TrustedUpdate (Javadocs [I2P+ 2.13.0+]

java.lang.Object
- net.i2p.crypto.TrustedUpdate

```
public class TrustedUpdate
extends Object
```
Handles signing and verification of I2P update files. Supports multiple signature types and content formats for secure software distribution.

Field Summary
Fields
Modifier and Type Field and Description
static int HEADER_BYTES
HEADER_BYTES.

Fields
Modifier and Type	Field and Description
`static int`	`HEADER_BYTES` HEADER_BYTES.

Constructor Summary

Constructors
Constructor and Description
`TrustedUpdate()` Constructs a new `TrustedUpdate` with the default global context.
`TrustedUpdate(I2PAppContext context)` Constructs a new `TrustedUpdate` with the given `I2PAppContext`.

Method Summary

All Methods Static Methods Instance Methods Concrete Methods
Modifier and Type	Method and Description
`boolean`	`addKey(String key, String name)` Duplicate keys or names rejected, except that duplicate empty names are allowed
`Map<SigningPublicKey,String>`	`getKeys()` Keys.
`String`	`getTrustedKeysString()` Fetches the trusted keys for the current instance.
`static String`	`getVersionString(File signedFile)` Reads the version string from a signed update file.
`static String`	`getVersionString(InputStream inputStream)` Reads the version string from an input stream
`boolean`	`haveKey(String key)` Do we know about the following key?
`boolean`	`isUpdatedVersion(String currentVersion, File signedFile)` Verifies that the version of the given signed update file is newer than `currentVersion`.
`static void`	`main(String[] args)` Parses command line arguments when this class is used from the command line.
`String`	`migrateFile(File signedFile, File outputFile)` Extract the file.
`String`	`migrateVerified(String currentVersion, File signedFile, File outputFile)` Verifies the signature of a signed update file, and if it's valid and the file's version is newer than the given current version, migrates the data out of `signedFile` and into `outputFile`.
`static boolean`	`needsUpdate(String currentVersion, String newVersion)` Checks if the given version is newer than the given current version.
`String`	`newVersion()` Version in the .sud file, valid only after calling migrateVerified().
`Signature`	`sign(String inputFile, String signedFile, SigningPrivateKey signingPrivateKey, String version)` Uses the given `SigningPrivateKey` to sign the given input file along with its version string using DSA.
`Signature`	`sign(String inputFile, String signedFile, String privateKeyFile, String version)` Uses the given private key to sign the given input file along with its version string using DSA.
`boolean`	`verify(File signedFile)` Verifies the DSA signature of a signed update file.
`boolean`	`verify(File signedFile, SigningPublicKey signingPublicKey)` Verifies the DSA signature of a signed update file.
`boolean`	`verify(String signedFile, String publicKeyFile)` Verifies the DSA signature of a signed update file.
`String`	`verifyAndGetSigner(File signedFile)` Verifies the DSA signature of a signed update file.

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

- Field Detail
  - HEADER_BYTES
```
public static final int HEADER_BYTES
```
    HEADER_BYTES.
- Constructor Detail
  - TrustedUpdate
```
public TrustedUpdate()
```
    Constructs a new TrustedUpdate with the default global context.
  - TrustedUpdate
```
public TrustedUpdate(I2PAppContext context)
```
    Constructs a new TrustedUpdate with the given I2PAppContext.
    Parameters:
    context - An instance of I2PAppContext.
- Method Detail
  - addKey
```
public final boolean addKey(String key,
                            String name)
```
    Duplicate keys or names rejected, except that duplicate empty names are allowed
    Parameters:
    key - 172 character base64 string
    name - non-null but "" ok
    Returns:
    true if successful
  - getKeys
```
public Map<SigningPublicKey,String> getKeys()
```
    Keys.
    Returns:
    the keys
  - getTrustedKeysString
```
public String getTrustedKeysString()
```
    Fetches the trusted keys for the current instance. We could sort it but don't bother.
    Returns:
    A String containing the trusted keys, delimited by CR LF line breaks.
  - getVersionString
```
public static String getVersionString(File signedFile)
```
    Reads the version string from a signed update file.
    Parameters:
    signedFile - A signed update file.
    Returns:
    The version string read, or an empty string if no version string is present.
  - getVersionString
```
public static String getVersionString(InputStream inputStream)
```
    Reads the version string from an input stream
    Parameters:
    inputStream - containing at least 56 bytes
    Returns:
    The version string read, or an empty string if no version string is present.
  - haveKey
```
public boolean haveKey(String key)
```
    Do we know about the following key?
    Parameters:
    key - the key
    Returns:
    true if the key is trusted
  - isUpdatedVersion
```
public boolean isUpdatedVersion(String currentVersion,
                                File signedFile)
```
    Verifies that the version of the given signed update file is newer than currentVersion.
    Parameters:
    currentVersion - The current version to check against.
    signedFile - The signed update file.
    Returns:
    true if the signed update file's version is newer than the current version, otherwise false.
  - main
```
public static void main(String[] args)
```
    Parses command line arguments when this class is used from the command line. Exits 1 on failure so this can be used in scripts.
    Parameters:
    args - Command line parameters.
  - migrateFile
```
public String migrateFile(File signedFile,
                          File outputFile)
```
    Extract the file. Skips and ignores the signature and version. No verification.
    Parameters:
    signedFile - A signed update file.
    outputFile - The file to write the verified data to.
    Returns:
    null if the data was moved, and an error String otherwise.
  - migrateVerified
```
public String migrateVerified(String currentVersion,
                              File signedFile,
                              File outputFile)
```
    Verifies the signature of a signed update file, and if it's valid and the file's version is newer than the given current version, migrates the data out of signedFile and into outputFile. As of 0.8.8, the embedded file must be a zip file with a standard zip header and a UTF-8 zip file comment matching the version in the sud header. This prevents spoofing the version, since the sud signature does NOT cover the version in the header. (We do this for sud/su2 files but not plugin xpi2p files - don't use this method for plugin files)
    Parameters:
    currentVersion - The current version to check against.
    signedFile - A signed update file.
    outputFile - The file to write the verified data to.
    Returns:
    null if the signature and version were valid and the data was moved, and an error String otherwise.
  - needsUpdate
```
public static final boolean needsUpdate(String currentVersion,
                                        String newVersion)
```
    Checks if the given version is newer than the given current version.
    Parameters:
    currentVersion - The current version.
    newVersion - The version to test.
    Returns:
    true if the given version is newer than the current version, otherwise false.
  - newVersion
```
public String newVersion()
```
    Version in the .sud file, valid only after calling migrateVerified().
    Returns:
    the new version string
  - sign
```
public Signature sign(String inputFile,
                      String signedFile,
                      SigningPrivateKey signingPrivateKey,
                      String version)
```
    Uses the given SigningPrivateKey to sign the given input file along with its version string using DSA. The output will be a signed update file where the first 40 bytes are the resulting DSA signature, the next 16 bytes are the input file's version string encoded in UTF-8 (padded with trailing 0h characters if necessary), and the remaining bytes are the raw bytes of the input file.
    Parameters:
    inputFile - The file to be signed.
    signedFile - The signed update file to write.
    signingPrivateKey - An instance of SigningPrivateKey to sign inputFile with.
    version - The version string of the input file. If this is longer than 16 characters it will be truncated.
    Returns:
    An instance of Signature, or null if there was an error.
  - sign
```
public Signature sign(String inputFile,
                      String signedFile,
                      String privateKeyFile,
                      String version)
```
    Uses the given private key to sign the given input file along with its version string using DSA. The output will be a signed update file where the first 40 bytes are the resulting DSA signature, the next 16 bytes are the input file's version string encoded in UTF-8 (padded with trailing 0h characters if necessary), and the remaining bytes are the raw bytes of the input file.
    Parameters:
    inputFile - The file to be signed.
    signedFile - The signed update file to write.
    privateKeyFile - The name of the file containing the private key to sign inputFile with.
    version - The version string of the input file. If this is longer than 16 characters it will be truncated.
    Returns:
    An instance of Signature, or null if there was an error.
  - verify
```
public boolean verify(File signedFile)
```
    Verifies the DSA signature of a signed update file.
    Parameters:
    signedFile - The signed update file to check.
    Returns:
    true if the file has a valid signature, otherwise false.
  - verify
```
public boolean verify(File signedFile,
                      SigningPublicKey signingPublicKey)
```
    Verifies the DSA signature of a signed update file.
    Parameters:
    signedFile - The signed update file to check.
    signingPublicKey - An instance of SigningPublicKey to use for verification.
    Returns:
    true if the file has a valid signature, otherwise false.
  - verify
```
public boolean verify(String signedFile,
                      String publicKeyFile)
```
    Verifies the DSA signature of a signed update file.
    Parameters:
    signedFile - The signed update file to check.
    publicKeyFile - A file containing the public key to use for verification.
    Returns:
    true if the file has a valid signature, otherwise false.
  - verifyAndGetSigner
```
public String verifyAndGetSigner(File signedFile)
```
    Verifies the DSA signature of a signed update file.
    Parameters:
    signedFile - The signed update file to check.
    Returns:
    signer (could be empty string) or null if invalid

Class TrustedUpdate

Field Summary

Constructor Summary

Method Summary

Methods inherited from class java.lang.Object

Field Detail

HEADER_BYTES

Constructor Detail

TrustedUpdate

TrustedUpdate

Method Detail

addKey

getKeys

getTrustedKeysString

getVersionString

getVersionString

haveKey

isUpdatedVersion

main

migrateFile

migrateVerified

needsUpdate

newVersion

sign

sign

verify

verify

verify

verifyAndGetSigner