org.bouncycastle.cert.ct
Class SignedCertificateTimestamp

java.lang.Object
  org.bouncycastle.cert.ct.SignedCertificateTimestamp

public class SignedCertificateTimestamp

extends java.lang.Object

A single Signed Certificate Timestamp (SCT) in the RFC 6962 (CT v1) wire format. Decoded from the TLS-encoded payload of a SignedCertificateTimestampList. enum { v1(0), (255) } Version; struct { opaque key_id[32]; } LogID; opaque CtExtensions<0..2^16-1>; struct { Version sct_version; LogID id; uint64 timestamp; CtExtensions extensions; digitally-signed struct { Version sct_version; SignatureType signature_type = certificate_timestamp; uint64 timestamp; LogEntryType entry_type; select(entry_type) { case x509_entry: ASN.1Cert; case precert_entry: PreCert; } signed_entry; CtExtensions extensions; }; } SignedCertificateTimestamp; The value is the TLS 1.2 sec. 4.7 form: a one-byte HashAlgorithm and a one-byte SignatureAlgorithm followed by a two-byte-length-prefixed opaque signature. This class exposes the algorithm pair and the raw signature bytes; computing the signed leaf structure and verifying it against a log's public key is a higher-level concern handled outside this decode-only API.

For RFC 9162 (CT v2), see SignedCertificateTimestampDataV2.

Field Summary

static int	LOG_ID_LENGTH
static int	VERSION_V1

Constructor Summary

SignedCertificateTimestamp(int sctVersion, byte[] logID, long timestamp, byte[] extensions, int hashAlgorithm, int signatureAlgorithm, byte[] signature)

Method Summary

byte[]	getEncoded() Serialize this SCT to its TLS wire form (the bytes that would be carried as one entry in a list).
byte[]	getExtensions() The opaque blob carried in the SCT.
int	getHashAlgorithm() TLS HashAlgorithm byte (sha256 = 4, etc.).
static SignedCertificateTimestamp	getInstance(byte[] encoded) Decode an SCT from its serialized TLS form (the bytes that appear as one entry inside a SignedCertificateTimestampList).
byte[]	getLogID() 32-byte log identifier (SHA-256 of the log's DER-encoded public key).
int	getSctVersion() SCT version byte.
byte[]	getSignature() Raw signature bytes (the opaque signature field from the digitally-signed struct).
int	getSignatureAlgorithm() TLS SignatureAlgorithm byte (rsa = 1, dsa = 2, ecdsa = 3).
long	getTimestamp() Issuance timestamp in milliseconds since the Unix epoch (Java convention; the same value the wire form uses).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG_ID_LENGTH

public static final int LOG_ID_LENGTH

See Also:

Constant Field Values

VERSION_V1

public static final int VERSION_V1

See Also:

Constant Field Values

Constructor Detail

SignedCertificateTimestamp

public SignedCertificateTimestamp(int sctVersion,
                                  byte[] logID,
                                  long timestamp,
                                  byte[] extensions,
                                  int hashAlgorithm,
                                  int signatureAlgorithm,
                                  byte[] signature)

Method Detail

getInstance

public static SignedCertificateTimestamp getInstance(byte[] encoded)

Decode an SCT from its serialized TLS form (the bytes that appear as one entry inside a SignedCertificateTimestampList).

getSctVersion

public int getSctVersion()

SCT version byte. RFC 6962 defines only v1 (0).

getLogID

public byte[] getLogID()

32-byte log identifier (SHA-256 of the log's DER-encoded public key).

getTimestamp

public long getTimestamp()

Issuance timestamp in milliseconds since the Unix epoch (Java convention; the same value the wire form uses).

getExtensions

public byte[] getExtensions()

The opaque blob carried in the SCT. RFC 6962 leaves the contents unspecified; logs in the wild emit it empty.

getHashAlgorithm

public int getHashAlgorithm()

TLS HashAlgorithm byte (sha256 = 4, etc.).

getSignatureAlgorithm

public int getSignatureAlgorithm()

TLS SignatureAlgorithm byte (rsa = 1, dsa = 2, ecdsa = 3).

getSignature

public byte[] getSignature()

Raw signature bytes (the opaque signature field from the digitally-signed struct).

getEncoded

public byte[] getEncoded()

Serialize this SCT to its TLS wire form (the bytes that would be carried as one entry in a list).