Class GroupSendDerivedKeyPair
-
- All Implemented Interfaces:
public final class GroupSendDerivedKeyPair extends ByteArray
The key pair used to issue and verify group send endorsements.
Group send endorsements use a different key pair depending on the endorsement's expiration (but not the user ID being endorsed). The server may cache these keys to avoid the (small) cost of deriving them from the root key in ServerSecretParams. The key object stores the expiration so that it doesn't need to be provided again when issuing endorsements.
-
-
Field Summary
Fields Modifier and Type Field Description public final static ByteArray.UncheckedAndUnclonedUNCHECKED_AND_UNCLONED
-
Constructor Summary
Constructors Constructor Description GroupSendDerivedKeyPair(Array<byte> contents)
-
Method Summary
Modifier and Type Method Description static GroupSendDerivedKeyPairforExpiration(Instant expiration, ServerSecretParams params)Derives a new key for group send endorsements that expire at expiration.-
-
Constructor Detail
-
GroupSendDerivedKeyPair
GroupSendDerivedKeyPair(Array<byte> contents)
-
-
Method Detail
-
forExpiration
static GroupSendDerivedKeyPair forExpiration(Instant expiration, ServerSecretParams params)
Derives a new key for group send endorsements that expire at
expiration.expirationmust be day-aligned as a protection against fingerprinting by the issuing server.
-
-
-
-