org.bouncycastle.cert.plants

Interface MTCCosignerVerifier

All Superinterfaces:

ContentVerifier

public interface MTCCosignerVerifier
extends ContentVerifier

Operator that verifies a single cosigner's signature over a CosignedMessage as defined by Section 5.3.1 of draft-ietf-plants-merkle-tree-certs.

Implementations encapsulate the cosigner's public key and the algorithm choice. As a ContentVerifier, callers feed the already-encoded CosignedMessage bytes (e.g. via MTCCosignedMessage.encode(byte[], long, long, byte[], byte[])) through ContentVerifier.getOutputStream() and then call ContentVerifier.verify(byte[]) with the candidate signature.

See Also:

MTCCosignerVerifierProvider, MTCCosignedMessage

Method Summary

Modifier and Type	Method and Description
byte[]	getCosignerId()

Methods inherited from interface org.bouncycastle.operator.ContentVerifier

getAlgorithmIdentifier, getOutputStream, verify

Method Detail

getCosignerId

byte[] getCosignerId()

Returns:

the binary trust anchor ID of the cosigner this verifier is bound to — the key under which it was registered with its MTCCosignerVerifierProvider. Consumers counting cosignatures use this to confirm a signature's cosigner_id names the identity of the key it is checked against, rather than relying solely on the cosigner_name binding inside the CosignedMessage.