Class ResponseEncryptionKeyProvider

Namespace

Tessio.Verifier.AspNetCore

Assembly

Tessio.Verifier.AspNetCore.dll

Holds the verifier's response-encryption key pair. The public half is advertised to wallets via client_metadata.jwks; the private half decrypts direct_post.jwt (ECDH-ES) responses. ResponseEncryptionKeyStore creates one per authorization request, generated or, built with ResponseKeyDerivationOptions, derived so every instance can create it again.

public sealed class ResponseEncryptionKeyProvider : IDisposable

Inheritance

object

ResponseEncryptionKeyProvider

Implements

IDisposable

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Constructors

ResponseEncryptionKeyProvider()

Creates a provider with a fresh ephemeral P-256 key (the single-process default).

public ResponseEncryptionKeyProvider()

ResponseEncryptionKeyProvider(ECDsa)

Creates a provider from a caller-supplied EC P-256 private key, such as one Derive(ReadOnlySpan<byte>, ReadOnlySpan<byte>) returns. The provider takes ownership and disposes the key.

public ResponseEncryptionKeyProvider(ECDsa privateKey)

Parameters

privateKey ECDsa

Properties

DecryptionKey

Private key for decrypting wallet responses.

public ECDsaSecurityKey DecryptionKey { get; }

Property Value

ECDsaSecurityKey

KeyId

Key identifier (RFC 7638 JWK thumbprint).

public string KeyId { get; }

Property Value

string

PublicJwk

Public JWK for client_metadata.jwks. Clone before embedding in a JsonObject.

public JsonObject PublicJwk { get; }

Property Value

JsonObject

ThumbprintBytes

The raw thumbprint bytes, as bound into the mdoc session transcript.

public byte[] ThumbprintBytes { get; }

Property Value

byte[]

Methods

Dispose()

Performs application-defined tasks associated with freeing, releasing, or resetting unmanaged resources.

public void Dispose()