContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.ntru.NtruKemContext

Creates a decapsulation context bound to the provided private key.

NtruKemContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.ntru.NtruKemContext

Creates an encapsulation context bound to the provided public key.

NtruKeyGenSpec - Class in zeroecho.core.alg.ntru

NtruKeyGenSpec selects an NTRU parameter set for key pair generation.

NtruKeyGenSpec.Variant - Enum Class in zeroecho.core.alg.ntru

Variant enumerates supported NTRU parameter sets for key generation.

ntrulpr1013() - Static method in class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec

Creates a key generation specification for the NtrulPrimeKeyGenSpec.Variant.NTRULPR1013 parameter set.

NTRULPR1013 - Enum constant in enum class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec.Variant

Variant beyond 256-bit, with larger parameters.

ntrulpr1277() - Static method in class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec

Creates a key generation specification for the NtrulPrimeKeyGenSpec.Variant.NTRULPR1277 parameter set.

NTRULPR1277 - Enum constant in enum class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec.Variant

Highest-strength standardized variant.

ntrulpr653() - Static method in class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec

Creates a key generation specification for the NtrulPrimeKeyGenSpec.Variant.NTRULPR653 parameter set.

NTRULPR653 - Enum constant in enum class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec.Variant

Variant with ~128-bit classical security.

ntrulpr761() - Static method in class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec

Creates a key generation specification for the NtrulPrimeKeyGenSpec.Variant.NTRULPR761 parameter set.

NTRULPR761 - Enum constant in enum class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec.Variant

Variant with ~192-bit classical security.

ntrulpr857() - Static method in class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec

Creates a key generation specification for the NtrulPrimeKeyGenSpec.Variant.NTRULPR857 parameter set.

NTRULPR857 - Enum constant in enum class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec.Variant

Variant with ~256-bit classical security.

ntrulpr953() - Static method in class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec

Creates a key generation specification for the NtrulPrimeKeyGenSpec.Variant.NTRULPR953 parameter set.

NTRULPR953 - Enum constant in enum class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec.Variant

Variant beyond 256-bit, with larger parameters.

NtrulPrimeAlgorithm - Class in zeroecho.core.alg.ntruprime

Configures and exposes the NTRU LPRime post-quantum KEM and a message-agreement adapter backed by the Bouncy Castle PQC provider.

NtrulPrimeAlgorithm() - Constructor for class zeroecho.core.alg.ntruprime.NtrulPrimeAlgorithm

Creates a new algorithm wrapper for NTRU LPRime and registers its KEM and agreement capabilities, together with key builders for generation and import.

NtrulPrimeKemContext - Class in zeroecho.core.alg.ntruprime

KEM context for NTRU LPRime that performs encapsulation and decapsulation using the underlying key material.

NtrulPrimeKemContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.ntruprime.NtrulPrimeKemContext

Creates a decapsulation context bound to a holder private key.

NtrulPrimeKemContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.ntruprime.NtrulPrimeKemContext

Creates an encapsulation context bound to a recipient public key.

NtrulPrimeKeyGenSpec - Class in zeroecho.core.alg.ntruprime

Algorithm-specific key generation parameters for NTRU LPRime.

NtrulPrimeKeyGenSpec.Variant - Enum Class in zeroecho.core.alg.ntruprime

Enumeration of supported NTRU LPRime parameter sets.

NtrulPrimePrivateKeySpec - Class in zeroecho.core.alg.ntruprime

Specification wrapper for an encoded NTRU LPRime private key in PKCS#8 format.

NtrulPrimePrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.ntruprime.NtrulPrimePrivateKeySpec

Constructs a new private key specification from a PKCS#8-encoded byte array.

NtrulPrimePublicKeySpec - Class in zeroecho.core.alg.ntruprime

Specification wrapper for an encoded NTRU LPRime public key in X.509 format.

NtrulPrimePublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.ntruprime.NtrulPrimePublicKeySpec

Constructs a new public key specification from an X.509-encoded byte array.

NtruPrivateKeySpec - Class in zeroecho.core.alg.ntru

NtruPrivateKeySpec holds a PKCS#8-encoded NTRU private key and supports a simple marshal/unmarshal form.

NtruPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.ntru.NtruPrivateKeySpec

Creates a new specification from PKCS#8-encoded bytes.

NtruPublicKeySpec - Class in zeroecho.core.alg.ntru

NtruPublicKeySpec holds an X.509 SubjectPublicKeyInfo encoded NTRU public key and supports a simple marshal/unmarshal form.

NtruPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.ntru.NtruPublicKeySpec

Creates a new specification from X.509 SubjectPublicKeyInfo encoded bytes.

NullKey - Class in zeroecho.core

Sentinel Key representing the intentional absence of cryptographic key material.

number - Variable in enum class zeroecho.core.alg.mldsa.MldsaKeyGenSpec.ParameterSet

Parameter set number (44/65/87).

O

oaep(RsaEncSpec.Hash) - Static method in class zeroecho.core.alg.rsa.RsaEncSpec

Creates an OAEP spec with the given hash function and no label.

oaep(RsaEncSpec.Hash) - Method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Selects RSA-OAEP with the given hash algorithm for MGF1 and hash.

OAEP - Enum constant in enum class zeroecho.core.alg.rsa.RsaEncSpec.Padding

Optimal Asymmetric Encryption Padding (PKCS#1 OAEP).

oaepLabel(byte[]) - Method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Sets the OAEP label as arbitrary bytes.

oaepLabelUtf8(String) - Method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Sets the OAEP label from a UTF-8 string.

oaepSha256() - Method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Selects RSA-OAEP with SHA-256 for MGF1 and hash.

OCSP_SIGNING - Static variable in record class zeroecho.pkix.ExtendedKeyUsage

id-kp-OCSPSigning.

OcspRequest - Interface in zeroecho.pkix.ocsp

A parsed OCSP request (RFC 6960).

OcspResponse - Interface in zeroecho.pkix.ocsp

A parsed OCSP response (RFC 6960), used to validate a generated/persisted OCSP status object at a service boundary.

OcspResponse.SingleResponse - Record Class in zeroecho.pkix.ocsp

One certificate-status entry within an OCSP response.

ocspResponseBuilder() - Method in class zeroecho.pkix.bc.BcPkixProvider

ocspResponseBuilder() - Static method in class zeroecho.pkix.Pkix

Creates an OCSP response builder.

ocspResponseBuilder() - Method in interface zeroecho.pkix.spi.PkixProvider

Creates a new OCSP response builder.

OcspResponseBuilder - Interface in zeroecho.pkix.ocsp

A fluent builder for unsigned OCSP ResponseData or a successful, signed OCSP response (RFC 6960) carrying a BasicOCSPResponse.

of(String...) - Static method in class zeroecho.core.marshal.PairSeq

Creates a new sequence from an even-length list of keys and values.

of(String...) - Static method in record class zeroecho.pkix.ExtendedKeyUsage

Creates an extended key usage from the given purpose OIDs.

of(String, MldsaKeyGenSpec.ParameterSet, MldsaKeyGenSpec.PreHash) - Static method in class zeroecho.core.alg.mldsa.MldsaKeyGenSpec

Creates a new specification with explicit algorithm parameters.

of(String, SlhDsaKeyGenSpec.Hash, SlhDsaKeyGenSpec.Security, SlhDsaKeyGenSpec.Variant, SlhDsaKeyGenSpec.PreHash) - Static method in class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec

Creates a new specification with explicit algorithm parameters.

of(String, SphincsPlusKeyGenSpec.Hash, SphincsPlusKeyGenSpec.Security, SphincsPlusKeyGenSpec.Variant, SphincsPlusKeyGenSpec.Mode) - Static method in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec

Creates a new specification with explicit algorithm parameters.

of(BikeKeyGenSpec.Variant) - Static method in class zeroecho.core.alg.bike.BikeKeyGenSpec

Creates a new specification for the given BIKE variant.

of(CmceKeyGenSpec.Variant) - Static method in class zeroecho.core.alg.cmce.CmceKeyGenSpec

Creates a new key generation spec bound to a specific variant.

of(FrodoKeyGenSpec.Variant) - Static method in class zeroecho.core.alg.frodo.FrodoKeyGenSpec

Creates a spec from a given variant.

of(HqcKeyGenSpec.Variant) - Static method in class zeroecho.core.alg.hqc.HqcKeyGenSpec

Creates a specification for the given HQC parameter set.

of(NtrulPrimeKeyGenSpec.Variant) - Static method in class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec

Creates a specification from the given variant.

of(SntruPrimeKeyGenSpec.Variant) - Static method in class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec

Creates a specification from the given variant.

of(SaberKeyGenSpec.Variant) - Static method in class zeroecho.core.alg.saber.SaberKeyGenSpec

Creates a specification for a given variant.

OFF - Enum constant in enum class zeroecho.core.audit.AuditMode

Emits one context-creation event and returns the original context.

oid() - Method in class zeroecho.pkix.AlgorithmIdentifier

Returns the dotted-decimal object identifier.

oid() - Method in record class zeroecho.pkix.CertificateExtension

Returns the value of the oid record component.

oid() - Method in record class zeroecho.pkix.csr.CsrAttribute

Returns the value of the oid record component.

oid() - Method in record class zeroecho.pkix.GeneralName.RegisteredId

Returns the value of the oid record component.

OID_ROOT - Static variable in class zeroecho.core.alg.EgothorAlgorithmOids

Egothor organisation root OID (IANA PEN 31424).

OID_SPHINCS_PLUS - Static variable in class zeroecho.core.alg.EgothorAlgorithmOids

SPHINCS+ algorithm arc (ZeroEcho default parameter set).

OID_SPHINCS_PLUS_CERTIFICATE_SIGNATURE - Static variable in class zeroecho.core.alg.EgothorAlgorithmOids

SPHINCS+ certificate signature algorithm OID.

OID_SPHINCS_PLUS_CRL_SIGNATURE - Static variable in class zeroecho.core.alg.EgothorAlgorithmOids

SPHINCS+ CRL signature algorithm OID.

OID_SPHINCS_PLUS_CSR_SIGNATURE - Static variable in class zeroecho.core.alg.EgothorAlgorithmOids

SPHINCS+ CSR signature algorithm OID.

OID_SPHINCS_PLUS_OCSP_REQUEST_SIGNATURE - Static variable in class zeroecho.core.alg.EgothorAlgorithmOids

SPHINCS+ OCSP request signature algorithm OID.

OID_SPHINCS_PLUS_SPKI - Static variable in class zeroecho.core.alg.EgothorAlgorithmOids

SPHINCS+ SubjectPublicKeyInfo OID.

OID_ZEROECHO - Static variable in class zeroecho.core.alg.EgothorAlgorithmOids

ZeroEcho platform cryptography arc.

oldCertificate() - Method in class zeroecho.pkix.cmp.CrmfRequest

Returns the signed standard predecessor reference, if supplied.

onAgreementDerived(String, int) - Method in interface zeroecho.core.audit.AuditListener

Notification that an agreement secret was derived.

onAgreementDerived(String, int) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs that an agreement secret was derived with the reported length only.

onAgreementPeerMessageGet(String, int) - Method in interface zeroecho.core.audit.AuditListener

Notification that a peer message was retrieved from a message agreement context.

onAgreementPeerMessageGet(String, int) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs that a peer message was retrieved from a message agreement context.

onAgreementPeerMessageSet(String, int) - Method in interface zeroecho.core.audit.AuditListener

Notification that a peer message was provided to a message agreement context.

onAgreementPeerMessageSet(String, int) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs that a peer message was provided to a message agreement context.

onAgreementPeerSet(String, String) - Method in interface zeroecho.core.audit.AuditListener

Notification that a peer public key was provided to an agreement context.

onAgreementPeerSet(String, String) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs that a peer public key was provided to an agreement context.

onBytes(KeyUsage, long) - Method in interface zeroecho.core.audit.AuditListener

Legacy cumulative byte counter for any role.

onBytes(KeyUsage, long) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs the legacy cumulative byte counter.

onCompleted() - Method in class zeroecho.core.io.AbstractPassthroughInputStream

Notifies that the stream has fully completed.

onContextClosed(String, long, long, long) - Method in interface zeroecho.core.audit.AuditListener

Closure notification with totals and elapsed time.

onContextClosed(String, long, long, long) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs closure totals and elapsed time for the correlation id.

onContextCreatedMeta(String, String, String, KeyUsage, String, Map) - Method in interface zeroecho.core.audit.AuditListener

Creation event with correlation id and non-secret specification metadata.

onContextCreatedMeta(String, String, String, KeyUsage, String, Map) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs creation metadata with correlation id and non-secret spec attributes.

onDigest(Consumer) - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Registers a callback to receive a defensive copy of the finalized digest.

One-shot API - Section in class zeroecho.core.alg.ed25519.Ed25519SignatureContext

One-shot API - Section in class zeroecho.core.alg.ed448.Ed448SignatureContext

OneShotContent - Interface in zeroecho.core.io

Provider-independent one-shot streaming input.

onFailure(String, String, String, Throwable) - Method in interface zeroecho.core.audit.AuditListener

Failure during streaming or reflective invocation.

onFailure(String, String, String, Throwable) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs a failure with a structured summary and optional stack trace.

onHeaderRead(String, String, int, int, int, int) - Method in interface zeroecho.core.audit.AuditListener

Notification that a header was read from a stream.

onHeaderRead(String, String, int, int, int, int) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs that a header was read from a stream.

onHeaderWritten(String, String, int, int, int, int) - Method in interface zeroecho.core.audit.AuditListener

Notification that a header was written to a stream.

onHeaderWritten(String, String, int, int, int, int) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs that a header was written to a stream.

onKdfUsed(String, String, int, int, int, Integer) - Method in interface zeroecho.core.audit.AuditListener

Summary of key derivation function usage.

onKdfUsed(String, String, int, int, int, Integer) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs a KDF usage summary.

onKemDecapsulated(int) - Method in interface zeroecho.core.audit.AuditListener

Legacy KEM decapsulation event.

onKemDecapsulated(int) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs legacy KEM decapsulation length.

onKemEncapsulated(int, int) - Method in interface zeroecho.core.audit.AuditListener

Legacy KEM encapsulation event.

onKemEncapsulated(int, int) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs legacy KEM encapsulation lengths.

onKeyBuilt(String, String, AlgorithmKeySpec, Key) - Method in interface zeroecho.core.audit.AuditListener

Emitted after a key is constructed or imported.

onKeyBuilt(String, String, AlgorithmKeySpec, Key) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs key construction or import.

onKeyDestroyed(String, String, Key) - Method in interface zeroecho.core.audit.AuditListener

Emitted when a key was destroyed.

onKeyDestroyed(String, String, Key) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs best-effort key destruction.

onKeyGenerated(String, String, AlgorithmKeySpec, KeyPair) - Method in interface zeroecho.core.audit.AuditListener

Emitted after key pair generation via SPI.

onKeyGenerated(String, String, AlgorithmKeySpec, KeyPair) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs key pair generation with non-secret metadata.

onProgress(String, long, long) - Method in interface zeroecho.core.audit.AuditListener

Streaming progress for a context, split into body and trailer bytes.

onProgress(String, long, long) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs streaming progress for the given context id.

onRandomMaterial(String, String, String, int) - Method in interface zeroecho.core.audit.AuditListener

Notification about random material generation.

onRandomMaterial(String, String, String, int) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs random material generation such as IVs, salts, nonces, or key bytes.

onSignature(Consumer) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Registers a callback that receives a defensive copy of the finalized signature bytes in sign mode.

onTagProduced(String, int, String) - Method in interface zeroecho.core.audit.AuditListener

Notification that a tag or signature was produced at end of stream.

onTagProduced(String, int, String) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs that a tag or signature was produced.

onVerified(Consumer) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Registers a callback that receives the verification result in verify mode.

onVerifyResult(String, boolean, String, String, int) - Method in interface zeroecho.core.audit.AuditListener

Verification outcome for contexts operating in verify mode.

onVerifyResult(String, boolean, String, String, int) - Method in class zeroecho.core.audit.JulAuditListenerStd

Logs verification outcome for verify mode.

open(Path) - Static method in class zeroecho.core.storage.LocalStatefulSigningAuthority

Opens a previously initialized authority without creating missing state.

open(Path, KeyringPassword) - Static method in class zeroecho.core.storage.KeyringStore

Opens an encrypted keyring with the standard protection policy.

open(Path, KeyringPassword, KeyringProtection) - Static method in class zeroecho.core.storage.KeyringStore

Opens an encrypted keyring.

openStream() - Method in class zeroecho.core.io.ContentSlice

openStream() - Method in class zeroecho.core.io.ImmutableByteContent

openStream() - Method in interface zeroecho.core.io.OneShotContent

Opens the only sequential reader.

openStream() - Method in interface zeroecho.core.io.RepeatableContent

Opens a new sequential reader.

operation() - Method in record class zeroecho.core.KeyOperationInfo

Returns the value of the operation record component.

Operation - Section in interface zeroecho.core.context.DigestContext

Operation - Section in interface zeroecho.core.context.MacContext

Operation - Section in interface zeroecho.core.context.SignatureContext

operationalIterationMaximum() - Method in record class zeroecho.core.storage.KeyringProtection

Returns the value of the operationalIterationMaximum record component.

operationalMaximum() - Method in record class zeroecho.sdk.Pbkdf2Limits

Returns the value of the operationalMaximum record component.

Operation modes - Section in interface zeroecho.core.tag.TagEngine

Operation modes - Section in package zeroecho.core.tag

OR - Enum constant in enum class zeroecho.sdk.hybrid.signature.HybridSignatureProfile.VerifyRule

At least one component signature must verify successfully.

OtherName(String, byte[]) - Constructor for record class zeroecho.pkix.GeneralName.OtherName

Canonicalizing constructor.

outBuf - Variable in class zeroecho.core.io.AbstractChunkTransformInputStream

Output buffer storing transformed bytes awaiting consumption.

outChunkSize - Variable in class zeroecho.core.io.AbstractChunkTransformInputStream

Size of one logical output chunk.

outChunkSize() - Method in record class zeroecho.core.alg.rsa.BlockGeometry

Returns the value of the outChunkSize record component.

outLen - Variable in class zeroecho.core.io.AbstractChunkTransformInputStream

Number of valid bytes currently in outBuf.

outLenBytes() - Method in record class zeroecho.sdk.hybrid.kex.HybridKexProfile

Returns the value of the outLenBytes record component.

outPtr - Variable in class zeroecho.core.io.AbstractChunkTransformInputStream

Current read position within outBuf.

outputLenBytes() - Method in class zeroecho.core.alg.digest.DigestSpec

Returns the requested output length in bytes.

Output modes - Section in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

OutputToInputStreamAdapter - Class in zeroecho.sdk.util

An abstract adapter that converts an OutputStream-based transformation (such as encryption or compression) into an InputStream-based one.

OutputToInputStreamAdapter(InputStream) - Constructor for class zeroecho.sdk.util.OutputToInputStreamAdapter

Constructs a new adapter wrapping the specified input stream using the default buffer size.

OutputToInputStreamAdapter(InputStream, int) - Constructor for class zeroecho.sdk.util.OutputToInputStreamAdapter

Constructs a new adapter wrapping the specified input stream with a given buffer size for transformation output.

Overview - Section in class zeroecho.core.alg.kyber.KyberAlgorithm

Overview - Section in class zeroecho.core.alg.kyber.KyberKemContext

Overview - Section in class zeroecho.core.alg.lms.LmsAlgorithm

Overview - Section in class zeroecho.core.alg.ntruprime.NtrulPrimeAlgorithm

Overview - Section in class zeroecho.core.alg.ntruprime.NtrulPrimeKemContext

Overview - Section in class zeroecho.core.alg.ntruprime.SntruPrimeAlgorithm

Overview - Section in class zeroecho.core.alg.ntruprime.SntruPrimeKemContext

Overview - Section in class zeroecho.core.alg.xmss.XmssAlgorithm

Overview - Section in class zeroecho.core.alg.xwing.XWingAlgorithm

Overview - Section in class zeroecho.core.io.TailStrippingInputStream

Overview - Section in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Overview - Section in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Overview - Section in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Overview - Section in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Overview - Section in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Overview - Section in class zeroecho.sdk.io.SignatureTrailerInputStream

Overview - Section in package zeroecho.logging

Overview - Section in package zeroecho.sdk.guard

Overview - Section in zeroecho.core.alg.kyber.KyberAlgorithm.KyberAlgorithm()

P

P256 - Enum constant in enum class zeroecho.core.alg.ecdh.EcdhCurveSpec

NIST P-256 (secp256r1), approx.

P256 - Enum constant in enum class zeroecho.core.alg.ecdsa.EcdsaCurveSpec

NIST P-256 (secp256r1), SHA-256 binding, 64-byte signatures.

P384 - Enum constant in enum class zeroecho.core.alg.ecdh.EcdhCurveSpec

NIST P-384 (secp384r1), approx.

P384 - Enum constant in enum class zeroecho.core.alg.ecdsa.EcdsaCurveSpec

NIST P-384 (secp384r1), SHA-384 binding, 96-byte signatures.

P512 - Enum constant in enum class zeroecho.core.alg.ecdh.EcdhCurveSpec

NIST P-521 (secp521r1), approx.

P512 - Enum constant in enum class zeroecho.core.alg.ecdsa.EcdsaCurveSpec

NIST P-521 (secp521r1), SHA-512 binding, 132-byte signatures.

Pack7LStreamWriter - Class in zeroecho.sdk.util

A streaming writer that reads a variable-length 7-bit encoded length prefix from the input data and writes the subsequent payload to a target OutputStream.

Pack7LStreamWriter(OutputStream) - Constructor for class zeroecho.sdk.util.Pack7LStreamWriter

Constructs a new Pack7LStreamWriter.

Package map (lib) - Section in Overview

padding() - Method in class zeroecho.core.alg.aes.AesSpec

Returns the selected padding scheme.

padding() - Method in class zeroecho.core.alg.elgamal.ElgamalEncSpec

Returns the selected padding mode.

padding() - Method in class zeroecho.core.alg.rsa.RsaEncSpec

Returns the padding scheme.

padding(AesSpec.Padding) - Method in class zeroecho.core.alg.aes.AesSpec.Builder

Selects the padding scheme for CBC.

Padding modes - Section in class zeroecho.core.alg.elgamal.ElgamalEncSpec

Padding subtleties - Section in class zeroecho.core.alg.elgamal.ElgamalCipherContext

PairSeq - Class in zeroecho.core.marshal

Immutable sequence of string key-value pairs with cursor-based iteration and simple text serialization.

PairSeq.Cursor - Class in zeroecho.core.marshal

Forward-only iterator over the pairs of a PairSeq.

PairSeqCodec<T> - Class in zeroecho.core.marshal

Reflection-based Codec that marshals and unmarshals domain objects to and from PairSeq.

PairSeqCodec(Class) - Constructor for class zeroecho.core.marshal.PairSeqCodec

Creates a codec bound to a specific domain type.

ParameterConstraint - Record Class in zeroecho.core

Immutable machine-readable validation for one template argument.

ParameterConstraint(String, ParameterConstraint.ValueKind, boolean, Object, List, Long, Long, long, long) - Constructor for record class zeroecho.core.ParameterConstraint

Validates and snapshots the constraint.

ParameterConstraint.ValueKind - Enum Class in zeroecho.core

Machine-readable scalar kind; legacy types retain their presentation type.

parameterForm() - Method in class zeroecho.pkix.AlgorithmIdentifier

Returns the parameter encoding form.

parameters() - Method in class zeroecho.core.alg.elgamal.ElgamalParamSpec

Returns the underlying ElGamal parameters.

parameters() - Method in record class zeroecho.core.ParameterSetDescriptor.Template

Returns the value of the parameters record component.

parameters() - Method in class zeroecho.core.spec.AlgorithmIdentity

Returns the immutable typed parameters.

parameters() - Method in class zeroecho.pkix.AlgorithmIdentifier

Returns a copy of the exact DER parameters, or null unless the form is AlgorithmIdentifier.ParameterForm.EXACT_DER.

Parameters - Section in class zeroecho.core.alg.rsa.RsaKeyGenSpec

Parameters - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec

parameterSet() - Method in class zeroecho.core.alg.mldsa.MldsaKeyGenSpec

Returns the ML-DSA parameter set.

parameterSet() - Method in record class zeroecho.core.spec.AlgorithmIdentity.NamedParameters

Returns the value of the parameterSet record component.

ParameterSetDescriptor<S> - Interface in zeroecho.core

Describes a named, discoverable parameter set (or parameterized template) for a CryptoAlgorithm.

ParameterSetDescriptor.Concrete<S> - Record Class in zeroecho.core

A fully pre-built, named parameter set carrying a ready-to-use spec.

ParameterSetDescriptor.Template<S> - Record Class in zeroecho.core

A parameterized family of parameter sets driven by user-supplied arguments.

parameterSets() - Method in class zeroecho.core.alg.aes.AesAlgorithm

parameterSets() - Method in class zeroecho.core.alg.bike.BikeAlgorithm

parameterSets() - Method in class zeroecho.core.alg.chacha.ChaChaAlgorithm

parameterSets() - Method in class zeroecho.core.alg.cmce.CmceAlgorithm

parameterSets() - Method in class zeroecho.core.alg.dh.DhAlgorithm

parameterSets() - Method in class zeroecho.core.alg.ecdh.EcdhAlgorithm

parameterSets() - Method in class zeroecho.core.alg.ecdsa.EcdsaAlgorithm

parameterSets() - Method in class zeroecho.core.alg.ed25519.Ed25519Algorithm

parameterSets() - Method in class zeroecho.core.alg.ed448.Ed448Algorithm

parameterSets() - Method in class zeroecho.core.alg.elgamal.ElgamalAlgorithm

parameterSets() - Method in class zeroecho.core.alg.frodo.FrodoAlgorithm

parameterSets() - Method in class zeroecho.core.alg.hmac.HmacAlgorithm

parameterSets() - Method in class zeroecho.core.alg.hqc.HqcAlgorithm

parameterSets() - Method in class zeroecho.core.alg.kyber.KyberAlgorithm

parameterSets() - Method in class zeroecho.core.alg.lms.LmsAlgorithm

parameterSets() - Method in class zeroecho.core.alg.mldsa.MldsaAlgorithm

parameterSets() - Method in class zeroecho.core.alg.ntru.NtruAlgorithm

parameterSets() - Method in class zeroecho.core.alg.ntruprime.NtrulPrimeAlgorithm

parameterSets() - Method in class zeroecho.core.alg.ntruprime.SntruPrimeAlgorithm

parameterSets() - Method in class zeroecho.core.alg.rsa.RsaAlgorithm

parameterSets() - Method in class zeroecho.core.alg.saber.SaberAlgorithm

parameterSets() - Method in class zeroecho.core.alg.slhdsa.SlhDsaAlgorithm

parameterSets() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusAlgorithm

parameterSets() - Method in class zeroecho.core.alg.xdh.XdhAlgorithm

parameterSets() - Method in class zeroecho.core.alg.xmss.XmssAlgorithm

parameterSets() - Method in class zeroecho.core.alg.xwing.XWingAlgorithm

parameterSets() - Method in class zeroecho.core.CryptoAlgorithm

Returns the discoverable parameter sets (or parameterized templates) supported by this algorithm.

Parameter sets - Section in class zeroecho.core.CryptoAlgorithm

params() - Method in class zeroecho.core.alg.dh.DhSpec

Returns the underlying JCA DHParameterSpec.

parse(byte[]) - Static method in class zeroecho.pkix.cmp.CmpProtectedMessage

Parses exactly one canonical DER request and the closed supported grammar.

parse(byte[]) - Static method in class zeroecho.pkix.cmp.CrmfRequest

Parses one bounded canonical DER CertReqMsg with the supported signing proof.

parse(String, Collection) - Static method in class zeroecho.core.spec.AlgorithmIdentity

Parses a complete version-two canonical identity with installed codecs.

parseAlgorithmIdentifier(byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

parseAlgorithmIdentifier(byte[]) - Static method in class zeroecho.pkix.Pkix

Parses a DER-encoded X.509 AlgorithmIdentifier.

parseAlgorithmIdentifier(byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Parses a DER-encoded X.509 AlgorithmIdentifier.

parseCertificate(byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

parseCertificate(byte[]) - Static method in class zeroecho.pkix.Pkix

Parses a DER-encoded X.509 certificate.

parseCertificate(byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Parses a DER-encoded X.509 certificate.

parseCertificationRequest(byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

parseCertificationRequest(byte[]) - Static method in class zeroecho.pkix.Pkix

Parses a DER-encoded PKCS#10 certification request.

parseCertificationRequest(byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Parses a DER-encoded PKCS#10 certification request.

parseCrl(byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

parseCrl(byte[]) - Static method in class zeroecho.pkix.Pkix

Parses a DER-encoded X.509 CRL.

parseCrl(byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Parses a DER-encoded X.509 CRL.

parseCsr(byte[]) - Static method in class zeroecho.pkix.Pkix

Parses a PKCS#10 certification request from PEM or DER encoding, verifying the proof-of-possession self-signature before returning.

parseDistinguishedName(byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

parseDistinguishedName(byte[]) - Static method in class zeroecho.pkix.Pkix

Parses a DER-encoded X.500 Name into its ordered, single-valued relative distinguished names, preserving each value's ASN.1 string type.

parseDistinguishedName(byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Parses a DER-encoded X.500 Name into its ordered, single-valued relative distinguished names, preserving the ASN.1 string type of each value.

parseDistinguishedNameString(String) - Method in class zeroecho.pkix.bc.BcPkixProvider

parseDistinguishedNameString(String) - Static method in class zeroecho.pkix.Pkix

Parses a distinguished-name string into its ordered, single-valued relative distinguished names, preserving the written order.

parseDistinguishedNameString(String) - Method in interface zeroecho.pkix.spi.PkixProvider

Parses a distinguished-name string (as produced by PkixProvider.distinguishedNameString(java.util.List)) into its ordered, single-valued relative distinguished names, preserving the written order.

parseExtensions(byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

parseExtensions(byte[]) - Static method in class zeroecho.pkix.Pkix

Parses a DER-encoded X.509 Extensions sequence into typed extensions.

parseExtensions(byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Parses a DER-encoded X.509 Extensions sequence into typed extensions.

parseGeneralNames(byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

parseGeneralNames(byte[]) - Static method in class zeroecho.pkix.Pkix

Parses a DER-encoded GeneralNames sequence into typed general names.

parseGeneralNames(byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Parses a DER-encoded GeneralNames sequence into typed general names.

parseOcspRequest(byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

parseOcspRequest(byte[]) - Static method in class zeroecho.pkix.Pkix

Parses a DER-encoded OCSP request.

parseOcspRequest(byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Parses a DER-encoded OCSP request.

parseOcspResponse(byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

parseOcspResponse(byte[]) - Static method in class zeroecho.pkix.Pkix

Parses a DER-encoded OCSP response.

parseOcspResponse(byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Parses a DER-encoded OCSP response.

parseSct(byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

parseSct(byte[]) - Static method in class zeroecho.pkix.Pkix

Parses a Signed Certificate Timestamp from the JSON response body returned by a CT log's add-pre-chain or add-chain endpoint.

parseSct(byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Parses a Signed Certificate Timestamp from the JSON response body returned by a CT log's add-pre-chain or add-chain endpoint.

passThrough() - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Configures the builder to pass the input through unchanged and strip the trailing tag.

passThrough() - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Configures the pipeline to pass the input body through unchanged and strip the engine's trailer.

passThrough() - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Configures the pipeline to pass the input body through unchanged while appending or checking a trailer.

password() - Method in class zeroecho.sdk.guard.UnlockMaterial.Password

Returns a caller-owned password copy.

Password - Class in zeroecho.sdk.util

Utility class for generating random passwords and secure random byte arrays.

Password(char[]) - Constructor for class zeroecho.sdk.guard.UnlockMaterial.Password

Creates password material from a caller-owned array.

PasswordOpener - Class in zeroecho.sdk.guard

Recipient opener for password-based entries that derives a KEK via PBKDF2 and unwraps the CEK with AES-GCM.

PasswordOpener(Pbkdf2Limits) - Constructor for class zeroecho.sdk.guard.PasswordOpener

Creates an opener with explicit decoded-input limits.

PasswordRecipient - Class in zeroecho.sdk.guard

Password recipient that derives a KEK via PBKDF2(HMAC-SHA-256) and wraps the CEK with AES-GCM.

pathLenConstraint() - Method in record class zeroecho.pkix.BasicConstraints

Returns the value of the pathLenConstraint record component.

payloadKeyBytes(int) - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Sets the CEK length in bytes that will be generated on encrypt and expected on decrypt.

pbkdf2Limits() - Method in class zeroecho.sdk.ZeroEchoSession

Returns configured PBKDF2 limits.

Pbkdf2Limits - Record Class in zeroecho.sdk

Explicit PBKDF2 work-factor limits for trusted configuration and decoded data.

Pbkdf2Limits(int, int) - Constructor for record class zeroecho.sdk.Pbkdf2Limits

Validates minimum <= operationalMaximum <= absoluteDecodedMaximum.

peerPublic(PublicKey) - Method in class zeroecho.sdk.builders.HybridKexBuilder.ClassicAgreement

Sets the peer public key for the classic leg.

peerPublic(PublicKey) - Method in class zeroecho.sdk.builders.HybridKexBuilder.PqcKem

Sets the recipient PQC public key for initiator-side construction.

permissive() - Static method in interface zeroecho.core.policy.CryptoPolicy

Returns a permissive policy that accepts all keys, roles, and specs without validation.

Phases - Section in class zeroecho.core.io.AbstractPassthroughInputStream

pkcs1() - Static method in class zeroecho.core.alg.elgamal.ElgamalEncSpec

Returns an ElgamalEncSpec with PKCS#1 v1.5-style padding.

pkcs1() - Method in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Selects the PKCS#1-style padding variant of ElGamal encryption.

PKCS1 - Enum constant in enum class zeroecho.core.alg.elgamal.ElgamalEncSpec.Padding

PKCS#1 v1.5-style padding.

pkcs1v15() - Static method in class zeroecho.core.alg.rsa.RsaEncSpec

Creates a PKCS#1 v1.5 spec.

pkcs1v15() - Method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Selects PKCS#1 v1.5 padding for RSA.

pkcs1v15(RsaSigSpec.Hash) - Static method in class zeroecho.core.alg.rsa.RsaSigSpec

Creates a PKCS#1 v1.5 spec with the given hash.

pkcs1v15(RsaSigSpec.Hash) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Selects the PKCS#1 v1.5 signature scheme with the given hash function.

PKCS1V15 - Enum constant in enum class zeroecho.core.alg.rsa.RsaEncSpec.Padding

Legacy PKCS#1 v1.5 padding.

PKCS1V15 - Enum constant in enum class zeroecho.core.alg.rsa.RsaSigSpec.Mode

Legacy PKCS#1 v1.5 signature scheme.

PKCS5PADDING - Enum constant in enum class zeroecho.core.alg.aes.AesSpec.Padding

PKCS#5 padding (recommended for CBC) available in the Standard JDK21+.

pkcs8() - Method in class zeroecho.core.alg.bike.BikePrivateKeySpec

Returns a defensive copy of the PKCS#8 encoded key.

pkcs8() - Method in class zeroecho.core.alg.cmce.CmcePrivateKeySpec

Returns a defensive copy of the PKCS#8 bytes.

pkcs8() - Method in class zeroecho.core.alg.frodo.FrodoPrivateKeySpec

Returns a clone of the underlying PKCS#8 encoding.

pkcs8() - Method in class zeroecho.core.alg.hqc.HqcPrivateKeySpec

Returns a defensive copy of the PKCS#8-encoded key material.

pkcs8() - Method in class zeroecho.core.alg.kyber.KyberPrivateKeySpec

Returns a defensive copy of the PKCS#8-encoded private key.

pkcs8() - Method in class zeroecho.core.alg.lms.LmsPrivateKeySpec

Returns a defensive copy of the PKCS#8 encoded key bytes.

pkcs8() - Method in class zeroecho.core.alg.ntru.NtruPrivateKeySpec

Returns a copy of the PKCS#8-encoded private key.

pkcs8() - Method in class zeroecho.core.alg.ntruprime.NtrulPrimePrivateKeySpec

Returns a clone of the PKCS#8-encoded private key bytes.

pkcs8() - Method in class zeroecho.core.alg.ntruprime.SntruPrimePrivateKeySpec

Returns a clone of the PKCS#8-encoded private key bytes.

pkcs8() - Method in class zeroecho.core.alg.saber.SaberPrivateKeySpec

Returns a defensive copy of the PKCS#8-encoded private key.

pkcs8() - Method in class zeroecho.core.alg.xmss.XmssPrivateKeySpec

Returns a defensive copy of the PKCS#8 encoded key bytes.

PKCS8 - Enum constant in enum class zeroecho.core.storage.KeyringStore.Encoding

PKCS#8 PrivateKeyInfo private-key encoding.

PKI_SIGNATURE_DEFAULT_V1 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

Current immutable PKI signing default.

Pkix - Class in zeroecho.pkix

The entry point of the ZeroEcho PKIX API: certificate, CSR, CRL, and OCSP builders and parsers plus content signing and verification, all in terms of standard java.security types.

PkixProvider - Interface in zeroecho.pkix.spi

The service-provider contract that backs the ZeroEcho PKIX API.

PlainBytes - Class in zeroecho.sdk.content.builtin

An implementation of PlainContent that encapsulates a byte array.

PlainBytes(byte[]) - Constructor for class zeroecho.sdk.content.builtin.PlainBytes

Constructs a new PlainBytes instance by copying the provided byte array.

PlainBytes(int) - Constructor for class zeroecho.sdk.content.builtin.PlainBytes

Constructs a new PlainBytes instance with a buffer of the specified length.

PlainBytesBuilder - Interface in zeroecho.sdk.builders.core

Builder interface for constructing PlainBytes instances that encapsulate unencrypted byte array content.

PlainBytesBuilder.DefaultPlainBytesBuilder - Class in zeroecho.sdk.builders.core

Default implementation of the PlainBytesBuilder interface.

PlainContent - Interface in zeroecho.sdk.content.api

Represents a plain content that includes some original content, such as data from interactive input, a file, or the result of decrypting encrypted content.

PlainFile - Class in zeroecho.sdk.content.builtin

A PlainContent implementation that reads content from a file-like URL.

PlainFile(URL) - Constructor for class zeroecho.sdk.content.builtin.PlainFile

Constructs a PlainFile from the specified URL.

PlainFileBuilder - Interface in zeroecho.sdk.builders.core

Builder interface for constructing PlainContent instances that represent unencrypted file-based content sourced from a URL.

PlainFileBuilder.DefaultPlainFileBuilder - Class in zeroecho.sdk.builders.core

Default implementation of the PlainFileBuilder interface.

PlainString - Class in zeroecho.sdk.content.builtin

A PlainContent implementation that wraps a UTF-8 string.

PlainString(String) - Constructor for class zeroecho.sdk.content.builtin.PlainString

Constructs a PlainString with the given string.

PlainStringBuilder - Interface in zeroecho.sdk.builders.core

Builder interface for constructing PlainString instances, which represent unencrypted textual content.

PlainStringBuilder.DefaultPlainStringBuilder - Class in zeroecho.sdk.builders.core

Default implementation of the PlainStringBuilder interface.

policy() - Method in class zeroecho.sdk.ZeroEchoSession

Returns the policy owned by this session.

policy(HybridKexPolicy) - Method in class zeroecho.sdk.builders.HybridKexBuilder

Optional hybrid policy enforcement.

poll(int) - Method in class zeroecho.pkix.cmp.CmpProtectedMessage.Verified

Creates a pollRep using an explicit configured retry interval.

pqcKem() - Method in class zeroecho.sdk.builders.HybridKexBuilder.ClassicAgreement

Continues with PQC (KEM adapter) leg configuration.

pqcKem() - Method in class zeroecho.sdk.builders.HybridKexBuilder.ClassicPairMessage

Continues with PQC (KEM adapter) leg configuration.

pqcKem() - Method in class zeroecho.sdk.builders.HybridKexBuilder

Selects configuration of the post-quantum leg (KEM adapter).

pqcSigId() - Method in record class zeroecho.sdk.hybrid.signature.HybridSignatureProfile

Returns the value of the pqcSigId record component.

pqcSpec() - Method in record class zeroecho.sdk.hybrid.signature.HybridSignatureProfile

Returns the value of the pqcSpec record component.

preCertDer() - Method in record class zeroecho.pkix.ct.PreCertificateResult

Returns an independent copy of the pre-certificate DER.

PreCertificateResult - Record Class in zeroecho.pkix.ct

The result of building a CT pre-certificate: a signed pre-cert and its issuer chain, ready for submission to a Certificate Transparency log.

PreCertificateResult(byte[], List) - Constructor for record class zeroecho.pkix.ct.PreCertificateResult

Validates and defensively copies all contents.

Predefined groups - Section in class zeroecho.core.alg.dh.DhSpec

Predefined parameters - Section in class zeroecho.core.alg.elgamal.ElgamalParamSpec

preHash() - Method in class zeroecho.core.alg.mldsa.MldsaKeyGenSpec

Returns the pre-hash selection.

preHash() - Method in class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec

Returns the pre-hash selection.

previousInput - Variable in class zeroecho.sdk.util.OutputToInputStreamAdapter

The original input stream containing untransformed data.

PRINTABLE - Enum constant in enum class zeroecho.pkix.DirectoryStringType

PrintableString — e.g.

printCertificate(Certificate) - Static method in class zeroecho.sdk.util.X509Support

Prints the certificate details to standard output, including its PEM encoded representation.

printPrivateKey(PrivateKey) - Static method in class zeroecho.sdk.util.X509Support

Utility method to print a PrivateKey in PEM format to standard output.

priority() - Method in class zeroecho.core.CryptoAlgorithm

Returns the priority of this algorithm within its provider.

Privacy and safety - Section in package zeroecho.core.audit

Private(PrivateKey) - Constructor for record class zeroecho.sdk.guard.UnlockMaterial.Private

Validates the key.

PRIVATE_KEY - Enum constant in enum class zeroecho.core.storage.KeyringStore.Kind

Private asymmetric key.

privateImporter(String, Class) - Method in class zeroecho.sdk.KeyBuilders.Asymmetric

Resolves an exact private-key importer.

privateKey() - Method in class zeroecho.core.alg.common.agreement.KeyPairKey

Returns the wrapped private key.

privateKey(PrivateKey) - Method in class zeroecho.sdk.builders.HybridKexBuilder.ClassicAgreement

Sets the local private key for the classic leg.

privateKey(PrivateKey) - Method in class zeroecho.sdk.builders.HybridKexBuilder.PqcKem

Sets the recipient PQC private key for responder-side construction.

Private key builder for Ed25519 - Section in class zeroecho.core.alg.ed25519.Ed25519PrivateKeyBuilder

privateKeyImporter(Class) - Method in class zeroecho.core.CryptoAlgorithm

Returns the private-key importer registered for an exact specification class.

PrivateKeyImporter<S> - Interface in zeroecho.core.spi

Imports private keys for one exact specification type.

PrivateWithId(String, PrivateKey) - Constructor for record class zeroecho.core.storage.KeyringStore.PrivateWithId

Creates an instance of a PrivateWithId record class.

PRIVILEGE_WITHDRAWN - Enum constant in enum class zeroecho.pkix.crl.CrlReason

privilegeWithdrawn (9).

probeWith(String, String) - Static method in interface zeroecho.core.alg.common.sig.GenericJcaSignatureContext.SignLengthResolver

Returns a resolver that probes a JCA Signature by signing an empty message.

processTail(byte[]) - Method in class zeroecho.core.io.TailStrippingInputStream

Hook invoked exactly once at end of stream with the withheld tail bytes.

processTail(byte[]) - Method in class zeroecho.sdk.io.SignatureTrailerInputStream

Receives the stripped tail bytes and forwards a defensive copy to the registered callback.

Produce an HMAC trailer - Section in interface zeroecho.core.context.MacContext

Produce an HMAC trailer - Section in package zeroecho.core.tag

producedAt() - Method in interface zeroecho.pkix.ocsp.OcspResponse

Returns the producedAt time of the basic response.

producedAt(Instant) - Method in interface zeroecho.pkix.ocsp.OcspResponseBuilder

Sets producedAt (required).

Produce HMAC-SHA256 trailer - Section in class zeroecho.core.alg.hmac.HmacMacContext

produceTrailer(byte[]) - Method in class zeroecho.core.io.AbstractPassthroughInputStream

Produces an optional trailer after upstream EOF.

profile(HybridKexProfile) - Method in class zeroecho.sdk.builders.HybridKexBuilder

Sets the hybrid profile (HKDF salt/info/output length).

progressLevel(Level) - Method in class zeroecho.core.audit.JulAuditListenerStd.Builder

Sets the level for progress-style, high-frequency events.

protectPbm(CmpProtectedMessage.Response, X500Principal, CmpPbmPolicy, byte[], byte[], byte[], Instant, CancellationSignal) - Method in class zeroecho.pkix.cmp.CmpProtectedMessage.Verified

Protects a response with the same verified binary PBM mode and parameters, replacing its salt with caller-provided fresh random bytes.

provider() - Static method in class zeroecho.pkix.Pkix

Returns the resolved PKIX provider.

Provider - Section in class zeroecho.core.alg.bike.BikeAlgorithm

PROVIDER_FAILURE - Enum constant in enum class zeroecho.core.storage.KeyringSignatureExecutor.FailureCode

Cryptographic-provider execution failed.

Provider and algorithm - Section in class zeroecho.core.alg.mldsa.MldsaSignatureContext

Provider and algorithm - Section in class zeroecho.core.alg.slhdsa.SlhDsaSignatureContext

Provider dependency - Section in class zeroecho.core.alg.hqc.HqcAlgorithm

Provider dependency - Section in class zeroecho.core.alg.kyber.KyberAlgorithm

ProviderFailureException - Exception Class in zeroecho.core.err

Exception signaling a failure in the underlying cryptographic provider during algorithm initialization or operation.

ProviderFailureException(String, Throwable) - Constructor for exception class zeroecho.core.err.ProviderFailureException

Creates a new exception wrapping a provider failure.

Provider model - Section in class zeroecho.core.CryptoAlgorithm

Provider model - Section in class zeroecho.core.alg.digest.Sha2Sha3Algorithm

Provider model - Section in class zeroecho.core.alg.ecdsa.EcdsaAlgorithm

providerName() - Method in class zeroecho.core.alg.mldsa.MldsaKeyGenSpec

Returns the provider name used for key generation.

providerName() - Method in class zeroecho.core.alg.mldsa.MldsaPrivateKeySpec

Returns the provider name associated with this specification.

providerName() - Method in class zeroecho.core.alg.mldsa.MldsaPublicKeySpec

Returns the provider name associated with this specification.

providerName() - Method in class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec

Returns the provider name used for key generation.

providerName() - Method in class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeySpec

Returns the provider name associated with this specification.

providerName() - Method in class zeroecho.core.alg.slhdsa.SlhDsaPublicKeySpec

Returns the provider name associated with this specification.

providerName() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec

Returns the provider name used for key generation.

providerName() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeySpec

Returns the provider name associated with this specification.

providerName() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusPublicKeySpec

Returns the provider name associated with this specification.

providerName() - Method in class zeroecho.core.CryptoAlgorithm

Returns the provider that supplies this algorithm implementation.

Provider requirements - Section in class zeroecho.core.alg.elgamal.ElgamalAlgorithm

Provider requirements - Section in class zeroecho.core.alg.frodo.FrodoAlgorithm

Provider requirements - Section in class zeroecho.core.alg.ntru.NtruAlgorithm

Provider requirements - Section in class zeroecho.core.alg.ntruprime.NtrulPrimeAlgorithm

Provider requirements - Section in class zeroecho.core.alg.ntruprime.SntruPrimeAlgorithm

Provider requirements - Section in package zeroecho.core.alg.bike

Provider requirements - Section in package zeroecho.core.alg.cmce

Provider requirements - Section in package zeroecho.core.alg.ntruprime

Provider selection - Section in class zeroecho.core.alg.mldsa.MldsaPrivateKeySpec

Provider selection - Section in class zeroecho.core.alg.mldsa.MldsaPublicKeySpec

Provider selection - Section in class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeySpec

Provider selection - Section in class zeroecho.core.alg.slhdsa.SlhDsaPublicKeySpec

pss(RsaSigSpec.Hash, int) - Static method in class zeroecho.core.alg.rsa.RsaSigSpec

Creates a PSS spec with the given hash and salt length.

pss(RsaSigSpec.Hash, int) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Selects the RSASSA-PSS signature scheme with the given hash function and salt length.

PSS - Enum constant in enum class zeroecho.core.alg.rsa.RsaSigSpec.Mode

Probabilistic Signature Scheme (PSS), recommended for new systems.

pssSaltLen() - Method in class zeroecho.core.alg.rsa.RsaSigSpec

Returns the salt length for PSS.

PUBLIC_KEY - Enum constant in enum class zeroecho.core.spec.AlgorithmIdentity.Kind

Public-key algorithm and its exact key parameter set.

PUBLIC_KEY - Enum constant in enum class zeroecho.core.storage.KeyringStore.Kind

Public asymmetric key.

publicExponent() - Method in class zeroecho.core.alg.rsa.RsaKeyGenSpec

Returns the public exponent.

publicImporter(String, Class) - Method in class zeroecho.sdk.KeyBuilders.Asymmetric

Resolves an exact public-key importer.

publicKey() - Method in class zeroecho.core.alg.common.agreement.KeyPairKey

Returns the wrapped public key.

publicKey() - Method in record class zeroecho.core.spec.AlgorithmSuite

Returns the value of the publicKey record component.

publicKey() - Method in interface zeroecho.pkix.csr.CertificationRequest

Returns the subject public key carried by the request.

publicKey(PublicKey) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Sets the subject public key (required, unless CertificateBuilder.publicKeyInfo(byte[]) is used).

publicKey(PublicKey) - Method in interface zeroecho.pkix.csr.CertificationRequestBuilder

Sets the subject public key (required).

Public key builder for Ed25519 - Section in class zeroecho.core.alg.ed25519.Ed25519PublicKeyBuilder

publicKeyFromSubjectPublicKeyInfo(byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

publicKeyFromSubjectPublicKeyInfo(byte[]) - Static method in class zeroecho.pkix.Pkix

Recovers a public key from a DER-encoded SubjectPublicKeyInfo.

publicKeyFromSubjectPublicKeyInfo(byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Recovers a public key from a DER-encoded SubjectPublicKeyInfo.

PublicKeyIdentity - Class in zeroecho.pkix

Immutable mathematical public-key identity for enrollment separation checks.

publicKeyImporter(Class) - Method in class zeroecho.core.CryptoAlgorithm

Returns the public-key importer registered for an exact specification class.

PublicKeyImporter<S> - Interface in zeroecho.core.spi

Imports public keys for one exact specification type.

publicKeyInfo(byte[]) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Sets the subject public key from the exact DER of a SubjectPublicKeyInfo, preserving the original encoding byte-for-byte (required, unless CertificateBuilder.publicKey(PublicKey) is used).

PublicWithId(String, PublicKey) - Constructor for record class zeroecho.core.storage.KeyringStore.PublicWithId

Creates an instance of a PublicWithId record class.

Purpose - Section in class zeroecho.core.CatalogSelector

putKeyPairIfAbsent(String, String, KeyPair) - Method in class zeroecho.core.storage.KeyringStore

Inserts both canonical key encodings in one durable encrypted snapshot.

putPrivate(String, String, PrivateKey) - Method in class zeroecho.core.storage.KeyringStore

Adds or replaces an encoded private key and persists the mutation.

putPublic(String, String, PublicKey) - Method in class zeroecho.core.storage.KeyringStore

Adds or replaces an encoded public key and persists the mutation.

putSecret(String, String, SecretKey) - Method in class zeroecho.core.storage.KeyringStore

Adds or replaces an encoded secret key and persists the mutation.

R

RandomSupport - Class in zeroecho.core.util

Provides the authoritative process-wide cryptographic random source.

raw() - Method in class zeroecho.core.alg.xwing.XWingPublicKeySpec

Returns a defensive copy of the raw public key bytes.

RAW - Enum constant in enum class zeroecho.core.storage.KeyringStore.Encoding

Raw secret-key bytes.

RAW - Enum constant in enum class zeroecho.sdk.content.api.ExportableDataContent.ExportMode

Raw mode returns the content as a direct InputStream, without any transformation or encoding.

rawAttributes() - Method in interface zeroecho.pkix.csr.CertificationRequest

Returns every PKCS#10 attribute, including the extension-request attribute, as raw (oid, DER values) pairs without interpreting any extension.

rawSeed() - Method in class zeroecho.core.alg.xwing.XWingPrivateKeySpec

Returns a defensive copy of the raw seed bytes.

read() - Method in class zeroecho.core.io.AbstractChunkTransformInputStream

Reads the next transformed byte.

read() - Method in class zeroecho.core.io.AbstractPassthroughInputStream

Reads the next byte from this stream.

read() - Method in class zeroecho.core.io.TailStrippingInputStream

Reads and returns a single byte of payload data.

read() - Method in class zeroecho.sdk.util.OutputToInputStreamAdapter

read(byte[]) - Method in class zeroecho.core.io.AbstractChunkTransformInputStream

Reads transformed bytes into the given array.

read(byte[], int, int) - Method in class zeroecho.core.io.AbstractChunkTransformInputStream

Reads up to len transformed bytes into the target buffer.

read(byte[], int, int) - Method in class zeroecho.core.io.AbstractPassthroughInputStream

Reads some bytes from this stream into the specified array.

read(byte[], int, int) - Method in class zeroecho.core.io.TailStrippingInputStream

Reads up to len bytes of payload into the provided buffer.

read(byte[], int, int) - Method in class zeroecho.sdk.util.OutputToInputStreamAdapter

read(InputStream, int) - Static method in class zeroecho.core.io.Util

Reads a byte array from the input stream.

readFrom(Reader) - Static method in class zeroecho.core.marshal.PairSeq

Reads a PairSeq from a line-based text format.

readHeader(InputStream, CryptoAlgorithm, CtxInterface) - Method in class zeroecho.core.alg.aes.AesHeaderCodec

Reads a header from in, updates the context with IV (and tag bits), and verifies AAD if present.

readHeader(InputStream, CryptoAlgorithm, CtxInterface) - Method in class zeroecho.core.alg.chacha.ChaCha20Poly1305HeaderCodec

Reads and validates the ChaCha20-Poly1305 header from the provided stream.

readHeader(InputStream, CryptoAlgorithm, CtxInterface) - Method in class zeroecho.core.alg.chacha.ChaChaHeaderCodec

Reads a ChaCha20 header from the input and hydrates the context.

readHeader(InputStream, CryptoAlgorithm, CtxInterface) - Method in interface zeroecho.core.SymmetricHeaderCodec

Read header from in, populate params in ctx, and return an InputStream positioned immediately after the header.

readLong(InputStream) - Static method in class zeroecho.core.io.Util

Reads a long value from the input stream in big-endian order (8 bytes).

readPack7I(InputStream) - Static method in class zeroecho.core.io.Util

Reads an integer from the input stream using packed 7-bit encoding (variable length).

readPack7L(InputStream) - Static method in class zeroecho.core.io.Util

Reads a long value from the input stream using packed 7-bit encoding (variable length).

readUTF8(InputStream, int) - Static method in class zeroecho.core.io.Util

Reads a UTF-8 encoded string from the input stream.

readUUID(InputStream) - Static method in class zeroecho.core.io.Util

Reads a UUID from the input stream, composed of two big-endian long values.

readWithPackedLengthPrefix(InputStream, int) - Static method in class zeroecho.core.io.Util

Reads up to maxSize bytes from the given InputStream, encodes the total number of bytes using 7-bit variable-length encoding (similar to Util.writePack7L(OutputStream, long)), and returns a single byte array containing the encoded length prefix followed by the actual data read.

reason() - Method in record class zeroecho.pkix.crl.CrlEntry

Returns the value of the reason record component.

reason() - Method in record class zeroecho.pkix.ocsp.CertStatus.Revoked

Returns the value of the reason record component.

recipient() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns the recipient's immutable distinguished name.

Recipient - Interface in zeroecho.sdk.guard

Recipient describes how to encode a single recipient entry that can recover a content-encryption key (CEK) during decryption.

RECIPIENT_KEY_ID_OID - Static variable in class zeroecho.pkix.EstKeygen

RFC 7030 authenticated asymmetric recipient identifier attribute.

RecipientKekSizes - Class in zeroecho.sdk.guard

Defines the KEK sizes supported by recipient entries without an encoded size discriminator.

recipientKid() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns the optional defensive recipient key identifier for exact credential selection.

recipientNonce() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns the optional defensive recipient nonce.

RecipientOpener - Interface in zeroecho.sdk.guard

RecipientOpener attempts to recover a content-encryption key (CEK) from a single recipient entry during decryption.

recipientPrivate(PrivateKey) - Method in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Sets the recipient private key for decapsulation (decryption path).

recipientPublic(PublicKey) - Method in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Sets the recipient public key for encapsulation (encryption path).

recommendedKeyBits() - Method in class zeroecho.core.alg.hmac.HmacSpec

Returns a recommended key size (in bits) for this HMAC variant.

recommendedKeyBits() - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Returns a recommended HMAC key size (in bits) for the currently configured HmacDataContentBuilder.spec().

Recommended values - Section in zeroecho.core.io.CipherTransformInputStreamBuilder.withFinalizationOutputChunks(int)

Record verification outcome in a context - Section in package zeroecho.core.tag

registerAsymmetricKeyPairGenerator(Class, AsymmetricKeyPairGenerator, Supplier) - Method in class zeroecho.core.CryptoAlgorithm

Registers asymmetric key-pair generation for one exact specification class.

RegisteredId(String) - Constructor for record class zeroecho.pkix.GeneralName.RegisteredId

Canonicalizing constructor.

registerPrivateKeyImporter(Class, PrivateKeyImporter) - Method in class zeroecho.core.CryptoAlgorithm

Registers private-key import for one exact specification class.

registerPublicKeyImporter(Class, PublicKeyImporter) - Method in class zeroecho.core.CryptoAlgorithm

Registers public-key import for one exact specification class.

registerSymmetricKeyGenerator(Class, SymmetricKeyGenerator, Supplier) - Method in class zeroecho.core.CryptoAlgorithm

Registers symmetric-key generation for one exact specification class.

registerSymmetricKeyImporter(Class, SymmetricKeyImporter) - Method in class zeroecho.core.CryptoAlgorithm

Registers symmetric-key import for one exact specification class.

rejected() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage.Verified

Creates a generic authenticated rejection without caller-controlled diagnostics.

Relationship to SPHINCS+ - Section in package zeroecho.core.alg.slhdsa

Relationship to the overall library - Section in package zeroecho.core

RelativeDistinguishedName - Record Class in zeroecho.pkix

A single-valued relative distinguished name: an attribute-type OID, its value, and the ASN.1 string type used to encode that value.

RelativeDistinguishedName(String, String, DirectoryStringType) - Constructor for record class zeroecho.pkix.RelativeDistinguishedName

Canonicalizing constructor.

remainder() - Method in record class zeroecho.core.ParameterConstraint

Returns the value of the remainder record component.

REMOVE_FROM_CRL - Enum constant in enum class zeroecho.pkix.crl.CrlReason

removeFromCRL (8).

removeAlias(String) - Method in class zeroecho.core.storage.KeyringStore

Removes one logical secret alias or all existing components of its pair in one durable snapshot, preserving all other entries and their order.

RepeatableContent - Interface in zeroecho.core.io

Immutable, provider-independent source of repeatable operation content.

Representation model - Section in class zeroecho.core.alg.common.sig.SignatureInteropProfile

request() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage.Verified

Returns the immutable message whose protection was verified.

requestedAlgorithmId() - Method in class zeroecho.core.alg.common.sig.SignatureInteropProfile

Returns the caller-visible signature algorithm identifier.

requestedCertificates() - Method in interface zeroecho.pkix.ocsp.OcspRequest

Returns the requested certificate identifiers.

requestedExtensions() - Method in class zeroecho.pkix.cmp.CrmfRequest

Returns requested extensions without policy approval.

requestedExtensions() - Method in interface zeroecho.pkix.csr.CertificationRequest

Returns the requested v3 extensions, if any.

requestedSubjectAlternativeNames() - Method in interface zeroecho.pkix.csr.CertificationRequest

Returns the requested subject alternative names, if any.

requesterCert() - Method in record class zeroecho.pkix.scep.ScepPkiMessage

Returns the value of the requesterCert record component.

requesterCertificate() - Method in class zeroecho.pkix.scep.ScepCodec.VerifiedRequest

Returns verified key-control evidence, without a trust assertion.

requestExtension(CertificateExtension) - Method in interface zeroecho.pkix.csr.CertificationRequestBuilder

Requests an arbitrary extension via the extension-request attribute.

requestId() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns the bounded request ID, or zero for requests without a CertReqId.

requestId() - Method in class zeroecho.pkix.cmp.CrmfRequest

Returns the retained CRMF request identity.

requestsImplicitConfirmation() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns whether this enrollment explicitly requested implicit confirmation.

require(String) - Static method in class zeroecho.core.CryptoAlgorithms

Resolves an algorithm by canonical identifier.

require(String) - Method in class zeroecho.sdk.ZeroEchoSession

Resolves an algorithm from the authoritative registry.

requireAttributes(byte[]) - Static method in class zeroecho.pkix.EstKeygen

Validates the two required encryption attributes and the enclosing DER request structure without evaluating its public key or signature.

required() - Method in record class zeroecho.core.ParameterConstraint

Returns the value of the required record component.

requireIssuerAndSubject(byte[], X500Principal, X500Principal) - Static method in class zeroecho.pkix.scep.ScepCodec

Validates an IssuerAndSubject poll against the frozen issuer and original CSR.

requireRecipient(byte[], X509Certificate) - Static method in class zeroecho.pkix.EstKeygen

Requires the requested key identifier and an advertised supported transport to match the actual authenticated TLS certificate.

requiresStatefulSigning() - Method in class zeroecho.core.alg.lms.LmsAlgorithm

requiresStatefulSigning() - Method in class zeroecho.core.alg.xmss.XmssAlgorithm

requiresStatefulSigning() - Method in class zeroecho.core.CryptoAlgorithm

Indicates that signing consumes durable private-key state.

requireStateless(String, Key) - Static method in class zeroecho.core.alg.common.sig.StatefulSigningGuard

Checks both declared algorithm and actual key identity without using the key.

requireSupported(int) - Static method in class zeroecho.sdk.guard.RecipientKekSizes

Validates and returns a supported recipient KEK size.

reset() - Method in class zeroecho.core.io.TailStrippingInputStream

Unsupported operation; always throws.

resolve(String) - Static method in class zeroecho.core.alg.BootstrapAlgorithmIdentities

Resolves either a canonical identity or an approved compatibility alias.

resolve(String) - Static method in class zeroecho.core.alg.common.sig.SignatureInteropProfiles

Resolves an external signature algorithm identifier.

resolve(String) - Method in class zeroecho.core.spec.AlgorithmIdentityCatalog

Resolves a canonical identity without provider alias fallback.

resolve(PrivateKey) - Method in interface zeroecho.core.alg.common.sig.GenericJcaSignatureContext.SignLengthResolver

Resolves the signature length for a given private key in SIGN mode.

resolve(PublicKey) - Method in interface zeroecho.core.alg.common.sig.GenericJcaSignatureContext.VerifyLengthResolver

Resolves the expected signature length for a given public key in VERIFY mode.

responder(ZeroEchoSession, HybridKexProfile, String, PrivateKey, PublicKey, ContextSpec, String, PrivateKey, ContextSpec) - Static method in class zeroecho.sdk.hybrid.kex.HybridKexContexts

Creates a responder-side hybrid KEX context.

RESPONDER - Enum constant in enum class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter.Role

Responder: consumes a peer message via decapsulation.

responderId() - Method in interface zeroecho.pkix.ocsp.OcspResponse

Returns the responder identity.

responderId(ResponderId) - Method in interface zeroecho.pkix.ocsp.OcspResponseBuilder

Sets the responder identity (required).

ResponderId - Interface in zeroecho.pkix.ocsp

An OCSP ResponderID (RFC 6960): the responder identity, either by name or by key hash.

ResponderId.ByKey - Record Class in zeroecho.pkix.ocsp

Responder identified by the SHA-1 hash of its public key.

ResponderId.ByName - Record Class in zeroecho.pkix.ocsp

Responder identified by its distinguished name.

responderPairMessage(ZeroEchoSession, HybridKexProfile, String, KeyPairKey, ContextSpec, String, PrivateKey, ContextSpec) - Static method in class zeroecho.sdk.hybrid.kex.HybridKexContexts

Creates a responder-side hybrid KEX where the classic leg is message-based (PAIR_MESSAGE).

responses() - Method in interface zeroecho.pkix.ocsp.OcspResponse

Returns the individual certificate-status responses.

Responsibilities - Section in class zeroecho.core.alg.common.eddsa.AbstractEdDSAKeyGenBuilder

Responsibilities - Section in class zeroecho.core.alg.common.eddsa.AbstractEncodedPrivateKeyBuilder

Responsibilities - Section in class zeroecho.core.alg.common.eddsa.AbstractEncodedPublicKeyBuilder

Responsibilities - Section in class zeroecho.core.alg.common.eddsa.CommonEdDSASignatureContext

Responsibilities - Section in class zeroecho.core.alg.ed25519.Ed25519PrivateKeyBuilder

Responsibilities - Section in class zeroecho.core.alg.ed25519.Ed25519PrivateKeySpec

Responsibilities - Section in class zeroecho.core.alg.ed25519.Ed25519PublicKeyBuilder

Responsibilities - Section in class zeroecho.core.alg.ed25519.Ed25519PublicKeySpec

Responsibilities - Section in class zeroecho.core.alg.ed448.Ed448PrivateKeyBuilder

Responsibilities - Section in class zeroecho.core.alg.ed448.Ed448PublicKeyBuilder

Responsibilities - Section in interface zeroecho.sdk.guard.Recipient

Responsibilities - Section in package zeroecho.core.context

Result - Section in zeroecho.sdk.builders.alg.DigestDataContentBuilder.build(boolean)

Result - Section in zeroecho.sdk.builders.alg.HmacDataContentBuilder.build(boolean)

Result - Section in zeroecho.sdk.builders.alg.RsaSigDataContentBuilder.build(boolean)

revocationReason() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns the requested permanent revocation reason, or unspecified zero.

revocationTime() - Method in record class zeroecho.pkix.crl.CrlEntry

Returns the value of the revocationTime record component.

revocationTime() - Method in record class zeroecho.pkix.ocsp.CertStatus.Revoked

Returns the value of the revocationTime record component.

revoked() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage.Verified

Creates a successful permanent revocation response after caller-authorized revocation.

revoked(Instant, CrlReason) - Static method in interface zeroecho.pkix.ocsp.CertStatus

Returns a revoked status.

Revoked(Instant, Optional) - Constructor for record class zeroecho.pkix.ocsp.CertStatus.Revoked

Canonicalizing constructor.

revokedCertificate() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns the immutable revocation reference, when this is rr.

Rfc822Name(String) - Constructor for record class zeroecho.pkix.GeneralName.Rfc822Name

Canonicalizing constructor.

rnd - Variable in class zeroecho.core.alg.chacha.ChaChaCipherContext

Secure random source for nonce generation.

ROBUST - Enum constant in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Mode

Legacy construction; rejected by the current SLH-DSA binding.

role() - Method in record class zeroecho.core.Capability

Returns the value of the role record component.

roles() - Method in class zeroecho.core.CryptoAlgorithm

Returns the set of roles supported by this algorithm.

Roles - Section in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter

Roles - Section in class zeroecho.core.alg.ecdsa.EcdsaAlgorithm

Roles - Section in class zeroecho.core.alg.ed448.Ed448Algorithm

Roles - Section in class zeroecho.core.alg.hqc.HqcKemContext

Roles and contexts - Section in class zeroecho.core.CryptoAlgorithm

RSA_PKCS1_SHA256 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

RSA PKCS#1 v1.5 with SHA-256.

RSA_PKCS1_SHA384 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

RSA PKCS#1 v1.5 with SHA-384.

RSA_PKCS1_SHA512 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

RSA PKCS#1 v1.5 with SHA-512.

RSA_PSS_SHA256 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

RSA-PSS SHA-256/MGF1-SHA-256/salt-32/trailer-1 bootstrap identity.

RSA_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

RSA public-key identity.

rsa2048() - Static method in class zeroecho.core.alg.rsa.RsaKeyGenSpec

Convenience factory for a 2048-bit RSA spec with exponent 65537.

rsa3072() - Static method in class zeroecho.core.alg.rsa.RsaKeyGenSpec

Convenience factory for a 3072-bit RSA spec with exponent 65537.

rsa4096() - Static method in class zeroecho.core.alg.rsa.RsaKeyGenSpec

Convenience factory for a 4096-bit RSA spec with exponent 65537.

RsaAlgorithm - Class in zeroecho.core.alg.rsa

RSA algorithm binding for encryption/decryption and signature/verification.

RsaAlgorithm() - Constructor for class zeroecho.core.alg.rsa.RsaAlgorithm

Constructs a new RSA algorithm definition and registers its roles and key builders.

RsaCipherContext - Class in zeroecho.core.alg.rsa

Streaming RSA cipher context that transforms data block-by-block using OAEP or PKCS#1 v1.5 padding.

RsaCipherContext(CryptoAlgorithm, Key, boolean, RsaEncSpec) - Constructor for class zeroecho.core.alg.rsa.RsaCipherContext

Creates a new RSA cipher context for encryption or decryption with the given parameters.

RsaEncDataContentBuilder - Class in zeroecho.sdk.builders.alg

RsaEncDataContentBuilder builds streaming RSA encryption or decryption pipelines that operate while an InputStream is consumed.

RsaEncSpec - Class in zeroecho.core.alg.rsa

Specification of RSA encryption parameters including padding mode, hash function, and optional OAEP label.

RsaEncSpec.Hash - Enum Class in zeroecho.core.alg.rsa

Hash algorithms usable within OAEP padding.

RsaEncSpec.Padding - Enum Class in zeroecho.core.alg.rsa

Supported RSA padding schemes.

RsaKeyGenSpec - Class in zeroecho.core.alg.rsa

Key generation specification for RSA key pairs.

RsaKeyGenSpec(int, int) - Constructor for class zeroecho.core.alg.rsa.RsaKeyGenSpec

Constructs an RSA key generation spec with the given parameters.

RsaPrivateKeySpec - Class in zeroecho.core.alg.rsa

Encoded RSA private key specification in PKCS#8 format.

RsaPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.rsa.RsaPrivateKeySpec

Constructs a new RSA private key spec from a PKCS#8-encoded key.

rsaPss(AlgorithmIdentity, AlgorithmIdentity, int) - Static method in class zeroecho.core.alg.BootstrapAlgorithmIdentities

Creates an exact RSA-PSS identity without requiring a central enum entry.

RsaPssParameters(AlgorithmIdentity, AlgorithmIdentity, AlgorithmIdentity, int, int) - Constructor for record class zeroecho.core.spec.AlgorithmIdentity.RsaPssParameters

Creates a validated exact RSA-PSS parameter tuple.

RsaPublicKeySpec - Class in zeroecho.core.alg.rsa

Encoded RSA public key specification in X.509 SubjectPublicKeyInfo format.

RsaPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.rsa.RsaPublicKeySpec

Constructs an RSA public key spec from an X.509-encoded key.

RSA rules - Section in record class zeroecho.core.alg.rsa.BlockGeometry

RsaSigDataContentBuilder - Class in zeroecho.sdk.builders.alg

RsaSigDataContentBuilder builds streaming RSA signature pipelines that sign or verify as an InputStream is consumed.

RsaSigDataContentBuilder.Mode - Enum Class in zeroecho.sdk.builders.alg

Mode selects whether the builder signs or verifies.

rsaSign(ZeroEchoSession, PrivateKey, RsaSigSpec) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for an RSA signing engine.

RsaSignatureContext - Class in zeroecho.core.alg.rsa

Streaming RSA signature context for signing or verifying data in a pull pipeline.

RsaSignatureContext(CryptoAlgorithm, PrivateKey, RsaSigSpec) - Constructor for class zeroecho.core.alg.rsa.RsaSignatureContext

Constructs a signing context using the given private key and signature specification.

RsaSignatureContext(CryptoAlgorithm, PublicKey, RsaSigSpec) - Constructor for class zeroecho.core.alg.rsa.RsaSignatureContext

Constructs a verification context using the given public key and signature specification.

RsaSigSpec - Class in zeroecho.core.alg.rsa

Specification of RSA signature parameters including padding mode, hash function, and (for PSS) salt length.

RsaSigSpec.Hash - Enum Class in zeroecho.core.alg.rsa

Supported hash algorithms for RSA signatures.

RsaSigSpec.Mode - Enum Class in zeroecho.core.alg.rsa

Signature padding modes supported by RSA.

rsaVerify(ZeroEchoSession, PublicKey, RsaSigSpec) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for an RSA verification engine.

Runtime parameters - Section in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Runtime parameters and context exchange - Section in package zeroecho.core.alg.aes

Runtime parameters and context exchange - Section in package zeroecho.core.alg.chacha

S

SaberAlgorithm - Class in zeroecho.core.alg.saber

Implements the SABER post-quantum key encapsulation mechanism for the crypto catalog and wires it to the Bouncy Castle PQC provider.

SaberAlgorithm() - Constructor for class zeroecho.core.alg.saber.SaberAlgorithm

Creates a SABER algorithm instance backed by the Bouncy Castle PQC provider and registers KEM and AGREEMENT capabilities, along with key generation and key import builders for SABER public and private keys.

saberkem128r3() - Static method in class zeroecho.core.alg.saber.SaberKeyGenSpec

Creates a specification for the SaberKEM128R3 variant.

SABERKEM128R3 - Enum constant in enum class zeroecho.core.alg.saber.SaberKeyGenSpec.Variant

Saber KEM, round-3, baseline 128-bit security parameter set.

saberkem192r3() - Static method in class zeroecho.core.alg.saber.SaberKeyGenSpec

Creates a specification for the SaberKEM192R3 variant.

SABERKEM192R3 - Enum constant in enum class zeroecho.core.alg.saber.SaberKeyGenSpec.Variant

Saber KEM, round-3, baseline 192-bit security parameter set.

saberkem256r3() - Static method in class zeroecho.core.alg.saber.SaberKeyGenSpec

Creates a specification for the SaberKEM256R3 variant.

SABERKEM256R3 - Enum constant in enum class zeroecho.core.alg.saber.SaberKeyGenSpec.Variant

Saber KEM, round-3, baseline 256-bit security parameter set.

SaberKemContext - Class in zeroecho.core.alg.saber

KEM context for SABER supporting encapsulation with a public key and decapsulation with a private key.

SaberKemContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.saber.SaberKemContext

Creates a decapsulation context bound to our PrivateKey.

SaberKemContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.saber.SaberKemContext

Creates an encapsulation context bound to the recipient's PublicKey.

SaberKeyGenSpec - Class in zeroecho.core.alg.saber

Key generation specification for the SABER post-quantum KEM algorithm.

SaberKeyGenSpec.Variant - Enum Class in zeroecho.core.alg.saber

Enumeration of SABER parameter set variants.

SaberPrivateKeySpec - Class in zeroecho.core.alg.saber

Encoded private key specification for the SABER post-quantum KEM algorithm.

SaberPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.saber.SaberPrivateKeySpec

Constructs a private key specification from a PKCS#8-encoded SABER private key.

SaberPublicKeySpec - Class in zeroecho.core.alg.saber

Encoded public key specification for the SABER post-quantum KEM algorithm.

SaberPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.saber.SaberPublicKeySpec

Constructs a public key specification from an X.509-encoded SABER public key.

Safety and validation - Section in package zeroecho.core.alg.aes

Safety and validation - Section in package zeroecho.core.alg.chacha

saltLength() - Method in record class zeroecho.core.spec.AlgorithmIdentity.RsaPssParameters

Returns the value of the saltLength record component.

ScepCodec - Class in zeroecho.pkix.scep

BouncyCastle-backed codec for SCEP (RFC 8894) CMS message encoding and decoding.

ScepCodec.VerifiedRequest - Class in zeroecho.pkix.scep

Authenticated outer request.

ScepCodecException - Exception Class in zeroecho.pkix.scep

Signals a SCEP protocol message encode or decode failure.

ScepCodecException(String) - Constructor for exception class zeroecho.pkix.scep.ScepCodecException

Creates an exception with a diagnostic message.

ScepCodecException(String, Throwable) - Constructor for exception class zeroecho.pkix.scep.ScepCodecException

Creates an exception retaining its underlying cause.

ScepPkiMessage - Record Class in zeroecho.pkix.scep

Parsed representation of a SCEP PKIOperation message.

ScepPkiMessage(int, String, byte[], byte[], X509Certificate) - Constructor for record class zeroecho.pkix.scep.ScepPkiMessage

Validates and defensively copies bounded request content.

Scope - Section in class zeroecho.core.alg.common.sig.SignatureInteropProfiles

Scope and responsibilities - Section in package zeroecho.core.alg

Scope and responsibilities - Section in package zeroecho.core.alg.bike

Scope and responsibilities - Section in package zeroecho.core.alg.cmce

Scope and responsibilities - Section in package zeroecho.core.alg.common.agreement

Scope and responsibilities - Section in package zeroecho.core.alg.common.eddsa

Scope and responsibilities - Section in package zeroecho.core.alg.dh

Scope and responsibilities - Section in package zeroecho.core.alg.digest

Scope and responsibilities - Section in package zeroecho.core.alg.ecdh

Scope and responsibilities - Section in package zeroecho.core.alg.ecdsa

Scope and responsibilities - Section in package zeroecho.core.alg.ed25519

Scope and responsibilities - Section in package zeroecho.core.alg.ed448

Scope and responsibilities - Section in package zeroecho.core.alg.elgamal

Scope and responsibilities - Section in package zeroecho.core.alg.frodo

Scope and responsibilities - Section in package zeroecho.core.alg.hmac

Scope and responsibilities - Section in package zeroecho.core.alg.hqc

Scope and responsibilities - Section in package zeroecho.core.alg.kyber

Scope and responsibilities - Section in package zeroecho.core.alg.ntru

Scope and responsibilities - Section in package zeroecho.core.alg.ntruprime

Scope and responsibilities - Section in package zeroecho.core.alg.rsa

Scope and responsibilities - Section in package zeroecho.core.alg.saber

Scope and responsibilities - Section in package zeroecho.core.alg.sphincsplus

Scope and responsibilities - Section in package zeroecho.core.alg.xdh

Scope and responsibilities - Section in package zeroecho.core.audit

SECRET_KEY - Enum constant in enum class zeroecho.core.storage.KeyringStore.Kind

Symmetric secret key.

SecretContent - Interface in zeroecho.sdk.content.api

Represents secret content, which is a specific type of plain content that stores a secret phrase.

SecretPassword - Class in zeroecho.sdk.content.builtin

Destroyable password content backed exclusively by an owned character array.

SecretPassword(char[]) - Constructor for class zeroecho.sdk.content.builtin.SecretPassword

Constructs a password from a caller-owned character array.

SecretPassword(int) - Constructor for class zeroecho.sdk.content.builtin.SecretPassword

Constructs a password with randomly generated printable characters.

SecretWithId(String, SecretKey) - Constructor for record class zeroecho.core.storage.KeyringStore.SecretWithId

Creates an instance of a SecretWithId record class.

security() - Method in class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec

Returns the security level.

security() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec

Returns the security level of this specification.

Security - Section in class zeroecho.core.alg.slhdsa.SlhDsaSignatureContext

Security considerations - Section in class zeroecho.core.alg.common.agreement.GenericJcaMessageAgreementContext

Security considerations - Section in class zeroecho.core.alg.elgamal.ElgamalPrivateKeySpec

Security considerations - Section in class zeroecho.core.alg.elgamal.ElgamalPublicKeySpec

Security considerations - Section in class zeroecho.core.alg.hmac.HmacKeyGenSpec

Security considerations - Section in class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeySpec

Security considerations - Section in interface zeroecho.core.context.AgreementContext

Security considerations - Section in interface zeroecho.core.context.CryptoContext

Security considerations - Section in interface zeroecho.core.context.DigestContext

Security considerations - Section in interface zeroecho.core.context.EncryptionContext

Security considerations - Section in interface zeroecho.core.context.KemContext

Security considerations - Section in interface zeroecho.core.context.MacContext

Security considerations - Section in interface zeroecho.core.context.MessageAgreementContext

Security considerations - Section in package zeroecho.core.alg.mldsa

Security considerations - Section in package zeroecho.core.alg.slhdsa

Security considerations - Section in zeroecho.sdk.guard.Recipient.decoy()

securityLevel() - Method in record class zeroecho.core.ParameterSetDescriptor.Concrete

Returns the value of the securityLevel record component.

securityLevel() - Method in interface zeroecho.core.ParameterSetDescriptor

Security level of this parameter set or template's default.

securityLevel() - Method in record class zeroecho.core.ParameterSetDescriptor.Template

Returns the value of the securityLevel record component.

SecurityLevel - Record Class in zeroecho.core

Security level of a cryptographic algorithm or parameter set.

SecurityLevel(OptionalInt, int) - Constructor for record class zeroecho.core.SecurityLevel

Validates the record fields on construction.

Security note - Section in class zeroecho.core.alg.hqc.HqcPrivateKeySpec

Security note - Section in class zeroecho.core.alg.hqc.HqcPublicKeySpec

Security notes - Section in class zeroecho.core.alg.common.sig.SignatureInteropProfile

Security notes - Section in class zeroecho.core.alg.hmac.HmacKeyImportSpec

Security notes - Section in class zeroecho.core.alg.rsa.RsaEncSpec

Security notes - Section in class zeroecho.core.alg.rsa.RsaSigSpec

Security notes - Section in class zeroecho.core.policy.SecurityStrengthAdvisor

Security notes - Section in class zeroecho.sdk.hybrid.kex.HybridKexExporter

Security notes - Section in package zeroecho.sdk.hybrid.signature

Security properties - Section in class zeroecho.core.NullKey

SecurityStrengthAdvisor - Class in zeroecho.core.policy

Estimates conservative security strength in bits for a given algorithm identifier and key.

selectByFamily(AlgorithmFamily) - Static method in class zeroecho.core.CatalogSelector

Returns algorithm ids that belong to the given family, regardless of roles.

selectByFamilyAndRoles(AlgorithmFamily, Collection) - Static method in class zeroecho.core.CatalogSelector

Returns algorithm ids that belong to the given family and contain all required roles.

selectByRoles(Collection) - Static method in class zeroecho.core.CatalogSelector

Returns algorithm ids that contain all the given roles, regardless of family.

Selection and catalogs - Section in package zeroecho.core

sender() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns the sender's immutable distinguished name.

senderKid() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns the optional defensive sender key identifier.

senderNonce() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns a defensive sender nonce.

senderNonce() - Method in class zeroecho.pkix.scep.ScepCodec.VerifiedRequest

Copies the current request nonce.

senderNonce() - Method in record class zeroecho.pkix.scep.ScepPkiMessage

Copies the sender nonce.

Serialization - Section in class zeroecho.core.alg.hmac.HmacKeyImportSpec

Serialization - Section in class zeroecho.core.alg.hqc.HqcPrivateKeySpec

Serialization - Section in class zeroecho.core.alg.hqc.HqcPublicKeySpec

Serialization - Section in class zeroecho.core.alg.ntruprime.NtrulPrimePrivateKeySpec

Serialization - Section in class zeroecho.core.alg.ntruprime.NtrulPrimePublicKeySpec

Serialization - Section in class zeroecho.core.alg.ntruprime.SntruPrimePrivateKeySpec

Serialization - Section in class zeroecho.core.alg.ntruprime.SntruPrimePublicKeySpec

Serialization - Section in class zeroecho.core.marshal.PairSeq

Serialization formats - Section in class zeroecho.core.CryptoCatalog

serialNumber() - Method in record class zeroecho.pkix.cmp.CrmfRequest.CertificateReference

Returns the value of the serialNumber record component.

serialNumber() - Method in record class zeroecho.pkix.crl.CrlEntry

Returns the value of the serialNumber record component.

serialNumber() - Method in record class zeroecho.pkix.ocsp.CertId

Returns the value of the serialNumber record component.

serialNumber(BigInteger) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Sets the certificate serial number (required, positive).

SERVER_AUTH - Static variable in record class zeroecho.pkix.ExtendedKeyUsage

id-kp-serverAuth.

setContext(CtxInterface) - Method in class zeroecho.core.alg.aes.AesCipherContext

Sets the Conflux session context used to exchange IV/AAD/tagBits and to enable header I/O.

setContext(CtxInterface) - Method in class zeroecho.core.alg.chacha.ChaChaCipherContext

Attaches a context object that will be used to read and write per-session parameters.

setContext(CtxInterface) - Method in interface zeroecho.core.spi.ContextAware

Attaches a context object that will be used to read and write per-session parameters.

setExpectedTag(byte[]) - Method in class zeroecho.core.alg.common.eddsa.CommonEdDSASignatureContext

Sets the expected signature (tag) used in VERIFY mode.

setExpectedTag(byte[]) - Method in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Sets the expected verification tag to be checked when the wrapped stream finishes.

setExpectedTag(byte[]) - Method in class zeroecho.core.alg.digest.JcaDigestContext

Installs an expected digest tag for verification mode.

setExpectedTag(byte[]) - Method in class zeroecho.core.alg.hmac.HmacMacContext

Sets the expected tag for verification mode.

setExpectedTag(byte[]) - Method in class zeroecho.core.alg.lms.LmsSignatureContext

setExpectedTag(byte[]) - Method in class zeroecho.core.alg.mldsa.MldsaSignatureContext

Supplies the expected signature (tag) for VERIFY mode.

setExpectedTag(byte[]) - Method in class zeroecho.core.alg.rsa.RsaSignatureContext

Sets the expected signature for verification mode.

setExpectedTag(byte[]) - Method in class zeroecho.core.alg.slhdsa.SlhDsaSignatureContext

Supplies the expected signature (tag) for VERIFY mode.

setExpectedTag(byte[]) - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Supplies the expected signature for verification mode.

setExpectedTag(byte[]) - Method in class zeroecho.core.alg.xmss.XmssSignatureContext

setExpectedTag(byte[]) - Method in interface zeroecho.core.tag.TagEngine

Supplies the expected tag for verify mode.

setExportMode(ExportableDataContent.ExportMode) - Method in class zeroecho.sdk.content.api.AbstractExportableDataContent

Sets the export mode to control how the data is output.

setExportMode(ExportableDataContent.ExportMode) - Method in interface zeroecho.sdk.content.api.ExportableDataContent

Sets the desired export mode.

setInput(DataContent) - Method in class zeroecho.sdk.content.api.AbstractExportableDataContent

Sets the input DataContent for export.

setInput(DataContent) - Method in interface zeroecho.sdk.content.api.DataContent

Connects this content to the output of a previous stage in the pipeline.

setInput(DataContent) - Method in class zeroecho.sdk.content.builtin.PlainBytes

Connects this content to the output of a previous stage in the pipeline.

setInput(DataContent) - Method in class zeroecho.sdk.content.builtin.PlainFile

Connects this content to the output of a previous stage in the pipeline.

setInput(DataContent) - Method in class zeroecho.sdk.content.builtin.PlainString

Connects this content to the output of a previous stage in the pipeline.

setInput(DataContent) - Method in class zeroecho.sdk.content.builtin.SecretPassword

Rejects preceding content because a password is a chain source.

setInput(DataContent) - Method in interface zeroecho.sdk.guard.MultiRecipientContent

Connects the upstream content before the one processing attempt.

setPeerMessage(byte[]) - Method in class zeroecho.core.alg.common.agreement.GenericJcaMessageAgreementContext

Supplies the peer party's handshake message.

setPeerMessage(byte[]) - Method in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter

Stores the peer’s ciphertext for decapsulation.

setPeerMessage(byte[]) - Method in interface zeroecho.core.context.MessageAgreementContext

Supplies the peer’s message to this context.

setPeerMessage(byte[]) - Method in class zeroecho.sdk.hybrid.kex.HybridKexContext

Supplies the hybrid peer message received from the remote party.

setPeerPublic(PublicKey) - Method in class zeroecho.core.alg.common.agreement.GenericJcaAgreementContext

Assigns the peer’s public key for the key agreement.

setPeerPublic(PublicKey) - Method in class zeroecho.core.alg.common.agreement.GenericJcaMessageAgreementContext

Sets the peer's public key to be used in the key agreement.

setPeerPublic(PublicKey) - Method in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter

No-op for KEM-based contexts.

setPeerPublic(PublicKey) - Method in interface zeroecho.core.context.AgreementContext

Sets the peer's public key to be used in the key agreement.

setPeerPublic(PublicKey) - Method in class zeroecho.sdk.hybrid.kex.HybridKexContext

Sets the peer public key for the classic leg.

setVerificationApproach(ThrowingBiPredicate.VerificationBiPredicate) - Method in class zeroecho.core.alg.digest.JcaDigestContext

Sets the verification approach used to compare computed and expected digests.

setVerificationApproach(ThrowingBiPredicate.VerificationBiPredicate) - Method in class zeroecho.core.alg.hmac.HmacMacContext

Sets the verification approach used in verify mode to compare the expected and computed tags.

setVerificationApproach(ThrowingBiPredicate.VerificationBiPredicate) - Method in class zeroecho.core.alg.common.eddsa.CommonEdDSASignatureContext

Sets the verification approach used to compare the computed and expected signatures.

setVerificationApproach(ThrowingBiPredicate.VerificationBiPredicate) - Method in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Sets the verification approach used in VERIFY mode to compare the expected and computed signatures.

setVerificationApproach(ThrowingBiPredicate.VerificationBiPredicate) - Method in class zeroecho.core.alg.lms.LmsSignatureContext

setVerificationApproach(ThrowingBiPredicate.VerificationBiPredicate) - Method in class zeroecho.core.alg.mldsa.MldsaSignatureContext

Sets the verification approach used at EOF to compare the computed and expected signatures.

setVerificationApproach(ThrowingBiPredicate.VerificationBiPredicate) - Method in class zeroecho.core.alg.rsa.RsaSignatureContext

Sets the verification approach used to handle comparison outcomes in VERIFY mode.

setVerificationApproach(ThrowingBiPredicate.VerificationBiPredicate) - Method in class zeroecho.core.alg.slhdsa.SlhDsaSignatureContext

Sets the verification approach used at EOF to compare the computed and expected signatures.

setVerificationApproach(ThrowingBiPredicate.VerificationBiPredicate) - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Sets the verification approach to compare computed and expected signatures.

setVerificationApproach(ThrowingBiPredicate.VerificationBiPredicate) - Method in class zeroecho.core.alg.xmss.XmssSignatureContext

setVerificationApproach(ThrowingBiPredicate.VerificationBiPredicate) - Method in interface zeroecho.core.tag.TagEngine

Sets the verification approach used to compare computed and expected tags.

SHA_256 - Enum constant in enum class zeroecho.core.alg.digest.DigestSpec.Algorithm

SHA-256 digest from the SHA-2 family.

SHA_384 - Enum constant in enum class zeroecho.core.alg.digest.DigestSpec.Algorithm

SHA-384 digest from the SHA-2 family.

SHA_512 - Enum constant in enum class zeroecho.core.alg.digest.DigestSpec.Algorithm

SHA-512 digest from the SHA-2 family.

SHA1 - Enum constant in enum class zeroecho.core.alg.rsa.RsaEncSpec.Hash

SHA-1 (deprecated, retained for compatibility).

SHA2 - Enum constant in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Hash

SHA-2 based SLH-DSA parameter sets.

SHA2 - Enum constant in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Hash

SHA-2 based instantiation.

SHA-2, SHA-3, and SHAKE digest algorithms - Section in class zeroecho.core.alg.digest.Sha2Sha3Algorithm

sha256() - Static method in class zeroecho.core.alg.digest.DigestSpec

Returns a DigestSpec for SHA-256.

sha256() - Static method in class zeroecho.core.alg.hmac.HmacSpec

Convenience factory for HMAC-SHA256.

sha256() - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Selects SHA-256 as the digest algorithm.

sha256() - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Selects HmacSHA256.

sha256(int) - Static method in class zeroecho.core.alg.hmac.HmacKeyGenSpec

Convenience factory for HMAC-SHA256 key generation specs.

sha256(RepeatableContent, CancellationSignal) - Static method in class zeroecho.core.io.ContentDigests

Computes a SHA-256 fingerprint without materializing the aggregate content.

SHA256 - Enum constant in enum class zeroecho.core.alg.rsa.RsaEncSpec.Hash

SHA-256.

SHA256 - Enum constant in enum class zeroecho.core.alg.rsa.RsaSigSpec.Hash

SHA-256 digest.

SHA256 - Enum constant in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.PreHash

Pre-hash with SHA-256 (only for SHA2-128).

SHA256 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SHA-256 digest identity.

Sha2Sha3Algorithm - Class in zeroecho.core.alg.digest

SHA-2, SHA-3, and SHAKE digest algorithms

Sha2Sha3Algorithm() - Constructor for class zeroecho.core.alg.digest.Sha2Sha3Algorithm

Constructs the SHA-2/SHA-3/SHAKE digest algorithm definition and registers its Capability.

sha3_256() - Static method in class zeroecho.core.alg.digest.DigestSpec

Returns a DigestSpec for SHA3-256.

sha3_256() - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Selects SHA3-256 as the digest algorithm.

SHA3_256 - Enum constant in enum class zeroecho.core.alg.digest.DigestSpec.Algorithm

SHA3-256 digest from the SHA-3 family.

sha3_512() - Static method in class zeroecho.core.alg.digest.DigestSpec

Returns a DigestSpec for SHA3-512.

sha3_512() - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Selects SHA3-512 as the digest algorithm.

SHA3_512 - Enum constant in enum class zeroecho.core.alg.digest.DigestSpec.Algorithm

SHA3-512 digest from the SHA-3 family.

sha384() - Static method in class zeroecho.core.alg.digest.DigestSpec

Returns a DigestSpec for SHA-384.

sha384() - Static method in class zeroecho.core.alg.hmac.HmacSpec

Convenience factory for HMAC-SHA384.

sha384() - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Selects SHA-384 as the digest algorithm.

sha384() - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Selects HmacSHA384.

sha384(int) - Static method in class zeroecho.core.alg.hmac.HmacKeyGenSpec

Convenience factory for HMAC-SHA384 key generation specs.

SHA384 - Enum constant in enum class zeroecho.core.alg.rsa.RsaEncSpec.Hash

SHA-384.

SHA384 - Enum constant in enum class zeroecho.core.alg.rsa.RsaSigSpec.Hash

SHA-384 digest.

SHA384 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SHA-384 digest identity.

sha512() - Static method in class zeroecho.core.alg.digest.DigestSpec

Returns a DigestSpec for SHA-512.

sha512() - Static method in class zeroecho.core.alg.hmac.HmacSpec

Convenience factory for HMAC-SHA512.

sha512() - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Selects SHA-512 as the digest algorithm.

sha512() - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Selects HmacSHA512.

sha512(int) - Static method in class zeroecho.core.alg.hmac.HmacKeyGenSpec

Convenience factory for HMAC-SHA512 key generation specs.

SHA512 - Enum constant in enum class zeroecho.core.alg.mldsa.MldsaKeyGenSpec.PreHash

Pre-hash with SHA-512 (provider-specific variant).

SHA512 - Enum constant in enum class zeroecho.core.alg.rsa.RsaEncSpec.Hash

SHA-512.

SHA512 - Enum constant in enum class zeroecho.core.alg.rsa.RsaSigSpec.Hash

SHA-512 digest.

SHA512 - Enum constant in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.PreHash

Pre-hash with SHA-512 (only for SHA2-192/256).

SHA512 - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SHA-512 digest identity.

SHAKE - Enum constant in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Hash

SHAKE based SLH-DSA parameter sets.

SHAKE - Enum constant in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Hash

SHAKE (SHA-3 XOF) based instantiation.

shake128(int) - Static method in class zeroecho.core.alg.digest.DigestSpec

Returns a DigestSpec for SHAKE128 with the given output length.

shake128(int) - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Selects SHAKE128 with a given output length.

SHAKE128 - Enum constant in enum class zeroecho.core.alg.digest.DigestSpec.Algorithm

SHAKE128 extendable-output function (XOF).

SHAKE128 - Enum constant in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.PreHash

Pre-hash with SHAKE128 (only for SHAKE-128).

shake256(int) - Static method in class zeroecho.core.alg.digest.DigestSpec

Returns a DigestSpec for SHAKE256 with the given output length.

shake256(int) - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Selects SHAKE256 with a given output length.

SHAKE256 - Enum constant in enum class zeroecho.core.alg.digest.DigestSpec.Algorithm

SHAKE256 extendable-output function (XOF).

SHAKE256 - Enum constant in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.PreHash

Pre-hash with SHAKE256 (only for SHAKE-192/256).

sharedSecret() - Method in class zeroecho.core.context.KemContext.KemResult

Returns the derived shared secret.

shuffle() - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Randomly permutes the list of recipients using a default source of randomness.

sign() - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Switches the builder to sign mode.

sign(String, String, ContextSpec, ContextSpec, HybridSignatureProfile.VerifyRule, PrivateKey, PrivateKey, int) - Method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder.HybridSelector

Creates a hybrid signing trailer with optional specs and explicit maxBodyBytes.

sign(String, String, HybridSignatureProfile.VerifyRule, PrivateKey, PrivateKey) - Method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder.HybridSelector

Creates a hybrid signing trailer for the common case where both specs are null.

sign(String, PrivateKey) - Method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder.SingleSelector

Creates a signing trailer for a single signature algorithm (no spec).

sign(String, PrivateKey, ContextSpec) - Method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder.SingleSelector

Creates a signing trailer for a single signature algorithm with an optional spec.

sign(String, AlgorithmIdentity, RepeatableContent, CancellationSignal) - Method in class zeroecho.core.storage.KeyringSignatureExecutor

Signs repeatable content using a private key resolved within this executor.

sign(RepeatableContent, CancellationSignal, int) - Method in class zeroecho.core.storage.StatefulSigner

Signs after durably advancing the stored parent by one leaf.

sign(CmpProtectedMessage.Response, X509Certificate, PrivateKey, List, byte[], Instant) - Method in class zeroecho.pkix.cmp.CmpProtectedMessage.Verified

Signs one response using the supplied retained server credential.

sign(ZeroEchoSession, HybridSignatureProfile, PrivateKey, PrivateKey, int) - Static method in class zeroecho.sdk.hybrid.signature.HybridSignatureContexts

Creates a signing hybrid signature context.

Sign - Section in package zeroecho.core.alg.common.sig

SIGN - Enum constant in enum class zeroecho.core.KeyUsage

Create digital signatures.

SIGN - Enum constant in enum class zeroecho.core.spi.AlgorithmExecutionCapability.Direction

Signature generation.

SIGN - Enum constant in enum class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder.Mode

Sign mode produces an RSA signature over the input stream.

signature() - Method in record class zeroecho.core.spec.AlgorithmSuite

Returns the value of the signature record component.

signature() - Method in class zeroecho.pkix.cmp.CrmfRequest

Returns the signing-key proof bytes.

signature() - Method in interface zeroecho.pkix.csr.CertificationRequest

Returns the request self-signature bytes.

signature() - Method in record class zeroecho.pkix.ct.SignedCertificateTimestamp

Returns an independent copy of the signature bytes.

signature() - Method in interface zeroecho.pkix.ocsp.OcspRequest

Returns the request signature, for a signed request.

signature() - Method in interface zeroecho.pkix.sign.ContentSigner

Finalizes and returns the raw signature over the bytes written to ContentSigner.contentStream().

signature(ZeroEchoSession, String, Key, ContextSpec) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for a signature engine of the given algorithm.

SIGNATURE - Enum constant in enum class zeroecho.core.spec.AlgorithmIdentity.Kind

Signature scheme, independent of a particular key parameter set.

signatureAlgorithm() - Method in class zeroecho.pkix.cmp.CrmfRequest

Returns the proof algorithm.

signatureAlgorithm() - Method in interface zeroecho.pkix.csr.CertificationRequest

Returns the signature algorithm identifier of the request self-signature.

signatureAlgorithm() - Method in record class zeroecho.pkix.ct.SignedCertificateTimestamp

Returns the value of the signatureAlgorithm record component.

signatureAlgorithm() - Method in interface zeroecho.pkix.ocsp.OcspRequest

Returns the request signature algorithm identifier, for a signed request.

signatureAlgorithm() - Method in interface zeroecho.pkix.ocsp.OcspResponse

Returns the signature algorithm identifier of the basic response.

SignatureContext - Interface in zeroecho.core.context

Context for streaming digital signature operations in pull-based pipelines.

SignatureInteropProfile - Class in zeroecho.core.alg.common.sig

Describes how a standard signature algorithm identifier maps to a concrete ZeroEcho signature context.

SignatureInteropProfile(String, String, String, ContextSpec, SignatureInteropProfile.SignatureRepresentation, int) - Constructor for class zeroecho.core.alg.common.sig.SignatureInteropProfile

Creates a profile.

SignatureInteropProfile.SignatureRepresentation - Enum Class in zeroecho.core.alg.common.sig

Signature byte representation bridging policy.

SignatureInteropProfiles - Class in zeroecho.core.alg.common.sig

Resolves standard signature algorithm identifiers to explicit ZeroEcho signature profiles.

signatureLength() - Method in class zeroecho.core.storage.StatefulSigner

Reads signature-size metadata without reserving a leaf or signing a probe.

Signature length - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Signature length formula - Section in class zeroecho.core.alg.xmss.XmssSignatureContext

signatureRepresentation() - Method in class zeroecho.core.alg.common.sig.SignatureInteropProfile

Returns the representation bridge used for signature bytes.

Signatures and MACs - Section in package zeroecho.sdk.builders.alg

SignatureTrailerDataContentBuilder - Class in zeroecho.sdk.builders

Signature-specific trailer builder for DataContent pipelines.

SignatureTrailerDataContentBuilder.HybridSelector - Class in zeroecho.sdk.builders

Helper entry for hybrid signature construction.

SignatureTrailerDataContentBuilder.SingleSelector - Class in zeroecho.sdk.builders

Helper entry for single-algorithm signature construction.

SignatureTrailerInputStream - Class in zeroecho.sdk.io

SignatureTrailerInputStream reads an upstream stream that has a trailing signature tag and exposes only the original body while capturing the detached signature.

SignatureTrailerInputStream(SignatureContext, InputStream, int, Consumer) - Constructor for class zeroecho.sdk.io.SignatureTrailerInputStream

Creates a new signature-stripping stream that passes through only the body while capturing the trailing signature tag.

SignatureVerificationStrategy - Class in zeroecho.core.tag

Verification strategy that delegates to a JCA Signature object.

SignatureVerificationStrategy() - Constructor for class zeroecho.core.tag.SignatureVerificationStrategy

Creates a stateless JCA signature-verification strategy.

SignedCertificateTimestamp - Record Class in zeroecho.pkix.ct

A Signed Certificate Timestamp (SCT) received from a Certificate Transparency log, as defined by RFC 9162 (CT 2.0) and RFC 6962 (CT 1.0).

SignedCertificateTimestamp(int, byte[], Instant, byte[], String, byte[]) - Constructor for record class zeroecho.pkix.ct.SignedCertificateTimestamp

Validates and defensively copies all array fields.

signedEncryptedPackage(byte[], byte[], X509Certificate, List, ContentSigner) - Static method in class zeroecho.pkix.EstKeygen

Signs one RFC 5958 asymmetric key package and encrypts that SignedData for the exact negotiated TLS recipient.

signedRequest() - Method in class zeroecho.pkix.cmp.CrmfRequest

Returns the exact signed CertRequest.

signer(PrivateKey, AlgorithmIdentifier) - Method in class zeroecho.pkix.bc.BcPkixProvider

signer(PrivateKey, AlgorithmIdentifier) - Static method in class zeroecho.pkix.Pkix

Creates a content signer over a local private key.

signer(PrivateKey, AlgorithmIdentifier) - Method in interface zeroecho.pkix.spi.PkixProvider

Creates a content signer over a local private key.

signerCertificates() - Method in interface zeroecho.pkix.ocsp.OcspRequest

Returns the signer certificates embedded in a signed request, if any.

signFixedLength() - Method in enum class zeroecho.core.alg.ecdh.EcdhCurveSpec

Returns the fixed byte length of deterministic ECDSA signatures for this curve in P1363 format.

signFixedLength() - Method in enum class zeroecho.core.alg.ecdsa.EcdsaCurveSpec

Returns the fixed signature length for this curve in bytes.

Signing pipeline - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Sign with Ed25519 - Section in interface zeroecho.core.context.SignatureContext

Sign with RSA-PSS - Section in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Sign with RSASSA-PSS (SHA-256, salt 32) - Section in class zeroecho.core.alg.rsa.RsaSignatureContext

SIMPLE - Enum constant in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Mode

Selects the current pure SLH-DSA compatibility binding.

single(ZeroEchoSession) - Static method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder

Enters single-algorithm (non-hybrid) construction helpers.

SingleResponse(CertId, CertStatus, Instant, Optional) - Constructor for record class zeroecho.pkix.ocsp.OcspResponse.SingleResponse

Creates an instance of a SingleResponse record class.

size() - Method in class zeroecho.core.marshal.PairSeq

Returns the number of key-value pairs in this sequence.

sizeBits() - Method in class zeroecho.core.alg.dh.DhSpec

Returns the effective bit length of this group.

SLH_DSA_SHA2_128F - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-128f signing suite (FIPS 205, SHA2, 128-bit, fast).

SLH_DSA_SHA2_128F_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-128f public-key identity (FIPS 205).

SLH_DSA_SHA2_128F_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-128f signature identity (FIPS 205, SHA2, 128-bit, fast).

SLH_DSA_SHA2_128S - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-128s signing suite (FIPS 205, SHA2, 128-bit, small).

SLH_DSA_SHA2_128S_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-128s public-key identity (FIPS 205).

SLH_DSA_SHA2_128S_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-128s signature identity (FIPS 205, SHA2, 128-bit, small).

SLH_DSA_SHA2_192F - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-192f signing suite (FIPS 205, SHA2, 192-bit, fast).

SLH_DSA_SHA2_192F_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-192f public-key identity (FIPS 205).

SLH_DSA_SHA2_192F_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-192f signature identity (FIPS 205, SHA2, 192-bit, fast).

SLH_DSA_SHA2_192S - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-192s signing suite (FIPS 205, SHA2, 192-bit, small).

SLH_DSA_SHA2_192S_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-192s public-key identity (FIPS 205).

SLH_DSA_SHA2_192S_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-192s signature identity (FIPS 205, SHA2, 192-bit, small).

SLH_DSA_SHA2_256F - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-256f signing suite (FIPS 205, SHA2, 256-bit, fast).

SLH_DSA_SHA2_256F_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-256f public-key identity (FIPS 205).

SLH_DSA_SHA2_256F_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-256f signature identity (FIPS 205, SHA2, 256-bit, fast).

SLH_DSA_SHA2_256S - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-256s signing suite (FIPS 205, SHA2, 256-bit, small).

SLH_DSA_SHA2_256S_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-256s public-key identity (FIPS 205).

SLH_DSA_SHA2_256S_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHA2-256s signature identity (FIPS 205, SHA2, 256-bit, small).

SLH_DSA_SHAKE_128F - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-128f signing suite (FIPS 205, SHAKE, 128-bit, fast).

SLH_DSA_SHAKE_128F_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-128f public-key identity (FIPS 205).

SLH_DSA_SHAKE_128F_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-128f signature identity (FIPS 205, SHAKE, 128-bit, fast).

SLH_DSA_SHAKE_128S - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-128s signing suite (FIPS 205, SHAKE, 128-bit, small).

SLH_DSA_SHAKE_128S_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-128s public-key identity (FIPS 205).

SLH_DSA_SHAKE_128S_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-128s signature identity (FIPS 205, SHAKE, 128-bit, small).

SLH_DSA_SHAKE_192F - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-192f signing suite (FIPS 205, SHAKE, 192-bit, fast).

SLH_DSA_SHAKE_192F_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-192f public-key identity (FIPS 205).

SLH_DSA_SHAKE_192F_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-192f signature identity (FIPS 205, SHAKE, 192-bit, fast).

SLH_DSA_SHAKE_192S - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-192s signing suite (FIPS 205, SHAKE, 192-bit, small).

SLH_DSA_SHAKE_192S_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-192s public-key identity (FIPS 205).

SLH_DSA_SHAKE_192S_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-192s signature identity (FIPS 205, SHAKE, 192-bit, small).

SLH_DSA_SHAKE_256F - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-256f signing suite (FIPS 205, SHAKE, 256-bit, fast).

SLH_DSA_SHAKE_256F_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-256f public-key identity (FIPS 205).

SLH_DSA_SHAKE_256F_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-256f signature identity (FIPS 205, SHAKE, 256-bit, fast).

SLH_DSA_SHAKE_256S - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-256s signing suite (FIPS 205, SHAKE, 256-bit, small).

SLH_DSA_SHAKE_256S_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-256s public-key identity (FIPS 205).

SLH_DSA_SHAKE_256S_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

SLH-DSA-SHAKE-256s signature identity (FIPS 205, SHAKE, 256-bit, small).

SlhDsaAlgorithm - Class in zeroecho.core.alg.slhdsa

SLH-DSA (FIPS 205) signature algorithm binding for the ZeroEcho framework.

SlhDsaAlgorithm() - Constructor for class zeroecho.core.alg.slhdsa.SlhDsaAlgorithm

Creates a new SLH-DSA algorithm instance and registers its capabilities.

SlhDsaKeyGenBuilder - Class in zeroecho.core.alg.slhdsa

Key pair builder for SLH-DSA (FIPS 205) using the Bouncy Castle PQC provider.

SlhDsaKeyGenBuilder() - Constructor for class zeroecho.core.alg.slhdsa.SlhDsaKeyGenBuilder

Creates a stateless SLH-DSA key-pair generator.

SlhDsaKeyGenSpec - Class in zeroecho.core.alg.slhdsa

Specification for generating SLH-DSA key pairs (FIPS 205).

SlhDsaKeyGenSpec.Hash - Enum Class in zeroecho.core.alg.slhdsa

SLH-DSA hash families (FIPS 205).

SlhDsaKeyGenSpec.PreHash - Enum Class in zeroecho.core.alg.slhdsa

Optional pre-hash variant selection.

SlhDsaKeyGenSpec.Security - Enum Class in zeroecho.core.alg.slhdsa

Security levels as defined by NIST PQC (L1, L3, L5).

SlhDsaKeyGenSpec.Variant - Enum Class in zeroecho.core.alg.slhdsa

Variant trading performance against signature size.

SlhDsaPrivateKeyBuilder - Class in zeroecho.core.alg.slhdsa

Builder for importing SLH-DSA private keys from encoded specifications.

SlhDsaPrivateKeyBuilder() - Constructor for class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeyBuilder

Creates a stateless SLH-DSA private-key importer.

SlhDsaPrivateKeySpec - Class in zeroecho.core.alg.slhdsa

Encoded representation of an SLH-DSA private key.

SlhDsaPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeySpec

Creates a new specification using the default provider "BC".

SlhDsaPrivateKeySpec(byte[], String) - Constructor for class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeySpec

Creates a new specification using the supplied provider.

SlhDsaPublicKeyBuilder - Class in zeroecho.core.alg.slhdsa

Builder for importing SLH-DSA public keys from encoded specifications.

SlhDsaPublicKeyBuilder() - Constructor for class zeroecho.core.alg.slhdsa.SlhDsaPublicKeyBuilder

Creates a stateless SLH-DSA public-key importer.

SlhDsaPublicKeySpec - Class in zeroecho.core.alg.slhdsa

Encoded representation of an SLH-DSA public key.

SlhDsaPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.slhdsa.SlhDsaPublicKeySpec

Creates a new specification using the default provider "BC".

SlhDsaPublicKeySpec(byte[], String) - Constructor for class zeroecho.core.alg.slhdsa.SlhDsaPublicKeySpec

Creates a new specification using the supplied provider.

slhDsaSign(ZeroEchoSession, PrivateKey) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for an SLH-DSA signing engine.

SlhDsaSignatureContext - Class in zeroecho.core.alg.slhdsa

Streaming signature context for SLH-DSA (FIPS 205).

SlhDsaSignatureContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.slhdsa.SlhDsaSignatureContext

Creates a signing context bound to a private key.

SlhDsaSignatureContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.slhdsa.SlhDsaSignatureContext

Creates a verification context bound to a public key.

slhDsaVerify(ZeroEchoSession, PublicKey) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for an SLH-DSA verification engine.

SMALL - Enum constant in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Variant

Smaller, slower signatures.

SMALL - Enum constant in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Variant

Smaller, slower signatures.

snapshot(List) - Static method in interface zeroecho.core.ParameterSetDescriptor

Snapshots a provider's descriptors, rejecting duplicate identifiers.

sntrup1013() - Static method in class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec

Creates a key generation specification for the SntruPrimeKeyGenSpec.Variant.SNTRUP1013 parameter set.

SNTRUP1013 - Enum constant in enum class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec.Variant

Variant beyond 256-bit with even larger parameters.

sntrup1277() - Static method in class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec

Creates a key generation specification for the SntruPrimeKeyGenSpec.Variant.SNTRUP1277 parameter set.

SNTRUP1277 - Enum constant in enum class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec.Variant

Largest standardized variant, with very high security margins.

sntrup653() - Static method in class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec

Creates a key generation specification for the SntruPrimeKeyGenSpec.Variant.SNTRUP653 parameter set.

SNTRUP653 - Enum constant in enum class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec.Variant

Variant with ~128-bit classical security.

sntrup761() - Static method in class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec

Creates a key generation specification for the SntruPrimeKeyGenSpec.Variant.SNTRUP761 parameter set.

SNTRUP761 - Enum constant in enum class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec.Variant

Variant with ~192-bit classical security.

sntrup857() - Static method in class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec

Creates a key generation specification for the SntruPrimeKeyGenSpec.Variant.SNTRUP857 parameter set.

SNTRUP857 - Enum constant in enum class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec.Variant

Variant with ~256-bit classical security.

sntrup953() - Static method in class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec

Creates a key generation specification for the SntruPrimeKeyGenSpec.Variant.SNTRUP953 parameter set.

SNTRUP953 - Enum constant in enum class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec.Variant

Variant beyond 256-bit with larger parameters.

SntruPrimeAlgorithm - Class in zeroecho.core.alg.ntruprime

Configures and exposes the SNTRU Prime post-quantum KEM and a message-agreement adapter backed by the Bouncy Castle PQC provider.

SntruPrimeAlgorithm() - Constructor for class zeroecho.core.alg.ntruprime.SntruPrimeAlgorithm

Creates a new algorithm wrapper for SNTRU Prime and registers its KEM and agreement capabilities, together with key builders for generation and import.

SntruPrimeKemContext - Class in zeroecho.core.alg.ntruprime

KEM context for SNTRU Prime that performs encapsulation and decapsulation using the underlying key material.

SntruPrimeKemContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.ntruprime.SntruPrimeKemContext

Creates a decapsulation context bound to a holder private key.

SntruPrimeKemContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.ntruprime.SntruPrimeKemContext

Creates an encapsulation context bound to a recipient public key.

SntruPrimeKeyGenSpec - Class in zeroecho.core.alg.ntruprime

Algorithm-specific key generation parameters for SNTRU Prime.

SntruPrimeKeyGenSpec.Variant - Enum Class in zeroecho.core.alg.ntruprime

Enumeration of supported SNTRU Prime parameter sets.

SntruPrimePrivateKeySpec - Class in zeroecho.core.alg.ntruprime

Specification wrapper for an encoded SNTRU Prime private key in PKCS#8 format.

SntruPrimePrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.ntruprime.SntruPrimePrivateKeySpec

Constructs a new private key specification from a PKCS#8-encoded byte array.

SntruPrimePublicKeySpec - Class in zeroecho.core.alg.ntruprime

Specification wrapper for an encoded SNTRU Prime public key in X.509 format.

SntruPrimePublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.ntruprime.SntruPrimePublicKeySpec

Constructs a new public key specification from an X.509-encoded byte array.

spec - Variable in class zeroecho.core.alg.chacha.ChaChaCipherContext

Algorithm-specific specification (e.g., AEAD parameters).

spec() - Method in record class zeroecho.core.ParameterSetDescriptor.Concrete

Returns the value of the spec record component.

spec() - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Returns the currently configured HMAC specification.

spec(AesSpec) - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Copies mode/padding/tagBits/header from a fully built AesSpec.

spec(ElgamalEncSpec) - Method in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Sets the encryption specification such as padding mode.

spec(HmacSpec) - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Sets the HMAC specification to use for this pipeline.

spec(RsaEncSpec) - Method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Sets the RSA encryption specification, including padding and OAEP parameters.

spec(RsaSigSpec) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Sets the RSA signature specification, including padding mode and hash options.

spec(ContextSpec) - Method in class zeroecho.sdk.builders.HybridKexBuilder.ClassicAgreement

Sets the classic context spec (algorithm parameters).

spec(ContextSpec) - Method in class zeroecho.sdk.builders.HybridKexBuilder.ClassicPairMessage

Sets the classic context spec (algorithm parameters).

spec(ContextSpec) - Method in class zeroecho.sdk.builders.HybridKexBuilder.PqcKem

Sets the PQC context spec (algorithm parameters).

Specification for a BIKE private key - Section in class zeroecho.core.alg.bike.BikePrivateKeySpec

Specification for a BIKE public key - Section in class zeroecho.core.alg.bike.BikePublicKeySpec

Specification for BIKE key generation - Section in class zeroecho.core.alg.bike.BikeKeyGenSpec

Specification for Ed25519 key-pair generation - Section in class zeroecho.core.alg.ed25519.Ed25519KeyGenSpec

Specification for Ed25519 private keys - Section in class zeroecho.core.alg.ed25519.Ed25519PrivateKeySpec

Specification for Ed25519 public keys - Section in class zeroecho.core.alg.ed25519.Ed25519PublicKeySpec

Specification for HMAC key generation - Section in class zeroecho.core.alg.hmac.HmacKeyGenSpec

Specification for HMAC operation parameters - Section in class zeroecho.core.alg.hmac.HmacSpec

Specification for importing a Frodo private key - Section in class zeroecho.core.alg.frodo.FrodoPrivateKeySpec

Specification for importing a Frodo public key - Section in class zeroecho.core.alg.frodo.FrodoPublicKeySpec

specType() - Method in record class zeroecho.core.Capability

Returns the value of the specType record component.

specType() - Method in record class zeroecho.core.KeyOperationInfo

Returns the value of the specType record component.

SPHINCS_PLUS_PUBLIC_KEY - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ZeroEcho SPHINCS+ default public-key identity.

SPHINCS_PLUS_SIGNATURE - Static variable in class zeroecho.core.alg.BootstrapAlgorithmIdentities

ZeroEcho SPHINCS+ default signature identity.

SphincsPlusAlgorithm - Class in zeroecho.core.alg.sphincsplus

SPHINCS+ signature algorithm binding for the ZeroEcho framework.

SphincsPlusAlgorithm() - Constructor for class zeroecho.core.alg.sphincsplus.SphincsPlusAlgorithm

Creates a new SPHINCS+ algorithm instance and registers its capabilities.

SphincsPlusKeyGenBuilder - Class in zeroecho.core.alg.sphincsplus

Key pair builder for the SPHINCS+ post-quantum signature scheme.

SphincsPlusKeyGenBuilder() - Constructor for class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenBuilder

Creates a stateless SPHINCS+ key-pair generator.

SphincsPlusKeyGenSpec - Class in zeroecho.core.alg.sphincsplus

Specification for generating SPHINCS+ key pairs.

SphincsPlusKeyGenSpec.Hash - Enum Class in zeroecho.core.alg.sphincsplus

Hash function families supported by SPHINCS+.

SphincsPlusKeyGenSpec.Mode - Enum Class in zeroecho.core.alg.sphincsplus

Legacy construction selector.

SphincsPlusKeyGenSpec.Security - Enum Class in zeroecho.core.alg.sphincsplus

Security levels as defined by NIST PQC (L1, L3, L5).

SphincsPlusKeyGenSpec.Variant - Enum Class in zeroecho.core.alg.sphincsplus

Signature variants trading performance against signature size.

SphincsPlusPrivateKeyBuilder - Class in zeroecho.core.alg.sphincsplus

Builder for importing SPHINCS+ private keys from encoded specifications.

SphincsPlusPrivateKeyBuilder() - Constructor for class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeyBuilder

Creates a stateless SPHINCS+ private-key importer.

SphincsPlusPrivateKeySpec - Class in zeroecho.core.alg.sphincsplus

Encoded representation of a SPHINCS+ private key.

SphincsPlusPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeySpec

Constructs a new specification with the default provider "BC".

SphincsPlusPrivateKeySpec(byte[], String) - Constructor for class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeySpec

Constructs a new specification with the given provider.

SphincsPlusPublicKeyBuilder - Class in zeroecho.core.alg.sphincsplus

Builder for importing SPHINCS+ public keys from encoded specifications.

SphincsPlusPublicKeyBuilder() - Constructor for class zeroecho.core.alg.sphincsplus.SphincsPlusPublicKeyBuilder

Creates a stateless SPHINCS+ public-key importer.

SphincsPlusPublicKeySpec - Class in zeroecho.core.alg.sphincsplus

Encoded representation of a SPHINCS+ public key.

SphincsPlusPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.sphincsplus.SphincsPlusPublicKeySpec

Constructs a new specification with the default provider "BC".

SphincsPlusPublicKeySpec(byte[], String) - Constructor for class zeroecho.core.alg.sphincsplus.SphincsPlusPublicKeySpec

Constructs a new specification with the given provider.

sphincsPlusSign(ZeroEchoSession, PrivateKey) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for a SPHINCS+ signing engine.

SphincsPlusSignatureContext - Class in zeroecho.core.alg.sphincsplus

SPHINCS+ signature context that adapts a JCA engine for streaming sign and verify.

SphincsPlusSignatureContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Creates a SPHINCS+ signing context bound to a private key.

SphincsPlusSignatureContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Creates a SPHINCS+ verification context bound to a public key.

sphincsPlusVerify(ZeroEchoSession, PublicKey) - Static method in class zeroecho.core.tag.TagEngineBuilder

Creates a builder for a SPHINCS+ verification engine.

standard() - Static method in record class zeroecho.core.storage.KeyringProtection

Returns the standard protection policy.

Standardized ECDH Curve Specifications - Section in enum class zeroecho.core.alg.ecdh.EcdhCurveSpec

statefulSigner(String, LocalStatefulSigningAuthority) - Method in class zeroecho.core.storage.KeyringStore

Resolves an explicit durable signing capability for an enrolled key.

StatefulSigner - Class in zeroecho.core.storage

Durable signing capability for a newly enrolled LMS/XMSS key.

StatefulSigningGuard - Class in zeroecho.core.alg.common.sig

Fail-closed containment for stateful signing until durable leaf reservation is available.

status() - Method in record class zeroecho.pkix.ocsp.OcspResponse.SingleResponse

Returns the value of the status record component.

STATUS_FAILURE - Static variable in class zeroecho.pkix.scep.ScepCodec

pkiStatus value for failure.

STATUS_PENDING - Static variable in class zeroecho.pkix.scep.ScepCodec

pkiStatus value for pending.

STATUS_SUCCESS - Static variable in class zeroecho.pkix.scep.ScepCodec

pkiStatus value for success.

step() - Method in record class zeroecho.core.ParameterConstraint

Returns the value of the step record component.

storeInCtx(Key) - Method in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Requests that the finalized digest be written into the context under the provided key.

str - Variable in class zeroecho.sdk.content.builtin.PlainString

The plain text content represented by this instance.

Streaming and resource management - Section in package zeroecho.sdk.hybrid.signature

Streaming contract - Section in class zeroecho.core.alg.mldsa.MldsaSignatureContext

Streaming contract - Section in class zeroecho.core.alg.slhdsa.SlhDsaSignatureContext

Streaming model - Section in package zeroecho.sdk.builders.alg

Streaming pipeline (wrap) - Section in class zeroecho.core.alg.ed25519.Ed25519SignatureContext

Streaming pipeline (wrap) - Section in class zeroecho.core.alg.ed448.Ed448SignatureContext

Streaming signature model - Section in package zeroecho.core.alg.mldsa

Streaming signature model - Section in package zeroecho.core.alg.slhdsa

strengthBits - Variable in enum class zeroecho.core.alg.mldsa.MldsaKeyGenSpec.ParameterSet

Claimed security strength in bits (128/192/256) used by policy.

STRING - Enum constant in enum class zeroecho.core.ParameterConstraint.ValueKind

Nonblank string.

Strings - Class in zeroecho.core.util

Utility class providing string conversion helpers for debugging and logging.

stringType() - Method in record class zeroecho.pkix.RelativeDistinguishedName

Returns the value of the stringType record component.

Strip a fixed trailer (for example, 16-byte tag) from the end of a stream - Section in package zeroecho.core.io

Subclass Contract - Section in class zeroecho.sdk.util.OutputToInputStreamAdapter

Subclassing contract - Section in class zeroecho.core.io.AbstractPassthroughInputStream

subject() - Method in class zeroecho.pkix.cmp.CrmfRequest

Returns the requested subject.

subject() - Method in interface zeroecho.pkix.csr.CertificationRequest

Returns the requested subject distinguished name.

subject(X500Principal) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Sets the subject distinguished name (required).

subject(X500Principal) - Method in interface zeroecho.pkix.csr.CertificationRequestBuilder

Sets the requested subject distinguished name (required).

subjectAlternativeNames(List, boolean) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Adds a SubjectAlternativeName extension.

subjectAlternativeNames(List, boolean) - Method in interface zeroecho.pkix.csr.CertificationRequestBuilder

Requests the given subject alternative names via the extension-request attribute.

subjectKeyIdentifier() - Method in interface zeroecho.pkix.cert.CertificateBuilder

Adds a SubjectKeyIdentifier derived from the subject public key.

subjectKeyIdentifier(PublicKey) - Method in class zeroecho.pkix.bc.BcPkixProvider

subjectKeyIdentifier(PublicKey) - Static method in class zeroecho.pkix.Pkix

Computes the standard subject key identifier for a public key.

subjectKeyIdentifier(PublicKey) - Method in interface zeroecho.pkix.spi.PkixProvider

Computes the standard subject key identifier (SHA-1 of the SPKI) for a key.

subjectPublicKeyAlgorithm(byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

subjectPublicKeyAlgorithm(byte[]) - Static method in class zeroecho.pkix.Pkix

Extracts the algorithm identifier from a DER-encoded SubjectPublicKeyInfo.

subjectPublicKeyAlgorithm(byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Extracts the algorithm identifier from a DER-encoded SubjectPublicKeyInfo.

subjectPublicKeyBytes(byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

subjectPublicKeyBytes(byte[]) - Static method in class zeroecho.pkix.Pkix

Returns the raw contents of the public-key BIT STRING of a DER-encoded SubjectPublicKeyInfo.

subjectPublicKeyBytes(byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Returns the raw contents of the public-key BIT STRING of a DER-encoded SubjectPublicKeyInfo (the bytes after the unused-bits octet).

subjectPublicKeyInfo() - Method in class zeroecho.pkix.cmp.CrmfRequest

Returns the proof's public key.

subjectPublicKeyInfo() - Method in interface zeroecho.pkix.csr.CertificationRequest

Returns the exact DER of the SubjectPublicKeyInfo carried by the request, byte-for-byte as encoded in the request.

subjectPublicKeyInfo(X509Certificate) - Method in class zeroecho.pkix.bc.BcPkixProvider

subjectPublicKeyInfo(X509Certificate) - Static method in class zeroecho.pkix.Pkix

Returns the exact DER of the SubjectPublicKeyInfo embedded in a certificate.

subjectPublicKeyInfo(X509Certificate) - Method in interface zeroecho.pkix.spi.PkixProvider

Returns the exact DER of the SubjectPublicKeyInfo embedded in a certificate, byte-for-byte as encoded in the certificate.

Subtypes - Section in interface zeroecho.core.context.CryptoContext

SUPERSEDED - Enum constant in enum class zeroecho.pkix.crl.CrlReason

superseded (4).

Supported parameter sets - Section in package zeroecho.core.alg.mldsa

Supported parameter space - Section in package zeroecho.core.alg.slhdsa

supporting(AlgorithmIdentity, AlgorithmSuite, AlgorithmExecutionCapability.Direction) - Method in class zeroecho.core.spi.AlgorithmExecutionCapabilities

Finds all installed implementations supporting an exact tuple.

supports(KeyUsage) - Method in class zeroecho.core.CryptoAlgorithm

Returns whether this algorithm supports the given role.

supports(AlgorithmIdentity, AlgorithmSuite, AlgorithmExecutionCapability.Direction) - Method in interface zeroecho.core.spi.AlgorithmExecutionCapability

Tests whether this implementation supports an exact identity and suite.

symmetric() - Method in class zeroecho.sdk.KeyBuilders

Returns symmetric key operations.

SYMMETRIC - Enum constant in enum class zeroecho.core.AlgorithmFamily

Shared-key primitives (ciphers, MACs).

SYMMETRIC_GENERATE - Enum constant in enum class zeroecho.core.KeyOperation

Generates a symmetric key.

SYMMETRIC_IMPORT - Enum constant in enum class zeroecho.core.KeyOperation

Imports a symmetric key.

SymmetricHeaderCodec - Interface in zeroecho.core

Optional SPI to write/read a small header that carries runtime params (e.g., IV, tag length, AAD hash).

symmetricKeyGenerator(Class) - Method in class zeroecho.core.CryptoAlgorithm

Returns the symmetric-key generator registered for an exact specification class.

SymmetricKeyGenerator<S> - Interface in zeroecho.core.spi

Generates symmetric keys for one exact specification type.

symmetricKeyImporter(Class) - Method in class zeroecho.core.CryptoAlgorithm

Returns the symmetric-key importer registered for an exact specification class.

SymmetricKeyImporter<S> - Interface in zeroecho.core.spi

Imports symmetric keys for one exact specification type.

T

tag(String) - Static method in class zeroecho.core.ConfluxKeys

Returns a typed key for the authentication tag of a given algorithm.

tagBits(String) - Static method in class zeroecho.core.ConfluxKeys

Returns a typed key for the number of authentication tag bits.

TagEngine<T> - Interface in zeroecho.core.tag

Minimal streaming engine for producing or verifying authentication tags on byte streams.

TagEngineBuilder<T> - Class in zeroecho.core.tag

Factory-style builder that supplies fresh TagEngine instances on demand.

TagEngine contract - Section in class zeroecho.core.alg.hmac.HmacMacContext

tagLenBits() - Method in class zeroecho.core.alg.aes.AesSpec

Returns the authentication tag length in bits.

tagLenBits(int) - Method in class zeroecho.core.alg.aes.AesSpec.Builder

Sets the GCM authentication tag length in bits.

tagLength() - Method in class zeroecho.core.alg.common.eddsa.CommonEdDSASignatureContext

Returns the fixed tag (signature) length in bytes for this algorithm.

tagLength() - Method in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Returns the declared tag length in bytes.

tagLength() - Method in class zeroecho.core.alg.digest.JcaDigestContext

Returns the digest length in bytes.

tagLength() - Method in class zeroecho.core.alg.hmac.HmacMacContext

Returns the MAC tag length in bytes.

tagLength() - Method in class zeroecho.core.alg.lms.LmsSignatureContext

tagLength() - Method in class zeroecho.core.alg.mldsa.MldsaSignatureContext

Returns the signature (tag) length in bytes for the parameter set in use.

tagLength() - Method in class zeroecho.core.alg.rsa.RsaSignatureContext

Returns the signature length in bytes.

tagLength() - Method in class zeroecho.core.alg.slhdsa.SlhDsaSignatureContext

Returns the signature (tag) length in bytes for the parameter set in use.

tagLength() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Returns the length of the signature (tag) produced or expected.

tagLength() - Method in class zeroecho.core.alg.xmss.XmssSignatureContext

tagLength() - Method in interface zeroecho.core.tag.TagEngine

Returns the fixed length in bytes of the final authentication tag.

TagTrailerDataContentBuilder<T> - Class in zeroecho.sdk.builders

Builder for DataContent pipelines that attach or verify an authentication tag at end of stream.

TagTrailerDataContentBuilder(Supplier) - Constructor for class zeroecho.sdk.builders.TagTrailerDataContentBuilder

Creates a builder with an engine factory.

TagTrailerDataContentBuilder(TagEngine) - Constructor for class zeroecho.sdk.builders.TagTrailerDataContentBuilder

Creates a builder bound to a fixed engine instance.

tailLength() - Method in class zeroecho.core.io.TailStrippingInputStream

Returns the number of bytes stripped from the end of the stream.

TailStrippingInputStream - Class in zeroecho.core.io

InputStream that withholds the last N bytes from the upstream stream and emits everything before that tail, delivering the withheld tail to a callback at EOF.

TailStrippingInputStream(InputStream, int, int) - Constructor for class zeroecho.core.io.TailStrippingInputStream

Creates a new tail-stripping stream around an upstream source.

Template(String, String, SecurityLevel, List, Function) - Constructor for record class zeroecho.core.ParameterSetDescriptor.Template

Snapshots metadata and validates argument names and types before factory invocation.

Template(String, String, SecurityLevel, List, List, Function) - Constructor for record class zeroecho.core.ParameterSetDescriptor.Template

Creates a template with a complete, ordered validation schema.

TemplateParameter - Record Class in zeroecho.core

Describes a single user-supplied parameter accepted by a ParameterSetDescriptor.Template.

TemplateParameter(String, String, Class, String) - Constructor for record class zeroecho.core.TemplateParameter

Validates the record fields on construction.

thisUpdate() - Method in record class zeroecho.pkix.ocsp.OcspResponse.SingleResponse

Returns the value of the thisUpdate record component.

thisUpdate(Instant) - Method in interface zeroecho.pkix.crl.CrlBuilder

Sets thisUpdate (required).

Thread safety - Section in class zeroecho.core.CryptoAlgorithm

Thread safety - Section in class zeroecho.core.alg.common.agreement.GenericJcaMessageAgreementContext

Thread safety - Section in class zeroecho.sdk.hybrid.derived.HybridDerived

Thread safety - Section in class zeroecho.sdk.hybrid.kex.HybridKexContext

Thread safety - Section in class zeroecho.sdk.hybrid.kex.HybridKexContexts

Thread safety - Section in class zeroecho.sdk.hybrid.kex.HybridKexTranscript

Thread safety - Section in interface zeroecho.core.spec.ContextSpec

Thread safety - Section in interface zeroecho.core.spi.ContextAware

Thread safety - Section in package zeroecho.sdk.builders

Thread safety - Section in package zeroecho.sdk.builders.alg

Thread safety - Section in package zeroecho.sdk.hybrid.signature

Thread-safety - Section in class zeroecho.core.NullKey

Thread-safety - Section in class zeroecho.core.alg.AbstractCryptoAlgorithm

Thread-safety - Section in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter

Thread-safety - Section in class zeroecho.core.alg.common.eddsa.AbstractEdDSAKeyGenBuilder

Thread-safety - Section in class zeroecho.core.alg.common.eddsa.AbstractEncodedPrivateKeyBuilder

Thread-safety - Section in class zeroecho.core.alg.common.eddsa.AbstractEncodedPublicKeyBuilder

Thread-safety - Section in class zeroecho.core.alg.common.eddsa.CommonEdDSASignatureContext

Thread-safety - Section in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Thread-safety - Section in class zeroecho.core.alg.dh.DhAlgorithm

Thread-safety - Section in class zeroecho.core.alg.dh.DhSpec

Thread-safety - Section in class zeroecho.core.alg.digest.DigestSpec

Thread-safety - Section in class zeroecho.core.alg.digest.JcaDigestContext

Thread-safety - Section in class zeroecho.core.alg.digest.Sha2Sha3Algorithm

Thread-safety - Section in class zeroecho.core.alg.ed25519.Ed25519Algorithm

Thread-safety - Section in class zeroecho.core.alg.ed25519.Ed25519KeyGenBuilder

Thread-safety - Section in class zeroecho.core.alg.ed25519.Ed25519KeyGenSpec

Thread-safety - Section in class zeroecho.core.alg.ed25519.Ed25519PrivateKeyBuilder

Thread-safety - Section in class zeroecho.core.alg.ed25519.Ed25519PrivateKeySpec

Thread-safety - Section in class zeroecho.core.alg.ed25519.Ed25519PublicKeyBuilder

Thread-safety - Section in class zeroecho.core.alg.ed25519.Ed25519PublicKeySpec

Thread-safety - Section in class zeroecho.core.alg.ed25519.Ed25519SignatureContext

Thread-safety - Section in class zeroecho.core.alg.ed448.Ed448Algorithm

Thread-safety - Section in class zeroecho.core.alg.ed448.Ed448KeyGenBuilder

Thread-safety - Section in class zeroecho.core.alg.ed448.Ed448KeyGenSpec

Thread-safety - Section in class zeroecho.core.alg.ed448.Ed448PrivateKeyBuilder

Thread-safety - Section in class zeroecho.core.alg.ed448.Ed448PrivateKeySpec

Thread-safety - Section in class zeroecho.core.alg.ed448.Ed448PublicKeyBuilder

Thread-safety - Section in class zeroecho.core.alg.ed448.Ed448PublicKeySpec

Thread-safety - Section in class zeroecho.core.alg.ed448.Ed448SignatureContext

Thread-safety - Section in class zeroecho.core.alg.elgamal.ElgamalAlgorithm

Thread-safety - Section in class zeroecho.core.alg.elgamal.ElgamalCipherContext

Thread-safety - Section in class zeroecho.core.alg.elgamal.ElgamalEncSpec

Thread-safety - Section in class zeroecho.core.alg.elgamal.ElgamalKeyGenSpec

Thread-safety - Section in class zeroecho.core.alg.elgamal.ElgamalParamSpec

Thread-safety - Section in class zeroecho.core.alg.elgamal.ElgamalPrivateKeySpec

Thread-safety - Section in class zeroecho.core.alg.elgamal.ElgamalPublicKeySpec

Thread-safety - Section in class zeroecho.core.alg.frodo.FrodoAlgorithm

Thread-safety - Section in class zeroecho.core.alg.frodo.FrodoKemContext

Thread-safety - Section in class zeroecho.core.alg.frodo.FrodoKeyGenSpec

Thread-safety - Section in class zeroecho.core.alg.frodo.FrodoPrivateKeySpec

Thread-safety - Section in class zeroecho.core.alg.frodo.FrodoPublicKeySpec

Thread-safety - Section in class zeroecho.core.alg.hmac.HmacMacContext

Thread-safety - Section in class zeroecho.core.alg.hqc.HqcAlgorithm

Thread-safety - Section in class zeroecho.core.alg.hqc.HqcKemContext

Thread-safety - Section in class zeroecho.core.alg.kyber.KyberAlgorithm

Thread-safety - Section in class zeroecho.core.alg.kyber.KyberKemContext

Thread-safety - Section in class zeroecho.core.alg.lms.LmsAlgorithm

Thread-safety - Section in class zeroecho.core.alg.lms.LmsSignatureContext

Thread-safety - Section in class zeroecho.core.alg.ntru.NtruAlgorithm

Thread-safety - Section in class zeroecho.core.alg.ntru.NtruKemContext

Thread-safety - Section in class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeySpec

Thread-safety - Section in class zeroecho.core.alg.slhdsa.SlhDsaPublicKeySpec

Thread-safety - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusAlgorithm

Thread-safety - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeySpec

Thread-safety - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusPublicKeySpec

Thread-safety - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Thread-safety - Section in class zeroecho.core.alg.xmss.XmssAlgorithm

Thread-safety - Section in class zeroecho.core.alg.xmss.XmssSignatureContext

Thread-safety - Section in class zeroecho.core.alg.xwing.XWingAlgorithm

Thread-safety - Section in class zeroecho.core.alg.xwing.XWingKemContext

Thread-safety - Section in class zeroecho.core.io.AbstractChunkTransformInputStream

Thread-safety - Section in class zeroecho.core.io.AbstractPassthroughInputStream

Thread-safety - Section in class zeroecho.core.io.CipherTransformInputStreamBuilder

Thread-safety - Section in class zeroecho.core.io.TailStrippingInputStream

Thread-safety - Section in class zeroecho.core.marshal.PairSeq

Thread-safety - Section in class zeroecho.core.marshal.PairSeqCodec

Thread-safety - Section in class zeroecho.core.policy.SecurityStrengthAdvisor

Thread-safety - Section in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Thread-safety - Section in class zeroecho.sdk.builders.alg.DigestDataContentBuilder

Thread-safety - Section in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Thread-safety - Section in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Thread-safety - Section in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Thread-safety - Section in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Thread-safety - Section in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Thread-safety - Section in class zeroecho.sdk.guard.EncCtxRecipient

Thread-safety - Section in class zeroecho.sdk.guard.KemCtxRecipient

Thread-safety - Section in class zeroecho.sdk.io.SignatureTrailerInputStream

Thread-safety - Section in package zeroecho.core.alg.aes

Thread-safety - Section in package zeroecho.core.alg.bike

Thread-safety - Section in package zeroecho.core.alg.chacha

Thread-safety - Section in package zeroecho.core.alg.cmce

Thread-safety - Section in package zeroecho.core.alg.common.sig

Thread-safety - Section in package zeroecho.core.alg.ntruprime

Thread‑safety - Section in class zeroecho.core.alg.aes.AesAlgorithm

Thread‑safety - Section in class zeroecho.sdk.builders.alg.AesDataContentBuilder

throwIfCancelled() - Method in interface zeroecho.core.io.CancellationSignal

Fails the current streaming operation when cancellation was requested.

ThrowingBiPredicate<T,U,E> - Interface in zeroecho.core.tag

A functional predicate of two arguments that may throw a checked exception.

ThrowingBiPredicate.FlagOkInCtx<T> - Class in zeroecho.core.tag

Decorator that records the verification outcome in a context before returning it.

ThrowingBiPredicate.ThrowOnMismatch<T> - Class in zeroecho.core.tag

Decorator that throws VerificationException when the delegated verification fails.

ThrowingBiPredicate.VerificationBiPredicate<T> - Class in zeroecho.core.tag

Base type for verification strategies that compare a value of type T to a byte array and may throw VerificationException.

throwOnMismatch() - Method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder

Configures verification to throw on mismatch (default verification behavior).

throwOnMismatch() - Method in class zeroecho.sdk.builders.TagTrailerDataContentBuilder

Configures decryption to throw on verification mismatch.

ThrowOnMismatch(ThrowingBiPredicate.VerificationBiPredicate) - Constructor for class zeroecho.core.tag.ThrowingBiPredicate.ThrowOnMismatch

Creates a new throwing decorator.

TIME_STAMPING - Static variable in record class zeroecho.pkix.ExtendedKeyUsage

id-kp-timeStamping.

timestamp() - Method in record class zeroecho.pkix.ct.SignedCertificateTimestamp

Returns the value of the timestamp record component.

toBeSigned() - Method in interface zeroecho.pkix.ocsp.OcspRequest

Returns the exact DER of the tbsRequest (the signed portion).

toByteArray() - Method in class zeroecho.sdk.hybrid.kex.HybridKexTranscript

Returns the canonical transcript bytes (defensive copy).

toBytes() - Method in interface zeroecho.sdk.content.api.DataContent

Returns the content's data as a byte array, with a size limit of 16MB by default.

toBytes() - Method in class zeroecho.sdk.content.builtin.PlainBytes

Returns a copy of the internal byte buffer.

toBytes() - Method in class zeroecho.sdk.content.builtin.PlainString

Returns the UTF-8 encoded byte array of the string.

toBytes() - Method in class zeroecho.sdk.content.builtin.SecretPassword

Returns a UTF-8 encoding owned by the caller.

toJson() - Method in class zeroecho.core.CryptoCatalog

Serializes the catalog to a compact JSON document.

toShortHexString(byte[]) - Static method in class zeroecho.core.util.Strings

Converts a byte array into a compact hexadecimal string representation.

toShortString(byte[]) - Static method in class zeroecho.core.util.Strings

Converts a byte array into a short, human-readable string representation.

toString() - Method in record class zeroecho.core.alg.aes.AesKeyGenSpec

Returns a string representation of this record class.

toString() - Method in class zeroecho.core.alg.bike.BikePrivateKeySpec

Returns a diagnostic string including encoded length.

toString() - Method in class zeroecho.core.alg.bike.BikePublicKeySpec

Returns a diagnostic string including encoded length.

toString() - Method in record class zeroecho.core.alg.chacha.ChaChaKeyGenSpec

Returns a string representation of this record class.

toString() - Method in class zeroecho.core.alg.cmce.CmcePrivateKeySpec

Returns a diagnostic string with the length of the encoded key.

toString() - Method in class zeroecho.core.alg.cmce.CmcePublicKeySpec

Returns a diagnostic string with the length of the encoded key.

toString() - Method in class zeroecho.core.alg.frodo.FrodoPrivateKeySpec

Returns a diagnostic string containing the encoded length.

toString() - Method in class zeroecho.core.alg.frodo.FrodoPublicKeySpec

Returns a diagnostic string containing the encoded length.

toString() - Method in class zeroecho.core.alg.hqc.HqcPrivateKeySpec

Returns a diagnostic string containing the encoded length.

toString() - Method in class zeroecho.core.alg.hqc.HqcPublicKeySpec

Returns a diagnostic string containing the encoded length.

toString() - Method in class zeroecho.core.alg.kyber.KyberPrivateKeySpec

Returns a diagnostic string for logging and debugging.

toString() - Method in class zeroecho.core.alg.kyber.KyberPublicKeySpec

Returns a diagnostic string for logging and debugging.

toString() - Method in class zeroecho.core.alg.lms.LmsPrivateKeySpec

toString() - Method in class zeroecho.core.alg.lms.LmsPublicKeySpec

toString() - Method in class zeroecho.core.alg.ntru.NtruPrivateKeySpec

Returns a short diagnostic string including the encoded length.

toString() - Method in class zeroecho.core.alg.ntru.NtruPublicKeySpec

Returns a short diagnostic string including the encoded length.

toString() - Method in class zeroecho.core.alg.ntruprime.NtrulPrimePrivateKeySpec

Returns a diagnostic string identifying this specification.

toString() - Method in class zeroecho.core.alg.ntruprime.NtrulPrimePublicKeySpec

Returns a diagnostic string identifying this specification.

toString() - Method in class zeroecho.core.alg.ntruprime.SntruPrimePrivateKeySpec

Returns a diagnostic string identifying this specification.

toString() - Method in class zeroecho.core.alg.ntruprime.SntruPrimePublicKeySpec

Returns a diagnostic string identifying this specification.

toString() - Method in record class zeroecho.core.alg.rsa.BlockGeometry

Returns a string representation of this record class.

toString() - Method in class zeroecho.core.alg.saber.SaberPrivateKeySpec

Returns a diagnostic string showing the length of the encoded key.

toString() - Method in class zeroecho.core.alg.saber.SaberPublicKeySpec

Returns a diagnostic string showing the length of the encoded key.

toString() - Method in class zeroecho.core.alg.xmss.XmssPrivateKeySpec

toString() - Method in class zeroecho.core.alg.xmss.XmssPublicKeySpec

toString() - Method in class zeroecho.core.alg.xwing.XWingPrivateKeySpec

toString() - Method in class zeroecho.core.alg.xwing.XWingPublicKeySpec

toString() - Method in record class zeroecho.core.Capability

Returns a string representation of this record class.

toString() - Method in exception class zeroecho.core.err.VerificationException

Returns a string representation of this exception.

toString() - Method in record class zeroecho.core.KeyOperationInfo

Returns a string representation of this record class.

toString() - Method in class zeroecho.core.NullKey

Returns a diagnostic string for logs and debugging.

toString() - Method in record class zeroecho.core.ParameterConstraint

Returns a string representation of this record class.

toString() - Method in record class zeroecho.core.ParameterSetDescriptor.Concrete

Returns a string representation of this record class.

toString() - Method in record class zeroecho.core.ParameterSetDescriptor.Template

Returns a string representation of this record class.

toString() - Method in record class zeroecho.core.SecurityLevel

Returns a string representation of this record class.

toString() - Method in record class zeroecho.core.spec.AlgorithmIdentity.DigestParameters

Returns a string representation of this record class.

toString() - Method in record class zeroecho.core.spec.AlgorithmIdentity.Family

Returns a string representation of this record class.

toString() - Method in record class zeroecho.core.spec.AlgorithmIdentity.NamedParameters

Returns a string representation of this record class.

toString() - Method in record class zeroecho.core.spec.AlgorithmIdentity.RsaPssParameters

Returns a string representation of this record class.

toString() - Method in class zeroecho.core.spec.AlgorithmIdentity

toString() - Method in record class zeroecho.core.spec.AlgorithmSuite

Returns a string representation of this record class.

toString() - Method in class zeroecho.core.storage.KeyringPassword

Returns a redacted representation.

toString() - Method in record class zeroecho.core.storage.KeyringProtection

Returns a string representation of this record class.

toString() - Method in record class zeroecho.core.storage.KeyringStore.PrivateWithId

Returns a string representation of this record class.

toString() - Method in record class zeroecho.core.storage.KeyringStore.PublicWithId

Returns a string representation of this record class.

toString() - Method in record class zeroecho.core.storage.KeyringStore.SecretWithId

Returns a string representation of this record class.

toString() - Method in record class zeroecho.core.TemplateParameter

Returns a string representation of this record class.

toString() - Method in class zeroecho.pkix.AlgorithmIdentifier

toString() - Method in record class zeroecho.pkix.BasicConstraints

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.CertificateExtension

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.cmp.CmpPbmPolicy

Returns a string representation of this record class.

toString() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage.Response

Returns a redacted diagnostic representation.

toString() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns a redacted diagnostic representation.

toString() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage.Verified

Returns a redacted diagnostic representation.

toString() - Method in record class zeroecho.pkix.cmp.CrmfRequest.CertificateReference

Returns a string representation of this record class.

toString() - Method in class zeroecho.pkix.cmp.CrmfRequest

Returns a diagnostic representation without request data.

toString() - Method in record class zeroecho.pkix.crl.CrlEntry

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.csr.CsrAttribute

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.ct.PreCertificateResult

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.ct.SignedCertificateTimestamp

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.ExtendedKeyUsage

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.GeneralName.DirectoryName

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.GeneralName.DnsName

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.GeneralName.IpAddress

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.GeneralName.OtherName

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.GeneralName.RegisteredId

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.GeneralName.Rfc822Name

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.GeneralName.UniformResourceIdentifier

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.ocsp.CertId

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.ocsp.CertStatus.Good

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.ocsp.CertStatus.Revoked

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.ocsp.CertStatus.Unknown

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.ocsp.OcspResponse.SingleResponse

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.ocsp.ResponderId.ByKey

Returns a string representation of this record class.

toString() - Method in record class zeroecho.pkix.ocsp.ResponderId.ByName

Returns a string representation of this record class.

toString() - Method in class zeroecho.pkix.PublicKeyIdentity

toString() - Method in record class zeroecho.pkix.RelativeDistinguishedName

Returns a string representation of this record class.

toString() - Method in class zeroecho.pkix.scep.ScepCodec.VerifiedRequest

toString() - Method in record class zeroecho.pkix.scep.ScepPkiMessage

Returns a string representation of this record class.

toString() - Method in class zeroecho.sdk.content.builtin.SecretPassword

Returns a redacted diagnostic representation.

toString() - Method in class zeroecho.sdk.guard.UnlockMaterial.Password

Returns a redacted diagnostic representation.

toString() - Method in record class zeroecho.sdk.guard.UnlockMaterial.Private

Returns a string representation of this record class.

toString() - Method in record class zeroecho.sdk.hybrid.kex.HybridKexProfile

Returns a string representation of this record class.

toString() - Method in record class zeroecho.sdk.hybrid.signature.HybridSignatureProfile

Returns a string representation of this record class.

toString() - Method in record class zeroecho.sdk.Pbkdf2Limits

Returns a string representation of this record class.

toText() - Method in interface zeroecho.sdk.content.api.DataContent

Returns the content's data as a UTF-8 encoded string.

toText() - Method in class zeroecho.sdk.content.builtin.PlainString

Returns the original string content.

toText() - Method in class zeroecho.sdk.content.builtin.SecretPassword

Returns a redacted diagnostic representation.

toXml() - Method in class zeroecho.core.CryptoCatalog

Serializes the catalog to an XML document.

trailerField() - Method in record class zeroecho.core.spec.AlgorithmIdentity.RsaPssParameters

Returns the value of the trailerField record component.

transactionId() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Returns a defensive transaction identifier.

transactionId() - Method in class zeroecho.pkix.scep.ScepCodec.VerifiedRequest

Returns the authenticated transaction.

transactionId() - Method in record class zeroecho.pkix.scep.ScepPkiMessage

Returns the value of the transactionId record component.

transcript(byte[]) - Method in class zeroecho.sdk.hybrid.derived.HybridDerived

Sets transcript binding bytes used as exporter info.

transcript(HybridKexTranscript) - Method in class zeroecho.sdk.builders.HybridKexBuilder

Optional transcript used to bind HKDF info.

transform(byte[], int, int, byte[]) - Method in class zeroecho.core.io.AbstractChunkTransformInputStream

Transforms one or more full input chunks into output bytes.

transformationOut - Variable in class zeroecho.sdk.util.OutputToInputStreamAdapter

The output stream performing transformation and writing to baos.

Transient parameters and sentinels - Section in package zeroecho.core

tryOpen(String, byte[], UnlockMaterial) - Method in class zeroecho.sdk.guard.EncCtxOpener

tryOpen(String, byte[], UnlockMaterial) - Method in class zeroecho.sdk.guard.KemCtxOpener

tryOpen(String, byte[], UnlockMaterial) - Method in class zeroecho.sdk.guard.PasswordOpener

Attempts to open a password-based recipient entry using a password unlock material.

tryOpen(String, byte[], UnlockMaterial) - Method in interface zeroecho.sdk.guard.RecipientOpener

Tries to recover the content-encryption key from the supplied recipient entry.

type() - Method in record class zeroecho.core.TemplateParameter

Returns the value of the type record component.

typeOid() - Method in record class zeroecho.pkix.GeneralName.OtherName

Returns the value of the typeOid record component.

Typical flows - Section in enum class zeroecho.sdk.builders.alg.HmacDataContentBuilder.Mode

Typical parameters - Section in interface zeroecho.core.spi.ContextAware

Typical usage - Section in class zeroecho.core.alg.AbstractCryptoAlgorithm

Typical usage - Section in class zeroecho.core.alg.hmac.HmacKeyImportSpec

Typical usage - Section in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Typical usage - Section in interface zeroecho.core.policy.CryptoPolicy

Typical usage - Section in interface zeroecho.sdk.guard.Recipient

Typical usage - Section in package zeroecho.core.audit

Typical usage - Section in package zeroecho.core.err

Typical usage - Section in package zeroecho.core.io

Typical usage - Section in package zeroecho.core.marshal

Typical usage - Section in package zeroecho.core.policy

Typical usage - Section in package zeroecho.core.spec

Typical usage - Section in package zeroecho.core.tag

Typical usage - Section in package zeroecho.sdk.builders

Typical usage - Section in package zeroecho.sdk.builders.core

Typical usage - Section in package zeroecho.sdk.content.builtin

Typical usage - Section in package zeroecho.sdk.guard

Typical usage - Section in package zeroecho.sdk.io

Typical usage - Section in package zeroecho.sdk.util

Typical usages - Section in enum class zeroecho.core.KeyUsage

Typical use - Section in class zeroecho.core.io.TailStrippingInputStream

U

UniformResourceIdentifier(String) - Constructor for record class zeroecho.pkix.GeneralName.UniformResourceIdentifier

Canonicalizing constructor.

unknown() - Static method in interface zeroecho.pkix.ocsp.CertStatus

Returns an unknown status.

Unknown() - Constructor for record class zeroecho.pkix.ocsp.CertStatus.Unknown

Creates an instance of a Unknown record class.

UnlockMaterial - Interface in zeroecho.sdk.guard

Caller-owned session-operation input used to unlock a recipient entry.

UnlockMaterial.Password - Class in zeroecho.sdk.guard

Destroyable password unlocking material backed by an owned character array.

UnlockMaterial.Private - Record Class in zeroecho.sdk.guard

Private key unlocking material.

unlockWith(UnlockMaterial) - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Supplies the unlocking material for decryption, either a private key or a password.

unmarshal(R) - Method in interface zeroecho.core.marshal.Codec

Converts a serialized representation back into the domain object.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.aes.AesKeyImportSpec

Reconstructs a specification from a key/value sequence.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.bike.BikePrivateKeySpec

Deserializes a spec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.bike.BikePublicKeySpec

Deserializes a spec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.chacha.ChaChaKeyImportSpec

Restores a spec from a serialized PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.cmce.CmcePrivateKeySpec

Deserializes a CmcePrivateKeySpec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.cmce.CmcePublicKeySpec

Deserializes a CmcePublicKeySpec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.dh.DhPrivateKeySpec

Reconstructs a DhPrivateKeySpec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.dh.DhPublicKeySpec

Reconstructs a DhPublicKeySpec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.ecdsa.EcdsaPrivateKeySpec

Reconstructs a private key specification from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.ecdsa.EcdsaPublicKeySpec

Reconstructs a public key specification from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.ed25519.Ed25519PrivateKeySpec

Reconstructs a private key spec from a base64-encoded PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.ed25519.Ed25519PublicKeySpec

Reconstructs a public key spec from a base64-encoded PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.ed448.Ed448PrivateKeySpec

Deserializes a PairSeq into a new Ed448PrivateKeySpec.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.ed448.Ed448PublicKeySpec

Deserializes a PairSeq into a new Ed448PublicKeySpec.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.elgamal.ElgamalPrivateKeySpec

Parses a PairSeq and reconstructs an ElgamalPrivateKeySpec.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.elgamal.ElgamalPublicKeySpec

Parses a PairSeq and reconstructs an ElgamalPublicKeySpec.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.frodo.FrodoPrivateKeySpec

Parses a PairSeq previously produced by FrodoPrivateKeySpec.marshal(FrodoPrivateKeySpec).

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.frodo.FrodoPublicKeySpec

Parses a PairSeq previously produced by FrodoPublicKeySpec.marshal(FrodoPublicKeySpec).

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.hmac.HmacKeyImportSpec

Deserializes a spec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.hqc.HqcPrivateKeySpec

Reconstructs a spec from its PairSeq representation.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.hqc.HqcPublicKeySpec

Reconstructs a spec from its PairSeq representation.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.kyber.KyberPrivateKeySpec

Reconstructs a KyberPrivateKeySpec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.kyber.KyberPublicKeySpec

Reconstructs a KyberPublicKeySpec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.lms.LmsPrivateKeySpec

Deserializes a spec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.lms.LmsPublicKeySpec

Deserializes a spec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.mldsa.MldsaPrivateKeySpec

Deserializes a MldsaPrivateKeySpec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.mldsa.MldsaPublicKeySpec

Deserializes a MldsaPublicKeySpec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.ntru.NtruPrivateKeySpec

Deserializes a specification from a name-value sequence produced by NtruPrivateKeySpec.marshal(NtruPrivateKeySpec).

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.ntru.NtruPublicKeySpec

Deserializes a specification from a name-value sequence produced by NtruPublicKeySpec.marshal(NtruPublicKeySpec).

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.ntruprime.NtrulPrimePrivateKeySpec

Reconstructs a private key specification from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.ntruprime.NtrulPrimePublicKeySpec

Reconstructs a public key specification from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.ntruprime.SntruPrimePrivateKeySpec

Reconstructs a private key specification from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.ntruprime.SntruPrimePublicKeySpec

Reconstructs a public key specification from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.rsa.RsaPrivateKeySpec

Reconstructs an RSA private key spec from a marshaled PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.rsa.RsaPublicKeySpec

Reconstructs an RSA public key spec from a marshaled PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.saber.SaberPrivateKeySpec

Deserializes a SaberPrivateKeySpec from its PairSeq form.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.saber.SaberPublicKeySpec

Deserializes a SaberPublicKeySpec from its PairSeq form.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.slhdsa.SlhDsaPrivateKeySpec

Deserializes a SlhDsaPrivateKeySpec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.slhdsa.SlhDsaPublicKeySpec

Deserializes a SlhDsaPublicKeySpec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.sphincsplus.SphincsPlusPrivateKeySpec

Deserializes a SphincsPlusPrivateKeySpec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.sphincsplus.SphincsPlusPublicKeySpec

Deserializes a SphincsPlusPublicKeySpec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.xdh.XdhPrivateKeySpec

Deserializes a specification from the given PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.xdh.XdhPublicKeySpec

Deserializes a specification from the given PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.xmss.XmssPrivateKeySpec

Deserializes a spec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.xmss.XmssPublicKeySpec

Deserializes a spec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.xwing.XWingPrivateKeySpec

Deserializes a spec from a PairSeq.

unmarshal(PairSeq) - Static method in class zeroecho.core.alg.xwing.XWingPublicKeySpec

Deserializes a spec from a PairSeq.

unmarshal(PairSeq) - Method in class zeroecho.core.marshal.PairSeqCodec

Decodes a PairSeq back into a domain object by convention.

UNSPECIFIED - Enum constant in enum class zeroecho.pkix.crl.CrlReason

unspecified (0).

UnsupportedDirectoryStringException - Exception Class in zeroecho.pkix

Thrown by Pkix.parseDistinguishedName(byte[]) when a relative distinguished name carries an attribute value whose ASN.1 string type is not one of the supported directory string types (UTF8String, PrintableString, IA5String).

UnsupportedDirectoryStringException(String) - Constructor for exception class zeroecho.pkix.UnsupportedDirectoryStringException

Creates the exception with the given message.

UnsupportedRoleException - Exception Class in zeroecho.core.err

Exception indicating that an algorithm does not support the requested role.

UnsupportedRoleException(String) - Constructor for exception class zeroecho.core.err.UnsupportedRoleException

Creates a new exception with a detail message.

UnsupportedSpecException - Exception Class in zeroecho.core.err

Exception indicating that a provided key/spec combination is not supported by the algorithm for the requested role.

UnsupportedSpecException(String) - Constructor for exception class zeroecho.core.err.UnsupportedSpecException

Creates a new exception with the given message.

update(byte[], int, int) - Method in class zeroecho.core.io.AbstractPassthroughInputStream

Called for each body chunk just read from the upstream.

upon(KemContext) - Method in class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter.Builder

Binds this adapter to a KEM context.

url(URL) - Method in class zeroecho.sdk.builders.core.PlainFileBuilder.DefaultPlainFileBuilder

url(URL) - Method in interface zeroecho.sdk.builders.core.PlainFileBuilder

Sets the URL of the file to be used as the plain content source.

Usage - Section in class zeroecho.core.alg.bike.BikeKemContext

Usage - Section in class zeroecho.core.alg.bike.BikeKeyGenSpec

Usage - Section in class zeroecho.core.alg.bike.BikePrivateKeySpec

Usage - Section in class zeroecho.core.alg.bike.BikePublicKeySpec

Usage - Section in class zeroecho.core.alg.chacha.ChaChaKeyImportSpec

Usage - Section in class zeroecho.core.alg.ecdh.EcdhKeyGenBuilder

Usage - Section in class zeroecho.core.alg.ecdsa.EcdsaKeyGenBuilder

Usage - Section in class zeroecho.core.alg.ecdsa.EcdsaPrivateKeyBuilder

Usage - Section in class zeroecho.core.alg.ecdsa.EcdsaPrivateKeySpec

Usage - Section in class zeroecho.core.alg.ecdsa.EcdsaPublicKeyBuilder

Usage - Section in class zeroecho.core.alg.ecdsa.EcdsaPublicKeySpec

Usage - Section in class zeroecho.core.alg.ed25519.Ed25519SignatureContext

Usage - Section in class zeroecho.core.alg.ed448.Ed448KeyGenBuilder

Usage - Section in class zeroecho.core.alg.ed448.Ed448KeyGenSpec

Usage - Section in class zeroecho.core.alg.ed448.Ed448PrivateKeyBuilder

Usage - Section in class zeroecho.core.alg.ed448.Ed448PrivateKeySpec

Usage - Section in class zeroecho.core.alg.ed448.Ed448PublicKeyBuilder

Usage - Section in class zeroecho.core.alg.ed448.Ed448PublicKeySpec

Usage - Section in class zeroecho.core.alg.ed448.Ed448SignatureContext

Usage - Section in class zeroecho.core.alg.elgamal.ElgamalEncSpec

Usage - Section in class zeroecho.core.alg.elgamal.ElgamalKeyGenSpec

Usage - Section in class zeroecho.core.alg.elgamal.ElgamalParamSpec

Usage - Section in class zeroecho.core.alg.elgamal.ElgamalPrivateKeySpec

Usage - Section in class zeroecho.core.alg.elgamal.ElgamalPublicKeySpec

Usage - Section in class zeroecho.core.alg.frodo.FrodoPrivateKeySpec

Usage - Section in class zeroecho.core.alg.frodo.FrodoPublicKeySpec

Usage - Section in class zeroecho.core.alg.hmac.HmacKeyGenSpec

Usage - Section in class zeroecho.core.alg.hmac.HmacSpec

Usage - Section in class zeroecho.core.alg.hqc.HqcKeyGenSpec

Usage - Section in class zeroecho.core.alg.kyber.KyberKeyGenSpec

Usage - Section in class zeroecho.core.alg.kyber.KyberPrivateKeySpec

Usage - Section in class zeroecho.core.alg.kyber.KyberPublicKeySpec

Usage - Section in class zeroecho.core.alg.ntru.NtruAlgorithm

Usage - Section in class zeroecho.core.alg.ntru.NtruKemContext

Usage - Section in class zeroecho.core.alg.ntru.NtruKeyGenSpec

Usage - Section in class zeroecho.core.alg.ntru.NtruPrivateKeySpec

Usage - Section in class zeroecho.core.alg.ntru.NtruPublicKeySpec

Usage - Section in class zeroecho.core.alg.ntruprime.NtrulPrimeKemContext

Usage - Section in class zeroecho.core.alg.ntruprime.NtrulPrimePrivateKeySpec

Usage - Section in class zeroecho.core.alg.ntruprime.NtrulPrimePublicKeySpec

Usage - Section in class zeroecho.core.alg.ntruprime.SntruPrimeKemContext

Usage - Section in class zeroecho.core.alg.ntruprime.SntruPrimePrivateKeySpec

Usage - Section in class zeroecho.core.alg.ntruprime.SntruPrimePublicKeySpec

Usage - Section in class zeroecho.core.alg.rsa.RsaPrivateKeySpec

Usage - Section in class zeroecho.core.alg.rsa.RsaPublicKeySpec

Usage - Section in class zeroecho.core.alg.rsa.RsaSignatureContext

Usage - Section in class zeroecho.core.alg.xdh.XdhPrivateKeySpec

Usage - Section in class zeroecho.core.alg.xdh.XdhPublicKeySpec

Usage - Section in class zeroecho.core.marshal.PairSeq

Usage - Section in class zeroecho.core.tag.TagEngineBuilder

Usage - Section in class zeroecho.logging.ClasspathJulConfig

Usage - Section in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Usage - Section in class zeroecho.sdk.io.SignatureTrailerInputStream

Usage - Section in enum class zeroecho.core.alg.ecdh.EcdhCurveSpec

Usage - Section in enum class zeroecho.core.alg.ecdsa.EcdsaCurveSpec

Usage - Section in enum class zeroecho.core.alg.xdh.XdhSpec

Usage - Section in enum class zeroecho.core.spec.VoidSpec

Usage - Section in interface zeroecho.core.audit.AuditListener

Usage - Section in interface zeroecho.core.context.DigestContext

Usage - Section in interface zeroecho.core.context.MacContext

Usage - Section in interface zeroecho.core.context.SignatureContext

Usage - Section in interface zeroecho.core.spec.AlgorithmKeySpec

Usage - Section in package zeroecho.sdk.content.api

Usage and semantics - Section in exception class zeroecho.core.err.ProviderFailureException

Usage example - Section in class zeroecho.core.alg.dh.DhAlgorithm

Usage example - Section in class zeroecho.core.alg.digest.DigestSpec

Usage example - Section in class zeroecho.core.alg.digest.Sha2Sha3Algorithm

Usage example - Section in class zeroecho.core.alg.ed25519.Ed25519KeyGenBuilder

Usage example - Section in class zeroecho.core.alg.ed25519.Ed25519KeyGenSpec

Usage example - Section in class zeroecho.core.alg.ed25519.Ed25519PrivateKeyBuilder

Usage example - Section in class zeroecho.core.alg.ed25519.Ed25519PrivateKeySpec

Usage example - Section in class zeroecho.core.alg.ed25519.Ed25519PublicKeyBuilder

Usage example - Section in class zeroecho.core.alg.ed25519.Ed25519PublicKeySpec

Usage example - Section in class zeroecho.core.alg.hmac.HmacAlgorithm

Usage example - Section in class zeroecho.core.alg.hmac.HmacMacContext

Usage example - Section in class zeroecho.core.alg.hqc.HqcAlgorithm

Usage example - Section in class zeroecho.core.alg.hqc.HqcPrivateKeySpec

Usage example - Section in class zeroecho.core.alg.hqc.HqcPublicKeySpec

Usage example - Section in class zeroecho.core.alg.rsa.RsaKeyGenSpec

Usage example - Section in class zeroecho.core.alg.saber.SaberKemContext

Usage example - Section in class zeroecho.core.alg.saber.SaberKeyGenSpec

Usage example - Section in class zeroecho.core.alg.saber.SaberPrivateKeySpec

Usage example - Section in class zeroecho.core.alg.saber.SaberPublicKeySpec

Usage example - Section in class zeroecho.core.audit.AuditedContexts

Usage example - Section in package zeroecho.logging

Usage example - Section in record class zeroecho.core.alg.chacha.ChaChaKeyGenSpec

Usage examples - Section in class zeroecho.core.alg.kyber.KyberAlgorithm

Usage examples - Section in class zeroecho.core.alg.kyber.KyberKemContext

Usage examples - Section in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Usage examples - Section in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Usage notes - Section in package zeroecho.core.annotation

Usage notes - Section in package zeroecho.core.err

Usage pattern - Section in package zeroecho.sdk.builders.alg

Usage sketch - Section in class zeroecho.sdk.builders.HybridKexBuilder

Usage sketch - Section in package zeroecho.core.alg.common.sig

Usage — verification - Section in class zeroecho.core.alg.lms.LmsSignatureContext

Usage — verification - Section in class zeroecho.core.alg.xmss.XmssSignatureContext

UTF8 - Enum constant in enum class zeroecho.pkix.DirectoryStringType

UTF8String — the modern default for most attributes.

Util - Class in zeroecho.core.io

Utility class for performing efficient I/O operations with support for packed integers.

V

valAt(int) - Method in class zeroecho.core.marshal.PairSeq

Returns the value at the given index.

validate() - Method in class zeroecho.core.CryptoCatalog

Verifies that each algorithm in this catalog exposes at least one capability or key builder.

validate(String, KeyUsage, K, S) - Method in interface zeroecho.core.policy.CryptoPolicy

Validates an algorithm identifier, role, key, and spec.

validateDecoded(int) - Method in record class zeroecho.sdk.Pbkdf2Limits

Validates an untrusted decoded iteration count before KDF execution.

validateTrusted(int) - Method in record class zeroecho.sdk.Pbkdf2Limits

Validates trusted local configuration.

Validation - Section in record class zeroecho.core.alg.chacha.ChaChaKeyGenSpec

Validation - Section in zeroecho.core.alg.AbstractCryptoAlgorithm.capability(AlgorithmFamily, KeyUsage, Class, Class, Class, ContextFactoryKS, Supplier)

Validation rules - Section in class zeroecho.core.alg.elgamal.ElgamalKeyGenSpec

validity(Instant, Instant) - Method in interface zeroecho.pkix.cert.CertificateBuilder

Sets the validity window (required).

value() - Element in annotation interface zeroecho.core.annotation.DisplayName

Returns the human-friendly display name.

value() - Method in class zeroecho.core.marshal.PairSeq.Cursor

Returns the current value.

value() - Method in record class zeroecho.pkix.GeneralName.DirectoryName

Returns the value of the value record component.

value() - Method in record class zeroecho.pkix.GeneralName.DnsName

Returns the value of the value record component.

value() - Method in record class zeroecho.pkix.GeneralName.IpAddress

Returns the value of the value record component.

value() - Method in record class zeroecho.pkix.GeneralName.Rfc822Name

Returns the value of the value record component.

value() - Method in record class zeroecho.pkix.GeneralName.UniformResourceIdentifier

Returns the value of the value record component.

value() - Method in record class zeroecho.pkix.RelativeDistinguishedName

Returns the value of the value record component.

value(String) - Method in class zeroecho.sdk.builders.core.PlainStringBuilder.DefaultPlainStringBuilder

value(String) - Method in interface zeroecho.sdk.builders.core.PlainStringBuilder

Sets the string value that the PlainString instance will contain.

valueOf(String) - Static method in enum class zeroecho.core.alg.aes.AesSpec.Mode

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.aes.AesSpec.Padding

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.bike.BikeKeyGenSpec.Variant

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.cmce.CmceKeyGenSpec.Variant

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter.Role

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.common.sig.SignatureInteropProfile.SignatureRepresentation

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.digest.DigestSpec.Algorithm

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.ecdh.EcdhCurveSpec

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.ecdsa.EcdsaCurveSpec

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.elgamal.ElgamalEncSpec.Padding

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.frodo.FrodoKeyGenSpec.Variant

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.hqc.HqcKeyGenSpec.Variant

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.kyber.KyberKeyGenSpec.Variant

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.lms.LmsKeyGenSpec

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.mldsa.MldsaKeyGenSpec.ParameterSet

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.mldsa.MldsaKeyGenSpec.PreHash

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.ntru.NtruKeyGenSpec.Variant

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec.Variant

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec.Variant

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.rsa.RsaEncSpec.Hash

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.rsa.RsaEncSpec.Padding

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.rsa.RsaSigSpec.Hash

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.rsa.RsaSigSpec.Mode

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.saber.SaberKeyGenSpec.Variant

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Hash

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.PreHash

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Security

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Variant

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Hash

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Mode

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Security

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Variant

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.xdh.XdhSpec

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.xmss.XmssKeyGenSpec

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.alg.xwing.XWingKeyGenSpec

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.AlgorithmFamily

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.audit.AuditMode

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.KeyOperation

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.KeyUsage

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.ParameterConstraint.ValueKind

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.spec.AlgorithmIdentity.Kind

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.spec.AlgorithmIdentity.NoParameters

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.spec.VoidSpec

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.spi.AlgorithmExecutionCapability.Direction

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.storage.KeyringException.Code

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.storage.KeyringSignatureExecutor.FailureCode

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.storage.KeyringStore.Encoding

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.core.storage.KeyringStore.Kind

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.pkix.AlgorithmIdentifier.ParameterForm

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.pkix.crl.CrlReason

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.pkix.DirectoryStringType

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.pkix.KeyUsage

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.sdk.builders.alg.HmacDataContentBuilder.Mode

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder.Mode

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.sdk.content.api.ExportableDataContent.ExportMode

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class zeroecho.sdk.hybrid.signature.HybridSignatureProfile.VerifyRule

Returns the enum constant of this class with the specified name.

values() - Static method in enum class zeroecho.core.alg.aes.AesSpec.Mode

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.aes.AesSpec.Padding

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.bike.BikeKeyGenSpec.Variant

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.cmce.CmceKeyGenSpec.Variant

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.common.agreement.KemMessageAgreementAdapter.Role

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.common.sig.SignatureInteropProfile.SignatureRepresentation

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.digest.DigestSpec.Algorithm

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.ecdh.EcdhCurveSpec

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.ecdsa.EcdsaCurveSpec

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.elgamal.ElgamalEncSpec.Padding

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.frodo.FrodoKeyGenSpec.Variant

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.hqc.HqcKeyGenSpec.Variant

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.kyber.KyberKeyGenSpec.Variant

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.lms.LmsKeyGenSpec

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.mldsa.MldsaKeyGenSpec.ParameterSet

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.mldsa.MldsaKeyGenSpec.PreHash

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.ntru.NtruKeyGenSpec.Variant

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec.Variant

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec.Variant

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.rsa.RsaEncSpec.Hash

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.rsa.RsaEncSpec.Padding

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.rsa.RsaSigSpec.Hash

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.rsa.RsaSigSpec.Mode

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.saber.SaberKeyGenSpec.Variant

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Hash

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.PreHash

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Security

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec.Variant

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Hash

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Mode

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Security

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec.Variant

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.xdh.XdhSpec

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.xmss.XmssKeyGenSpec

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.alg.xwing.XWingKeyGenSpec

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.AlgorithmFamily

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.audit.AuditMode

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.KeyOperation

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.KeyUsage

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.ParameterConstraint.ValueKind

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.spec.AlgorithmIdentity.Kind

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.spec.AlgorithmIdentity.NoParameters

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.spec.VoidSpec

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.spi.AlgorithmExecutionCapability.Direction

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.storage.KeyringException.Code

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.storage.KeyringSignatureExecutor.FailureCode

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.storage.KeyringStore.Encoding

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.core.storage.KeyringStore.Kind

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.pkix.AlgorithmIdentifier.ParameterForm

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.pkix.crl.CrlReason

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.pkix.DirectoryStringType

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.pkix.KeyUsage

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.sdk.builders.alg.HmacDataContentBuilder.Mode

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder.Mode

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.sdk.content.api.ExportableDataContent.ExportMode

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class zeroecho.sdk.hybrid.signature.HybridSignatureProfile.VerifyRule

Returns an array containing the constants of this enum class, in the order they are declared.

variant() - Method in class zeroecho.core.alg.bike.BikeKeyGenSpec

Returns the BIKE variant.

variant() - Method in class zeroecho.core.alg.cmce.CmceKeyGenSpec

Returns the selected variant for this specification.

variant() - Method in class zeroecho.core.alg.frodo.FrodoKeyGenSpec

Returns the Frodo variant.

variant() - Method in class zeroecho.core.alg.hqc.HqcKeyGenSpec

Returns the selected HQC variant.

variant() - Method in class zeroecho.core.alg.kyber.KyberKeyGenSpec

Returns the variant associated with this specification.

variant() - Method in class zeroecho.core.alg.ntru.NtruKeyGenSpec

Returns the selected NTRU parameter variant.

variant() - Method in class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec

Returns the selected variant for this specification.

variant() - Method in class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec

Returns the selected variant for this specification.

variant() - Method in class zeroecho.core.alg.saber.SaberKeyGenSpec

Returns the variant this spec represents.

variant() - Method in class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec

Returns the variant.

variant() - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec

Returns the variant of this specification.

Variants - Section in class zeroecho.core.alg.frodo.FrodoKeyGenSpec

Variants - Section in class zeroecho.core.alg.hqc.HqcKeyGenSpec

Variants - Section in class zeroecho.core.alg.ntruprime.NtrulPrimeKeyGenSpec

Variants - Section in class zeroecho.core.alg.ntruprime.SntruPrimeKeyGenSpec

Variants - Section in class zeroecho.core.alg.saber.SaberKeyGenSpec

Variants - Section in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Verification approach - Section in class zeroecho.core.alg.digest.JcaDigestContext

Verification approach - Section in class zeroecho.core.alg.hmac.HmacMacContext

Verification approach - Section in package zeroecho.core.alg.common.sig

Verification approaches - Section in interface zeroecho.core.tag.TagEngine

Verification behavior - Section in class zeroecho.sdk.builders.TagTrailerDataContentBuilder

VerificationBiPredicate() - Constructor for class zeroecho.core.tag.ThrowingBiPredicate.VerificationBiPredicate

Creates a verification predicate base with no mutable state.

VerificationException - Exception Class in zeroecho.core.err

Exception thrown when a cryptographic signature or digest verification fails.

VerificationException(byte[]) - Constructor for exception class zeroecho.core.err.VerificationException

Creates a new exception with only the calculated value.

VerificationException(byte[], byte[]) - Constructor for exception class zeroecho.core.err.VerificationException

Creates a new exception with both expected and calculated values.

VerificationException(SignatureException, byte[]) - Constructor for exception class zeroecho.core.err.VerificationException

Creates a new exception that wraps a lower-level SignatureException.

Verification pipeline (detached) - Section in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

verifier(byte[], AlgorithmIdentifier) - Method in class zeroecho.pkix.bc.BcPkixProvider

verifier(byte[], AlgorithmIdentifier) - Static method in class zeroecho.pkix.Pkix

Creates a content verifier over a DER-encoded SubjectPublicKeyInfo and a signature algorithm identifier, honouring any algorithm parameters carried by the identifier.

verifier(byte[], AlgorithmIdentifier) - Method in interface zeroecho.pkix.spi.PkixProvider

Creates a content verifier over a DER-encoded SubjectPublicKeyInfo and a signature algorithm identifier, honouring any algorithm parameters (such as RSASSA-PSS parameters) carried by the identifier.

verifier(PublicKey, AlgorithmIdentifier) - Method in class zeroecho.pkix.bc.BcPkixProvider

verifier(PublicKey, AlgorithmIdentifier) - Static method in class zeroecho.pkix.Pkix

Creates a content verifier over a public key.

verifier(PublicKey, AlgorithmIdentifier) - Method in interface zeroecho.pkix.spi.PkixProvider

Creates a content verifier over a public key.

verify() - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Switches the builder to VERIFY mode.

verify() - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Switches the builder to verify mode.

verify(byte[]) - Method in interface zeroecho.pkix.sign.ContentVerifier

Verifies the given signature against the content written to ContentVerifier.contentStream().

verify(byte[], byte[]) - Method in class zeroecho.core.tag.ByteVerificationStrategy

Verifies that two byte arrays are equal using a constant-time comparison.

verify(String, String, ContextSpec, ContextSpec, HybridSignatureProfile.VerifyRule, PublicKey, PublicKey, int) - Method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder.HybridSelector

Creates a hybrid verification trailer with optional specs and explicit maxBodyBytes.

verify(String, String, HybridSignatureProfile.VerifyRule, PublicKey, PublicKey) - Method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder.HybridSelector

Creates a hybrid verification trailer for the common case where both specs are null.

verify(String, PublicKey) - Method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder.SingleSelector

Creates a verification trailer for a single signature algorithm (no spec).

verify(String, PublicKey, ContextSpec) - Method in class zeroecho.sdk.builders.SignatureTrailerDataContentBuilder.SingleSelector

Creates a verification trailer for a single signature algorithm with an optional spec.

verify(Signature, byte[]) - Method in class zeroecho.core.tag.SignatureVerificationStrategy

Verifies that the provided Signature object validates the given bytes.

verify(T, byte[]) - Method in class zeroecho.core.tag.ThrowingBiPredicate.FlagOkInCtx

Verifies that s matches b, records the outcome, and returns it.

verify(T, byte[]) - Method in class zeroecho.core.tag.ThrowingBiPredicate.ThrowOnMismatch

Verifies that t matches u; throws on mismatch.

verify(T, byte[]) - Method in class zeroecho.core.tag.ThrowingBiPredicate.VerificationBiPredicate

Verifies that t matches u according to the implementation contract.

verify(T, U) - Method in interface zeroecho.core.tag.ThrowingBiPredicate

Evaluates this predicate on the given arguments.

verify(ZeroEchoSession, HybridSignatureProfile, PublicKey, PublicKey, int) - Static method in class zeroecho.sdk.hybrid.signature.HybridSignatureContexts

Creates a verification hybrid signature context.

Verify - Section in package zeroecho.core.alg.common.sig

VERIFY - Enum constant in enum class zeroecho.core.KeyUsage

Verify digital signatures.

VERIFY - Enum constant in enum class zeroecho.core.spi.AlgorithmExecutionCapability.Direction

Signature verification.

VERIFY - Enum constant in enum class zeroecho.sdk.builders.alg.HmacDataContentBuilder.Mode

Verify an expected HMAC tag against the input stream.

VERIFY - Enum constant in enum class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder.Mode

Verify mode checks an RSA signature against the input stream.

Verify a detached MAC - Section in interface zeroecho.core.context.MacContext

Verify a detached RSA signature - Section in class zeroecho.core.alg.rsa.RsaSignatureContext

Verify a detached signature and throw on mismatch - Section in interface zeroecho.core.context.SignatureContext

Verify a detached signature and throw on mismatch - Section in package zeroecho.core.tag

verifyAlternativeSignature(X509Certificate, PublicKey) - Method in class zeroecho.pkix.bc.BcPkixProvider

verifyAlternativeSignature(X509Certificate, PublicKey) - Static method in class zeroecho.pkix.Pkix

Verifies a certificate's standardized alternative signature against an explicitly trusted issuer alternative key.

verifyAlternativeSignature(X509Certificate, PublicKey) - Method in interface zeroecho.pkix.spi.PkixProvider

Verifies only the standardized alternative signature using an explicit issuer alternative key.

Verify detached RSA signature - Section in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

verifyPbm(CmpPbmPolicy, byte[], CancellationSignal) - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Verifies binary-secret PBM after validating all work and algorithm bounds.

verifyRequest(byte[]) - Static method in class zeroecho.pkix.scep.ScepCodec

Verifies a bounded CMS request before any private-key decryption.

verifyRule() - Method in record class zeroecho.sdk.hybrid.signature.HybridSignatureProfile

Returns the value of the verifyRule record component.

verifySct(SignedCertificateTimestamp, PublicKey, byte[]) - Method in class zeroecho.pkix.bc.BcPkixProvider

verifySct(SignedCertificateTimestamp, PublicKey, byte[]) - Static method in class zeroecho.pkix.Pkix

Verifies an SCT's digital signature against a known CT log public key.

verifySct(SignedCertificateTimestamp, PublicKey, byte[]) - Method in interface zeroecho.pkix.spi.PkixProvider

Verifies an SCT's digital signature against a known CT log public key.

verifySelfSignature() - Method in interface zeroecho.pkix.csr.CertificationRequest

Verifies proof of possession by checking the request self-signature against the request's own public key.

verifySignature(X509Certificate) - Method in class zeroecho.pkix.cmp.CmpProtectedMessage

Verifies the exact protected bytes using one explicitly selected certificate.

verifySignature(PublicKey) - Method in interface zeroecho.pkix.ocsp.OcspRequest

Verifies the request signature against the given public key.

verifySignature(PublicKey) - Method in interface zeroecho.pkix.ocsp.OcspResponse

Verifies the basic response signature under the responder public key.

Verify with explicit strategy - Section in class zeroecho.core.alg.hmac.HmacMacContext

version() - Method in record class zeroecho.pkix.ct.SignedCertificateTimestamp

Returns the value of the version record component.

VoidSpec - Enum Class in zeroecho.core.spec

Context specification for algorithms that require no additional parameters.

W

waiting() - Method in class zeroecho.pkix.cmp.CmpProtectedMessage.Verified

Creates an initial waiting ip/cp/kup response with the exact request ID.

warnLevel(Level) - Method in class zeroecho.core.audit.JulAuditListenerStd.Builder

Sets the level for warnings and verification failures.

What is audited - Section in class zeroecho.core.audit.AuditedContexts

What is checked - Section in class zeroecho.sdk.hybrid.kex.HybridKexPolicy

What is here - Section in package zeroecho.sdk.builders.core

What lives where - Section in package zeroecho.sdk.builders

When it is thrown - Section in exception class zeroecho.core.err.UnsupportedRoleException

Wire format - Section in class zeroecho.sdk.hybrid.kex.HybridKexContext

Wire model - Section in package zeroecho.sdk.hybrid.kex

withAad(byte[]) - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Supplies Additional Authenticated Data (GCM).

withAad(byte[]) - Method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Sets additional authenticated data for ChaCha20-Poly1305.

withAes(AesDataContentBuilder) - Method in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Selects AES as the payload cipher and supplies a configured AesDataContentBuilder that will receive the derived key.

withAes(AesDataContentBuilder) - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Selects AES payload processing by installing an AES data content builder.

withAuditListener(AuditListener) - Method in class zeroecho.sdk.ZeroEchoSession

Returns a session with the supplied audit listener and this session's policy and audit mode.

withAuditMode(AuditMode) - Method in class zeroecho.sdk.ZeroEchoSession

Returns a session with the supplied audit mode and this session's policy and listener.

withBufferedBlocks(int) - Method in class zeroecho.core.io.CipherTransformInputStreamBuilder

Sets the number of blocks buffered per internal fill cycle.

withChaCha(ChaChaDataContentBuilder) - Method in class zeroecho.sdk.builders.alg.KemDataContentBuilder

Selects ChaCha20/ChaCha20-Poly1305 as the payload cipher and supplies a configured ChaChaDataContentBuilder that will receive the derived key.

withChaCha(ChaChaDataContentBuilder) - Method in class zeroecho.sdk.guard.MultiRecipientDataSourceBuilder

Selects ChaCha20-Poly1305 payload processing by installing a ChaCha data content builder.

withCipher(Cipher) - Method in class zeroecho.core.io.CipherTransformInputStreamBuilder

Sets the Cipher used to transform blocks.

withCounter(int) - Method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Sets an explicit counter override to be propagated through the context.

withDecryptionIv(byte[]) - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Supplies an out-of-band IV for decryption without an encoded header.

withDecryptionNonce(byte[]) - Method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Sets an out-of-band nonce for headerless decryption.

withExplicitParamConstant(String) - Method in class zeroecho.core.alg.mldsa.MldsaKeyGenSpec

Returns a copy of this specification with an explicit Bouncy Castle parameter constant override.

withExplicitParamConstant(String) - Method in class zeroecho.core.alg.slhdsa.SlhDsaKeyGenSpec

Returns a copy of this specification with an explicit Bouncy Castle parameter constant override.

withExplicitParamConstant(String) - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusKeyGenSpec

Returns a copy of this specification with an explicit Bouncy Castle parameter constant override.

withFinalizationOutputChunks(int) - Method in class zeroecho.core.io.CipherTransformInputStreamBuilder

Sets the number of extra output chunks reserved for the finalization step.

withHeader() - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Convenience for AesDataContentBuilder.withHeaderCodec(SymmetricHeaderCodec) using AesHeaderCodec.

withHeader() - Method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Requests that a header be emitted (on encrypt) or parsed (on decrypt).

withHeader(SymmetricHeaderCodec) - Static method in class zeroecho.core.alg.chacha.ChaCha20Poly1305Spec

Convenience factory that returns a spec with the provided header codec.

withHeaderCodec(SymmetricHeaderCodec) - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Installs a specific header codec into the spec so IV/tagBits/AAD hash can be persisted in‑band.

withHeaderCodec(SymmetricHeaderCodec) - Method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Sets a custom header codec to emit or parse algorithm headers.

withIndependentBlocks() - Method in class zeroecho.core.io.CipherTransformInputStreamBuilder

Selects independent-block processing, in which every logical input block is passed to a separate Cipher.doFinal(byte[], int, int, byte[], int) invocation.

withInputBlockSize(int) - Method in class zeroecho.core.io.CipherTransformInputStreamBuilder

Sets the size of a single input block fed to the cipher.

withKey(SecretKey) - Method in class zeroecho.sdk.builders.alg.AesDataContentBuilder

Sets the key to use.

withKey(SecretKey) - Method in class zeroecho.sdk.builders.alg.ChaChaDataContentBuilder

Sets an explicit secret key to use for encryption or decryption.

withKey(SecretKey) - Method in class zeroecho.sdk.builders.alg.HmacDataContentBuilder

Supplies an explicit secret key for the HMAC operation.

withLabel(byte[]) - Method in class zeroecho.core.alg.rsa.RsaEncSpec

Returns a copy of this spec with the given OAEP label.

withLabelUtf8(String) - Method in class zeroecho.core.alg.rsa.RsaEncSpec

Returns a copy of this spec with the given UTF-8 OAEP label.

withLeftZeroPadding(boolean) - Method in class zeroecho.core.io.CipherTransformInputStreamBuilder

Configures whether left zero padding is applied to each output block.

withOutputBlockSize(int) - Method in class zeroecho.core.io.CipherTransformInputStreamBuilder

Sets the size of a single output block expected from the cipher.

withPbkdf2Limits(Pbkdf2Limits) - Method in class zeroecho.sdk.ZeroEchoSession

Returns a session with explicit PBKDF2 work-factor limits.

withPolicy(CryptoPolicy) - Method in class zeroecho.sdk.ZeroEchoSession

Returns a session with the supplied policy and this session's audit configuration.

withPrivateKey(PrivateKey) - Method in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Supplies the private key to use for decryption.

withPrivateKey(PrivateKey) - Method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Supplies the private key to use for decryption.

withPrivateKey(PrivateKey) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Supplies the private key to use for signing.

withPublicKey(PublicKey) - Method in class zeroecho.sdk.builders.alg.ElgamalEncDataContentBuilder

Supplies the public key to use for encryption.

withPublicKey(PublicKey) - Method in class zeroecho.sdk.builders.alg.RsaEncDataContentBuilder

Supplies the public key to use for encryption.

withPublicKey(PublicKey) - Method in class zeroecho.sdk.builders.alg.RsaSigDataContentBuilder

Supplies the public key to use for verification.

withUpdateStreaming() - Method in class zeroecho.core.io.CipherTransformInputStreamBuilder

Enables update-driven streaming (Cipher.update during transform, single doFinal at EOF).

withUpdateStreaming(boolean) - Method in class zeroecho.core.io.CipherTransformInputStreamBuilder

Controls update-driven streaming explicitly.

withUpstream(InputStream) - Method in class zeroecho.core.io.CipherTransformInputStreamBuilder

Sets the upstream source from which bytes will be read and transformed.

wrap(InputStream) - Method in class zeroecho.core.alg.common.eddsa.CommonEdDSASignatureContext

Wraps an upstream InputStream so that all data read from it is processed by the underlying signature engine.

wrap(InputStream) - Method in class zeroecho.core.alg.common.sig.GenericJcaSignatureContext

Wraps the supplied upstream stream so the underlying Signature is updated as data flows.

wrap(InputStream) - Method in class zeroecho.core.alg.digest.JcaDigestContext

Wraps an upstream InputStream in a digesting pipeline stage.

wrap(InputStream) - Method in class zeroecho.core.alg.hmac.HmacMacContext

Wraps an upstream input stream with HMAC computation.

wrap(InputStream) - Method in class zeroecho.core.alg.lms.LmsSignatureContext

wrap(InputStream) - Method in class zeroecho.core.alg.mldsa.MldsaSignatureContext

Wraps an input stream such that bytes read from the returned stream update the underlying signature engine.

wrap(InputStream) - Method in class zeroecho.core.alg.rsa.RsaSignatureContext

Wraps an upstream stream and returns a passthrough stream that performs signing or verification.

wrap(InputStream) - Method in class zeroecho.core.alg.slhdsa.SlhDsaSignatureContext

Wraps an input stream such that bytes read from the returned stream update the underlying signature engine.

wrap(InputStream) - Method in class zeroecho.core.alg.sphincsplus.SphincsPlusSignatureContext

Wraps an input stream to produce or verify a SPHINCS+ signature as data is consumed.

wrap(InputStream) - Method in class zeroecho.core.alg.xmss.XmssSignatureContext

wrap(InputStream) - Method in interface zeroecho.core.tag.TagEngine

Wraps the given upstream stream with a filtering stream that both passes bytes through and updates the tag engine state.

wrap(CryptoContext, AuditListener, KeyUsage) - Static method in class zeroecho.core.audit.AuditedContexts

Wraps a crypto context with an auditing proxy that emits lifecycle, progress, and error events while preserving the original behavior.

WRAP - Enum constant in enum class zeroecho.core.audit.AuditMode

Emits one context-creation event and returns an operation-auditing wrapper.

write(byte[]) - Method in class zeroecho.sdk.util.Pack7LStreamWriter

Writes the given data to the internal buffer or to the output stream once the length prefix has been fully decoded.

write(byte[], int, int) - Method in class zeroecho.sdk.util.Pack7LStreamWriter

Processes a chunk of input data starting at the specified offset and up to the specified length.

write(OutputStream, byte[]) - Static method in class zeroecho.core.io.Util

Writes a byte array to the output stream with its length encoded as a packed 7-bit integer.

write(OutputStream, UUID) - Static method in class zeroecho.core.io.Util

Writes a UUID to the output stream as two big-endian long values.

writeHeader(OutputStream, CryptoAlgorithm, CtxInterface) - Method in class zeroecho.core.alg.aes.AesHeaderCodec

Writes the header to out using values from the provided context.

writeHeader(OutputStream, CryptoAlgorithm, CtxInterface) - Method in class zeroecho.core.alg.chacha.ChaCha20Poly1305HeaderCodec

Writes the ChaCha20-Poly1305 header to the provided stream.

writeHeader(OutputStream, CryptoAlgorithm, CtxInterface) - Method in class zeroecho.core.alg.chacha.ChaChaHeaderCodec

Writes the ChaCha20 header to the provided output.

writeHeader(OutputStream, CryptoAlgorithm, CtxInterface) - Method in interface zeroecho.core.SymmetricHeaderCodec

Writes a header to out, using or recording parameters from ctx.

writeLong(OutputStream, long) - Static method in class zeroecho.core.io.Util

Writes a long value to the output stream in big-endian order (8 bytes).

writePack7I(OutputStream, int) - Static method in class zeroecho.core.io.Util

Writes an integer to the output stream using packed 7-bit encoding (variable length).

writePack7L(OutputStream, long) - Static method in class zeroecho.core.io.Util

Writes a long value to the output stream using packed 7-bit encoding (variable length).

writeTo(Appendable) - Method in class zeroecho.core.marshal.PairSeq

Appends all pairs to the target as key=value lines, reporting checked I/O failures directly.

writeUTF8(OutputStream, String) - Static method in class zeroecho.core.io.Util

Writes a UTF-8 encoded string to the output stream with its length as a packed 7-bit integer.

X

X25519 - Enum constant in enum class zeroecho.core.alg.xdh.XdhSpec

X25519 Diffie-Hellman over Curve25519.

X448 - Enum constant in enum class zeroecho.core.alg.xdh.XdhSpec

X448 Diffie-Hellman over Curve448.

x509() - Method in class zeroecho.core.alg.bike.BikePublicKeySpec

Returns a defensive copy of the X.509 encoded key.

x509() - Method in class zeroecho.core.alg.cmce.CmcePublicKeySpec

Returns a defensive copy of the X.509 bytes.

x509() - Method in class zeroecho.core.alg.frodo.FrodoPublicKeySpec

Returns a clone of the underlying X.509 encoding.

x509() - Method in class zeroecho.core.alg.hqc.HqcPublicKeySpec

Returns a defensive copy of the X.509-encoded key material.

x509() - Method in class zeroecho.core.alg.kyber.KyberPublicKeySpec

Returns a defensive copy of the X.509-encoded public key.

x509() - Method in class zeroecho.core.alg.lms.LmsPublicKeySpec

Returns a defensive copy of the X.509 encoded key bytes.

x509() - Method in class zeroecho.core.alg.ntru.NtruPublicKeySpec

Returns a copy of the X.509-encoded public key.

x509() - Method in class zeroecho.core.alg.ntruprime.NtrulPrimePublicKeySpec

Returns a clone of the X.509-encoded public key bytes.

x509() - Method in class zeroecho.core.alg.ntruprime.SntruPrimePublicKeySpec

Returns a clone of the X.509-encoded public key bytes.

x509() - Method in class zeroecho.core.alg.saber.SaberPublicKeySpec

Returns a defensive copy of the X.509-encoded public key.

x509() - Method in class zeroecho.core.alg.xmss.XmssPublicKeySpec

Returns a defensive copy of the X.509 encoded key bytes.

X509 - Enum constant in enum class zeroecho.core.storage.KeyringStore.Encoding

X.509 SubjectPublicKeyInfo public-key encoding.

X509Support - Class in zeroecho.sdk.util

Utility class providing support for working with X.509 certificates, private keys, and certification requests using PEM-encoded files and the Bouncy Castle library.

XdhAlgorithm - Class in zeroecho.core.alg.xdh

Algorithm definition for XDH (elliptic curve Diffie-Hellman) key agreement, backed by the JCA KeyAgreement API.

XdhAlgorithm() - Constructor for class zeroecho.core.alg.xdh.XdhAlgorithm

Creates a new XDH algorithm registration.

XdhKeyGenBuilder - Class in zeroecho.core.alg.xdh

KeyPair generator for XDH curves using the JCA KeyPairGenerator SPI.

XdhKeyGenBuilder() - Constructor for class zeroecho.core.alg.xdh.XdhKeyGenBuilder

Creates a stateless XDH key-pair generator.

XdhPrivateKeySpec - Class in zeroecho.core.alg.xdh

Key specification for an XDH (elliptic curve Diffie-Hellman) private key.

XdhPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.xdh.XdhPrivateKeySpec

Constructs a new specification from the given PKCS#8-encoded private key.

XdhPublicKeySpec - Class in zeroecho.core.alg.xdh

Key specification for an XDH (elliptic curve Diffie-Hellman) public key.

XdhPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.xdh.XdhPublicKeySpec

Constructs a new specification from the given X.509-encoded public key.

XdhSpec - Enum Class in zeroecho.core.alg.xdh

Specification for X25519 and X448 Diffie-Hellman over Montgomery-form elliptic curves.

XmssAlgorithm - Class in zeroecho.core.alg.xmss

Concrete CryptoAlgorithm for XMSS (eXtended Merkle Signature Scheme).

XmssAlgorithm() - Constructor for class zeroecho.core.alg.xmss.XmssAlgorithm

Creates the XMSS algorithm instance and registers its capabilities and the default key-pair generator (SHA2_10_256).

XmssKeyGenSpec - Enum Class in zeroecho.core.alg.xmss

Key generation specification for XMSS.

XmssPrivateKeySpec - Class in zeroecho.core.alg.xmss

Encoded representation of an XMSS private key in PKCS#8 format.

XmssPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.xmss.XmssPrivateKeySpec

Constructs a new spec from PKCS#8 DER encoded XMSS private key bytes.

XmssPublicKeySpec - Class in zeroecho.core.alg.xmss

Encoded representation of an XMSS public key in X.509 (SubjectPublicKeyInfo) format.

XmssPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.xmss.XmssPublicKeySpec

Constructs a new spec from X.509 DER encoded XMSS public key bytes.

XmssSignatureContext - Class in zeroecho.core.alg.xmss

Streaming signature context for XMSS (eXtended Merkle Signature Scheme).

XmssSignatureContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.xmss.XmssSignatureContext

Rejects XMSS signing without using or changing the private key.

XmssSignatureContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.xmss.XmssSignatureContext

Creates an XMSS verification context bound to the given public key.

XWingAlgorithm - Class in zeroecho.core.alg.xwing

Concrete CryptoAlgorithm for the X-Wing hybrid post-quantum key encapsulation mechanism.

XWingAlgorithm() - Constructor for class zeroecho.core.alg.xwing.XWingAlgorithm

Creates and wires the X-Wing algorithm with all its capabilities and the key-pair generator.

XWingKemContext - Class in zeroecho.core.alg.xwing

KEM context for the X-Wing hybrid post-quantum key encapsulation mechanism.

XWingKemContext(CryptoAlgorithm, PrivateKey) - Constructor for class zeroecho.core.alg.xwing.XWingKemContext

Creates a context in decapsulation role bound to the given private key.

XWingKemContext(CryptoAlgorithm, PublicKey) - Constructor for class zeroecho.core.alg.xwing.XWingKemContext

Creates a context in encapsulation role bound to the given public key.

XWingKeyGenSpec - Enum Class in zeroecho.core.alg.xwing

Key generation specification for X-Wing.

XWingPrivateKeySpec - Class in zeroecho.core.alg.xwing

Encoded representation of an X-Wing private key as its 32-byte seed.

XWingPrivateKeySpec(byte[]) - Constructor for class zeroecho.core.alg.xwing.XWingPrivateKeySpec

Constructs a new spec from a raw X-Wing private key seed.

XWingPublicKeySpec - Class in zeroecho.core.alg.xwing

Encoded representation of an X-Wing public key in raw format.

XWingPublicKeySpec(byte[]) - Constructor for class zeroecho.core.alg.xwing.XWingPublicKeySpec

Constructs a new spec from raw X-Wing public key bytes.

Z

zeroecho.core - package zeroecho.core

Core cryptography engine and registry for ZeroEcho.

zeroecho.core.alg - package zeroecho.core.alg

Concrete cryptographic algorithms and small helpers used by algorithms.

zeroecho.core.alg.aes - package zeroecho.core.alg.aes

AES algorithm implementation and runtime wiring.

zeroecho.core.alg.bike - package zeroecho.core.alg.bike

BIKE post-quantum key encapsulation and related utilities.

zeroecho.core.alg.chacha - package zeroecho.core.alg.chacha

ChaCha algorithm implementation and runtime wiring.

zeroecho.core.alg.cmce - package zeroecho.core.alg.cmce

Classic McEliece (CMCE) KEM integration and utilities.

zeroecho.core.alg.common.agreement - package zeroecho.core.alg.common.agreement

Adapters and generic contexts for key agreement built on the core SPI.

zeroecho.core.alg.common.eddsa - package zeroecho.core.alg.common.eddsa

EdDSA (Edwards-curve Digital Signature Algorithm) key builders and contexts.

zeroecho.core.alg.common.sig - package zeroecho.core.alg.common.sig

Streaming signature contexts and helpers that adapt JCA Signature to a pull-based pipeline.

zeroecho.core.alg.dh - package zeroecho.core.alg.dh

Diffie-Hellman (DH) algorithm integration.

zeroecho.core.alg.digest - package zeroecho.core.alg.digest

Digest algorithms (SHA-2, SHA-3, SHAKE) and their streaming contexts.

zeroecho.core.alg.ecdh - package zeroecho.core.alg.ecdh

Elliptic Curve Diffie-Hellman (ECDH) key agreement integration.

zeroecho.core.alg.ecdsa - package zeroecho.core.alg.ecdsa

Elliptic Curve Digital Signature Algorithm (ECDSA) integration.

zeroecho.core.alg.ed25519 - package zeroecho.core.alg.ed25519

Ed25519 digital signature integration.

zeroecho.core.alg.ed448 - package zeroecho.core.alg.ed448

Ed448 digital signature integration.

zeroecho.core.alg.elgamal - package zeroecho.core.alg.elgamal

ElGamal asymmetric encryption integration.

zeroecho.core.alg.frodo - package zeroecho.core.alg.frodo

FrodoKEM post-quantum key encapsulation integration.

zeroecho.core.alg.hmac - package zeroecho.core.alg.hmac

HMAC algorithms, streaming MAC contexts, and key specifications.

zeroecho.core.alg.hqc - package zeroecho.core.alg.hqc

HQC post-quantum key encapsulation integration.

zeroecho.core.alg.kyber - package zeroecho.core.alg.kyber

Kyber (ML-KEM) post-quantum key encapsulation integration.

zeroecho.core.alg.lms - package zeroecho.core.alg.lms

zeroecho.core.alg.mldsa - package zeroecho.core.alg.mldsa

ML-DSA (FIPS 204) signature algorithm binding.

zeroecho.core.alg.ntru - package zeroecho.core.alg.ntru

NTRU post-quantum key encapsulation integration.

zeroecho.core.alg.ntruprime - package zeroecho.core.alg.ntruprime

NTRU Prime family key encapsulation mechanisms and related utilities.

zeroecho.core.alg.rsa - package zeroecho.core.alg.rsa

RSA encryption and signature integration.

zeroecho.core.alg.saber - package zeroecho.core.alg.saber

SABER post-quantum key encapsulation integration.

zeroecho.core.alg.slhdsa - package zeroecho.core.alg.slhdsa

SLH-DSA (FIPS 205) signature algorithm binding.

zeroecho.core.alg.sphincsplus - package zeroecho.core.alg.sphincsplus

SPHINCS+ post-quantum signature integration.

zeroecho.core.alg.xdh - package zeroecho.core.alg.xdh

XDH (X25519/X448) Diffie-Hellman key agreement integration.

zeroecho.core.alg.xmss - package zeroecho.core.alg.xmss

zeroecho.core.alg.xwing - package zeroecho.core.alg.xwing

zeroecho.core.annotation - package zeroecho.core.annotation

Provides metadata contracts and annotations for cryptographic algorithms and specifications.

zeroecho.core.audit - package zeroecho.core.audit

Auditing utilities for cryptographic contexts, including event contracts and a JUL-backed listener.

zeroecho.core.context - package zeroecho.core.context

Abstractions for cryptographic operation contexts.

zeroecho.core.err - package zeroecho.core.err

Exception types used by the core to signal configuration errors and unexpected provider failures.

zeroecho.core.io - package zeroecho.core.io

I/O helpers for block-based transforms, passthrough processing, and tail handling.

zeroecho.core.marshal - package zeroecho.core.marshal

Marshalling utilities and conventions for compact, human-readable representations.

zeroecho.core.policy - package zeroecho.core.policy

Policy enforcement for algorithms, keys, and specifications.

zeroecho.core.spec - package zeroecho.core.spec

Specifications for keys and per-operation parameters.

zeroecho.core.spi - package zeroecho.core.spi

Provider contracts for context construction and exact key operations.

zeroecho.core.storage - package zeroecho.core.storage

Encrypted local software-keyring storage.

zeroecho.core.tag - package zeroecho.core.tag

Streaming tag computation and verification for digests, MACs, and digital signatures.

zeroecho.core.util - package zeroecho.core.util

General-purpose helper classes and utility routines.

zeroecho.lib - module zeroecho.lib

ZeroEcho foundation library: cryptographic core (zeroecho.core) and the high-level SDK (zeroecho.sdk) kept together in one artifact/module.

zeroecho.logging - package zeroecho.logging

Provides lightweight logging utilities and configuration helpers for Java Util Logging (JUL).

zeroecho.pkix - package zeroecho.pkix

zeroecho.pkix.bc - package zeroecho.pkix.bc

zeroecho.pkix.cert - package zeroecho.pkix.cert

zeroecho.pkix.cmp - package zeroecho.pkix.cmp

zeroecho.pkix.crl - package zeroecho.pkix.crl

zeroecho.pkix.csr - package zeroecho.pkix.csr

zeroecho.pkix.ct - package zeroecho.pkix.ct

zeroecho.pkix.ocsp - package zeroecho.pkix.ocsp

zeroecho.pkix.scep - package zeroecho.pkix.scep

zeroecho.pkix.sign - package zeroecho.pkix.sign

zeroecho.pkix.spi - package zeroecho.pkix.spi

zeroecho.sdk - package zeroecho.sdk

Consumer-facing ZeroEcho runtime and high-level integration APIs.

zeroecho.sdk.builders - package zeroecho.sdk.builders

Builders for composing streaming data-content pipelines across core sources and algorithm-specific stages.

zeroecho.sdk.builders.alg - package zeroecho.sdk.builders.alg

Streaming cryptographic builders for symmetric encryption, signatures, MACs, digests, and KEM envelopes.

zeroecho.sdk.builders.core - package zeroecho.sdk.builders.core

Core builders for composing streaming DataContent pipelines and plain sources.

zeroecho.sdk.content.api - package zeroecho.sdk.content.api

Content abstractions for streaming data in the SDK.

zeroecho.sdk.content.builtin - package zeroecho.sdk.content.builtin

Built-in plain content sources: bytes, strings, files, and passwords.

zeroecho.sdk.guard - package zeroecho.sdk.guard

Multi-recipient envelope for symmetric payloads with pluggable recipients, reusable openers, and a compact header.

zeroecho.sdk.hybrid.derived - package zeroecho.sdk.hybrid.derived

Derived-key utilities for integrating hybrid KEX output with streaming builders.

zeroecho.sdk.hybrid.kex - package zeroecho.sdk.hybrid.kex

Hybrid key exchange (KEX) utilities combining a classic agreement and a post-quantum KEM-style agreement into one derived shared secret.

zeroecho.sdk.hybrid.signature - package zeroecho.sdk.hybrid.signature

Hybrid signature composition for streaming pipelines.

zeroecho.sdk.io - package zeroecho.sdk.io

Stream utilities for SDK pipelines.

zeroecho.sdk.util - package zeroecho.sdk.util

Utility helpers for provider setup, key derivation, randomness, encoding, and X.509 handling.

ZeroEcho Library - Section in Overview

ZeroEchoSession - Class in zeroecho.sdk

Immutable, explicitly scoped runtime configuration for ZeroEcho operations.

ZeroEchoSession() - Constructor for class zeroecho.sdk.ZeroEchoSession

Creates a session with a permissive policy, no-op audit listener, and AuditMode.OFF.

zeroEchoSigningConfigurationTag(String, Duration, String, boolean) - Method in class zeroecho.core.storage.KeyringStore

Computes the stable ZeroEcho signing-configuration tag for this keyring.

A B C D E F G H I J K L M N O P R S T U V W X Z
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form