Home >> All

• jsdsi: Javadoc index of package jsdsi.


Package Samples:

• jsdsi

Classes:

• Loader: Creates a set of certificates from a flat text file for testing. Each certificate appears on its own line. Blank lines are allowed, but comments are not. Name certs are specified as follows: ISSUER name -> SUBJECT [names...] For example, ALICE friends -> BOB BOB my-friends -> BOB sister BOB sister -> CAROL Note that we use uppercase for keys and lowercase for names for clarity, but this is not required. However, lines are case-sensitive, so "BOB" is different from "Bob" . Auth certs are specified as follows: ISSUER [!|+]tag -> SUBJECT [names...] where ! means ...
• CompatibleCertSelector: Selects all certificates whose subject is a name that starts with the specified issuer and string. That is, if the issuer is K and the string is S , this selects all certificates of the form (LHS -> "K S ...") , where LHS is the left-hand-side of the certificate and "K S ..." is a name.
• Certificate: A Cert along with its validators (verification path, signature, and online test results). Whereas a Cert is simply an unauthenticated statement, a Certificate is self-validating and thus can be considered authentic if verify() succeeds. A Certificate is serialized as a SPKI/SDSI Sequence.
• Threshold: A subject that can delegate authority to any K of N specified subjects. For example, if K is 2, N is 3, and the subjects are Alice, Bob, and Carol, any two of those subjects can pass on any authority granted to this subject (if delegation is permitted).
• Proof: A statement (a Cert ) and a sequence of Certificates ( Certs + validators ) that proves that the statement holds. Proofs are self-validating and can be composed to create new proofs.
• CertPathParameters: Parameters to the cert path builder and validator. Specifies the statement (a SPKI/SDSI cert) that needs to be proved or validated and the certificate store from which to fetch certificates.
• ExprTag: Distinguishes tags defined by expressions from tags in general (the latter includes Tag.ALL_TAG and Tag.NULL_TAG). Only ExprTags can appear within other tags (like SetTags or SimpleTags).
• Acl: An access control list (ACL) that restricts access to an object on the local system. The ACL contains a set of ACL entries that specify which principals may access the object and how.
• AuthCert: A SPKI authorization certificate: conveys a permission (the Tag) from the issuer to the subject. If the propagate flag is set, the subject can further delegate the permission.
• Prover: Given a statement (a Cert ) and a CertStore , attempts to construct a Proof that the statement holds using certificates from the store.
• RProver: A prover that searches subject-to-issuer. Will only access the CertStore using CompatibleCertSelectors and SubjectCertSelectors .
• FProver: A prover that searches issuer-to-subject. Will only access the CertStore using AuthCertSelector s and NameCertSelector s.
• CertPathBuilder: Attempts to create a certification path that satisfies the given parameters: essentially a wrapper around the Prover class and its subclasses.
• MultiMap: A one-to-many map: each key is associated with a set of values. Note that get(key) returns the empty set if no value has previously been put() for that key.
• Hash: A cryptographic hash value. Specifies the hash algorithm, the value to hash, and an optional set of URIs that specify where the hashed object is located.
• Name: A SDSI name: a principal and a sequence of strings. If the sequence contains just one string, this is a local name; otherwise this is an extended name.
• SubjectCertPathParameters: Specifies that the cert path builder should search for a cert path from subject to issuer. Essentially, tells the builder to use RProver .
• AclEntry: An ACL entry that specifies a permission (the Tag) and a set of principals (the Subject) that may access the object protected by this entry's ACL.
• CertPathValidatorResult: The result of a call to the cert path validator: returns true to isOk() if successful; otherwise getCause() returns the cause of the failure.
• IssuerCertPathParameters: Specifies that the cert path builder should search for a cert path from issuer to subject. Essentially, tells the builder to use FProver.
• S2X: Reads a a file with an S-expression which filename is given as the first argument and outputs it in canonical format to stdout.
• Principal: A principal: an entity that can define names and can grant and receive authorizations. Represented by a public key.
• Sequence: A sequence of SPKI/SDSI objects, typically used to present certs and validators that prove a particular statement.
• CertPathValidator: Checks whether a certification path satisfies certain parameters: essentially a wrapper around Proof.verify().

Home | Contact Us | Privacy Policy | Terms of Service