Class XmssPrivateKeySpec

java.lang.Object

zeroecho.core.alg.xmss.XmssPrivateKeySpec

All Implemented Interfaces:

Destroyable, AlgorithmKeySpec

public final class XmssPrivateKeySpec
extends Object
implements AlgorithmKeySpec, Destroyable

Encoded representation of an XMSS private key in PKCS#8 format.

XMSS private keys are stateful with a finite signing capacity. The PKCS#8 encoding captures the current leaf-index state. Callers must persist the updated key state after every signing operation to prevent key-state reuse. See XmssSignatureContext for lifecycle guidance.

This class implements Destroyable to allow zeroing of key material when the spec is no longer needed.

Since:

1.0

Constructor Summary

Constructors

Constructor	Description
XmssPrivateKeySpec(byte[] pkcs8Der)	Constructs a new spec from PKCS#8 DER encoded XMSS private key bytes.

Method Summary

Modifier and Type	Method	Description
void	destroy()
boolean	isDestroyed()
static PairSeq	marshal(XmssPrivateKeySpec spec)	Serializes this spec to a PairSeq.
byte[]	pkcs8()	Returns a defensive copy of the PKCS#8 encoded key bytes.
String	toString()
static XmssPrivateKeySpec	unmarshal(PairSeq p)	Deserializes a spec from a PairSeq.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Details

XmssPrivateKeySpec

public XmssPrivateKeySpec(byte[] pkcs8Der)

Constructs a new spec from PKCS#8 DER encoded XMSS private key bytes.

Parameters:

pkcs8Der - PKCS#8 DER bytes

Throws:

NullPointerException - if pkcs8Der is null

Method Details

pkcs8

public byte[] pkcs8()

Returns a defensive copy of the PKCS#8 encoded key bytes.

Returns:

PKCS#8 DER bytes

Throws:

IllegalStateException - if this spec has been destroyed

marshal

public static PairSeq marshal(XmssPrivateKeySpec spec)

Serializes this spec to a PairSeq.

Parameters:

spec - the spec to serialize

Returns:

serialized representation

unmarshal

public static XmssPrivateKeySpec unmarshal(PairSeq p)

Deserializes a spec from a PairSeq.

Parameters:

p - serialized representation

Returns:

reconstructed spec

Throws:

IllegalArgumentException - if required field is missing

destroy

public void destroy()

Specified by:

destroy in interface Destroyable

isDestroyed

public boolean isDestroyed()

Specified by:

isDestroyed in interface Destroyable

toString

public String toString()

Overrides:

toString in class Object