Class ASN1EvidenceRecordTimeStampSequenceVerifier

java.lang.Object

eu.europa.esig.dss.evidencerecord.common.validation.EvidenceRecordTimeStampSequenceVerifier

eu.europa.esig.dss.evidencerecord.asn1.validation.ASN1EvidenceRecordTimeStampSequenceVerifier

public class ASN1EvidenceRecordTimeStampSequenceVerifier
extends EvidenceRecordTimeStampSequenceVerifier

Verifies ArchiveTimeStampSequence for an ASN.1 Evidence Record

Field Summary

Fields inherited from class EvidenceRecordTimeStampSequenceVerifier

evidenceRecord

Constructor Summary

Constructors

Constructor	Description
ASN1EvidenceRecordTimeStampSequenceVerifier(ASN1EvidenceRecord evidenceRecord)	Default constructor to instantiate an ASN.1 evidence record verifier

Method Summary

Modifier and Type	Method	Description
protected boolean	checkHashTreeValidity(ArchiveTimeStampObject archiveTimeStamp, ArchiveTimeStampChainObject archiveTimeStampChain)	This method verifies whether the ArchiveTimeStampObject and its hash-tree is valid relatively the parent ArchiveTimeStampChainObject
protected DSSMessageDigest	computeTimeStampHash(ArchiveTimeStampObject archiveTimeStamp)	Computes hash on archiveTimeStamp element provided the archiveTimeStampChain's attributes
protected DSSMessageDigest	computeTimeStampSequenceHash(ArchiveTimeStampChainObject archiveTimeStampChain)	Computes hash of current ArchiveTimeStampSequenceElement
protected DataObjectDigestBuilder	getDataObjectDigestBuilder(DSSDocument document, ArchiveTimeStampChainObject archiveTimeStampChain)	Returns DataObjectDigestBuilder corresponding to the current implementation
protected ASN1ArchiveTimeStampSequenceDigestHelper	getEvidenceRecordRenewalDigestBuilderHelper()	This method returns a helper class containing supporting methods for digest computation in relation to an archive-time-stamp-sequence
protected List<byte[]>	getLastTimeStampSequenceHashList(DSSMessageDigest lastTimeStampSequenceHash, List<DSSDocument> detachedDocuments)	Returns a list of hashes computed on a given previous time-stamp sequence hash
protected DSSDocument	getMatchingDocument(Digest digest, ArchiveTimeStampChainObject archiveTimeStampChain, DSSMessageDigest lastTimeStampSequenceHash, List<DSSDocument> detachedContents)	This method returns a document with matching Digest from a provided list of detachedContents
protected List<ReferenceValidation>	validateArchiveTimeStampSequenceDigest(List<ReferenceValidation> referenceValidations, DSSMessageDigest lastTimeStampSequenceHashes)	This method is used to verify presence of ArchiveTimeStampSequence digests within the reference validation list.
protected List<ReferenceValidation>	validateMasterSignatureDigest(List<ReferenceValidation> referenceValidations, DigestAlgorithm digestAlgorithm, DSSMessageDigest lastTimeStampSequenceHash)	This method is used to verify presence of master signature digests within the reference validation list.

Methods inherited from class EvidenceRecordTimeStampSequenceVerifier

computeDigestValueGroupHash, createEmptyReference, digestMatch, ensureReferenceValidationOfType, ensureReferenceValidations, getDocumentDigest, getHashTree, getMatchingDocument, getMatchingManifestEntry, getReferenceValidations, validateAdditionalDigest, validateArchiveDataObjects, validateArchiveTimeStampDigest, verify

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ASN1EvidenceRecordTimeStampSequenceVerifier

public ASN1EvidenceRecordTimeStampSequenceVerifier(ASN1EvidenceRecord evidenceRecord)

Default constructor to instantiate an ASN.1 evidence record verifier

Parameters:

evidenceRecord - ASN1EvidenceRecord XML evidence record to be validated

Method Details

getDataObjectDigestBuilder

protected DataObjectDigestBuilder getDataObjectDigestBuilder(DSSDocument document,
 ArchiveTimeStampChainObject archiveTimeStampChain)

Description copied from class: EvidenceRecordTimeStampSequenceVerifier

Returns DataObjectDigestBuilder corresponding to the current implementation

Specified by:

getDataObjectDigestBuilder in class EvidenceRecordTimeStampSequenceVerifier

Parameters:

document - DSSDocument document to build digest for

archiveTimeStampChain - ArchiveTimeStampChainObject of the current hashtree

Returns:

DataObjectDigestBuilder

getMatchingDocument

protected DSSDocument getMatchingDocument(Digest digest,
 ArchiveTimeStampChainObject archiveTimeStampChain,
 DSSMessageDigest lastTimeStampSequenceHash,
 List<DSSDocument> detachedContents)

This method returns a document with matching Digest from a provided list of detachedContents

Overrides:

getMatchingDocument in class EvidenceRecordTimeStampSequenceVerifier

Parameters:

digest - Digest to check

archiveTimeStampChain - ArchiveTimeStampChainObject defines configuration for validation

lastTimeStampSequenceHash - DSSMessageDigest hash of the last archive time-stamp sequence

detachedContents - a list of DSSDocuments

Returns:

DSSDocument if matching document found, NULL otherwise

checkHashTreeValidity

protected boolean checkHashTreeValidity(ArchiveTimeStampObject archiveTimeStamp,
 ArchiveTimeStampChainObject archiveTimeStampChain)

Description copied from class: EvidenceRecordTimeStampSequenceVerifier

This method verifies whether the ArchiveTimeStampObject and its hash-tree is valid relatively the parent ArchiveTimeStampChainObject

Overrides:

checkHashTreeValidity in class EvidenceRecordTimeStampSequenceVerifier

Parameters:

archiveTimeStamp - ArchiveTimeStampObject

archiveTimeStampChain - ArchiveTimeStampChainObject

Returns:

TRUE if the validation succeeds, FALSE otherwise

computeTimeStampHash

protected DSSMessageDigest computeTimeStampHash(ArchiveTimeStampObject archiveTimeStamp)

Description copied from class: EvidenceRecordTimeStampSequenceVerifier

Computes hash on archiveTimeStamp element provided the archiveTimeStampChain's attributes

Specified by:

computeTimeStampHash in class EvidenceRecordTimeStampSequenceVerifier

Parameters:

archiveTimeStamp - ArchiveTimeStampObject to compute hash on

Returns:

DSSMessageDigest

computeTimeStampSequenceHash

protected DSSMessageDigest computeTimeStampSequenceHash(ArchiveTimeStampChainObject archiveTimeStampChain)

Description copied from class: EvidenceRecordTimeStampSequenceVerifier

Computes hash of current ArchiveTimeStampSequenceElement

Specified by:

computeTimeStampSequenceHash in class EvidenceRecordTimeStampSequenceVerifier

Parameters:

archiveTimeStampChain - ArchiveTimeStampChainObject to compute hash for

Returns:

DSSMessageDigest

validateArchiveTimeStampSequenceDigest

protected List<ReferenceValidation> validateArchiveTimeStampSequenceDigest(List<ReferenceValidation> referenceValidations,
 DSSMessageDigest lastTimeStampSequenceHashes)

Description copied from class: EvidenceRecordTimeStampSequenceVerifier

This method is used to verify presence of ArchiveTimeStampSequence digests within the reference validation list. If entry is not present, creates one, when applicable

Overrides:

validateArchiveTimeStampSequenceDigest in class EvidenceRecordTimeStampSequenceVerifier

Parameters:

referenceValidations - a list of ReferenceValidations

lastTimeStampSequenceHashes - DSSMessageDigest

Returns:

an updated list of ReferenceValidations

validateMasterSignatureDigest

protected List<ReferenceValidation> validateMasterSignatureDigest(List<ReferenceValidation> referenceValidations,
 DigestAlgorithm digestAlgorithm,
 DSSMessageDigest lastTimeStampSequenceHash)

Description copied from class: EvidenceRecordTimeStampSequenceVerifier

This method is used to verify presence of master signature digests within the reference validation list. If entry is not present, creates one, when applicable

Overrides:

validateMasterSignatureDigest in class EvidenceRecordTimeStampSequenceVerifier

Parameters:

referenceValidations - a list of ReferenceValidations

digestAlgorithm - DigestAlgorithm used by the hashtree

lastTimeStampSequenceHash - DSSMessageDigest if present

Returns:

an updated list of ReferenceValidations

getLastTimeStampSequenceHashList

protected List<byte[]> getLastTimeStampSequenceHashList(DSSMessageDigest lastTimeStampSequenceHash,
 List<DSSDocument> detachedDocuments)

Description copied from class: EvidenceRecordTimeStampSequenceVerifier

Returns a list of hashes computed on a given previous time-stamp sequence hash

Overrides:

getLastTimeStampSequenceHashList in class EvidenceRecordTimeStampSequenceVerifier

Parameters:

lastTimeStampSequenceHash - DSSMessageDigest of the previous ArchiveTimeStampSequence

detachedDocuments - a list of detached DSSDocuments

Returns:

a list of byte arrays

getEvidenceRecordRenewalDigestBuilderHelper

protected ASN1ArchiveTimeStampSequenceDigestHelper getEvidenceRecordRenewalDigestBuilderHelper()

This method returns a helper class containing supporting methods for digest computation in relation to an archive-time-stamp-sequence

Returns:

ASN1ArchiveTimeStampSequenceDigestHelper