KeysAndCert (Javadocs [I2P+ 2.13.0+]

java.lang.Object
- net.i2p.data.DataStructureImpl
- - net.i2p.data.KeysAndCert

All Implemented Interfaces:
Serializable, DataStructure
Direct Known Subclasses:
Destination, RouterIdentity
```
public class KeysAndCert
extends DataStructureImpl
```
Container for cryptographic keys and certificate as used by I2P identities.
KeysAndCert provides the fundamental cryptographic identity components:
- Public Key: Encryption key for encrypted communication
- Signing Public Key: Key for verifying signatures and identity
- Certificate: Optional metadata about the keys and identity
- Cached Hash: Pre-computed SHA-256 hash for efficient identification
Structure:
- Public key (variable length, typically 256 bytes for ElGamal)
- Signing public key (variable length, typically 128 bytes for DSA, 32 bytes for Ed25519)
- Certificate (type + length + payload)
- Optional padding for consistent serialization
Usage:
- Base Class: Extended by Destination and RouterIdentity
- Identity: Forms the core of I2P cryptographic identities
- Verification: Provides keys for signature verification
- Encryption: Contains encryption key for secure communication
Key Types:
- Encryption: ElGamal 2048-bit (legacy) or ECIES X25519 (modern)
- Signing: DSA-SHA1 (legacy), ECDSA-P256, or EdDSA-Ed25519 (modern)
- Certificates: NULL, HIDDEN, SIGNED, MULTIPLE, or KEY types
Immutability:
- As of 0.9.9, instances are immutable after keys and certificate are set
- Attempts to modify will throw IllegalStateException
- Ensures thread safety and prevents accidental corruption
History:
- Implemented in 0.8.2 and retrofitted over existing Destination and RouterIdentity classes
- No functional difference between Destination and RouterIdentity at this level
- Provides unified interface for identity management across I2P
See Also:
Serialized Form

Field Summary

Fields
Modifier and Type	Field and Description
`protected Certificate`	`_certificate` Certificate specifying key types and metadata.
`protected int`	`_paddingBlocks` If compressed, the padding size / 32, else 0
`protected PublicKey`	`_publicKey` Public encryption key.
`protected SigningPublicKey`	`_signingKey` Public signing key.

Constructor Summary
Constructors
Constructor and Description
KeysAndCert()

Constructors
Constructor and Description
`KeysAndCert()`

Method Summary

All Methods Static Methods Instance Methods Concrete Methods
Modifier and Type	Method and Description
`Hash`	`calculateHash()` Throws IllegalStateException if keys and cert are not initialized, as of 0.9.12.
`protected static byte[]`	`combinePadding(byte[] pad1, byte[] pad2)` Combines two padding arrays.
`boolean`	`equals(Object object)` Compares this KeysAndCert with another object for equality.
`Certificate`	`getCertificate()` Certificate for this identity.
`EncType`	`getEncType()` Encryption type from the certificate.
`Hash`	`getHash()` Throws IllegalStateException if keys and cert are not initialized, as of 0.9.12.
`byte[]`	`getPadding()` Padding bytes for key alignment.
`PublicKey`	`getPublicKey()` Valid for RouterIdentities.
`SigningPublicKey`	`getSigningPublicKey()` Signing public key for this identity.
`SigType`	`getSigType()` Signature type from the certificate.
`int`	`hashCode()` the signing key has enough randomness in it to use it by itself for speed
`boolean`	`isCompressible()` Is there compressible padding?
`void`	`readBytes(InputStream in)` Reads the keys and certificate from an input stream.
`void`	`setCertificate(Certificate cert)` Certificate to set.
`void`	`setPadding(byte[] padding)` Padding bytes to set.
`void`	`setPublicKey(PublicKey key)` Public key to set.
`void`	`setSigningPublicKey(SigningPublicKey key)` Signing public key to set.
`String`	`toString()` Returns a string representation of this KeysAndCert.
`void`	`writeBytes(OutputStream out)` Writes the keys and certificate to an output stream.
`protected int`	`writePaddingBytes(byte[] target, int off)` For Destination.writeBytes()

Methods inherited from class net.i2p.data.DataStructureImpl
fromBase64, fromByteArray, read, toBase64, toByteArray

Methods inherited from class java.lang.Object
clone, finalize, getClass, notify, notifyAll, wait, wait, wait

- Field Detail
  - _certificate
```
protected Certificate _certificate
```
    Certificate specifying key types and metadata.
  - _paddingBlocks
```
protected int _paddingBlocks
```
    If compressed, the padding size / 32, else 0
  - _publicKey
```
protected PublicKey _publicKey
```
    Public encryption key.
  - _signingKey
```
protected SigningPublicKey _signingKey
```
    Public signing key.
- Constructor Detail
  - KeysAndCert
```
public KeysAndCert()
```
- Method Detail
  - calculateHash
```
public Hash calculateHash()
```
    Throws IllegalStateException if keys and cert are not initialized, as of 0.9.12. Prior to that, returned null.
    Specified by:
    calculateHash in interface DataStructure
    Overrides:
    calculateHash in class DataStructureImpl
    Returns:
    SHA256 hash, or null if there were problems (data format or io errors)
    Throws:
    IllegalStateException - if keys and cert are not initialized
  - combinePadding
```
protected static byte[] combinePadding(byte[] pad1,
                                       byte[] pad2)
```
    Combines two padding arrays.
    Returns:
    null if both are null
  - equals
```
public boolean equals(Object object)
```
    Compares this KeysAndCert with another object for equality.
    Overrides:
    equals in class Object
  - getCertificate
```
public Certificate getCertificate()
```
    Certificate for this identity.
    Returns:
    the certificate
  - getEncType
```
public EncType getEncType()
```
    Encryption type from the certificate.
    Returns:
    null if not set or unknown
  - getHash
```
public Hash getHash()
```
    Throws IllegalStateException if keys and cert are not initialized, as of 0.9.12. Prior to that, returned null.
    Returns:
    the hash
    Throws:
    IllegalStateException - if keys and cert are not initialized
  - getPadding
```
public byte[] getPadding()
```
    Padding bytes for key alignment.
    Returns:
    the padding
  - getPublicKey
```
public PublicKey getPublicKey()
```
    Valid for RouterIdentities. May contain random padding for Destinations.
    Returns:
    the public key
  - getSigningPublicKey
```
public SigningPublicKey getSigningPublicKey()
```
    Signing public key for this identity.
    Returns:
    the signing public key
  - getSigType
```
public SigType getSigType()
```
    Signature type from the certificate.
    Returns:
    null if not set or unknown
  - hashCode
```
public int hashCode()
```
    the signing key has enough randomness in it to use it by itself for speed
    Overrides:
    hashCode in class Object
  - isCompressible
```
public boolean isCompressible()
```
    Is there compressible padding?
    Returns:
    whether compressible
  - readBytes
```
public void readBytes(InputStream in)
               throws DataFormatException,
                      IOException
```
    Reads the keys and certificate from an input stream.
    Parameters:
    in - stream to read from
    Throws:
    IllegalStateException - if data already set
    DataFormatException - if the data is improperly formatted
    IOException - if there was a problem reading the stream
  - setCertificate
```
public void setCertificate(Certificate cert)
```
    Certificate to set.
    Throws:
    IllegalStateException - if was already set
  - setPadding
```
public void setPadding(byte[] padding)
```
    Padding bytes to set.
    Throws:
    IllegalStateException - if was already set
  - setPublicKey
```
public void setPublicKey(PublicKey key)
```
    Public key to set.
    Throws:
    IllegalStateException - if was already set
  - setSigningPublicKey
```
public void setSigningPublicKey(SigningPublicKey key)
```
    Signing public key to set.
    Throws:
    IllegalStateException - if was already set
  - toString
```
public String toString()
```
    Returns a string representation of this KeysAndCert.
    Overrides:
    toString in class Object
  - writeBytes
```
public void writeBytes(OutputStream out)
                throws DataFormatException,
                       IOException
```
    Writes the keys and certificate to an output stream.
    Parameters:
    out - stream to write to
    Throws:
    DataFormatException - if the data was incomplete or not yet ready to be written
    IOException - if there was a problem writing to the stream
  - writePaddingBytes
```
protected int writePaddingBytes(byte[] target,
                                int off)
```
    For Destination.writeBytes()
    Returns:
    the new offset

Class KeysAndCert

Field Summary

Constructor Summary

Method Summary

Methods inherited from class net.i2p.data.DataStructureImpl

Methods inherited from class java.lang.Object

Field Detail

_certificate

_paddingBlocks

_publicKey

_signingKey

Constructor Detail

KeysAndCert

Method Detail

calculateHash

combinePadding

equals

getCertificate

getEncType

getHash

getPadding

getPublicKey

getSigningPublicKey

getSigType

hashCode

isCompressible

readBytes

setCertificate

setPadding

setPublicKey

setSigningPublicKey

toString

writeBytes

writePaddingBytes