言語

CodeTransparencyTrustStore Class

Definition

A store of receipt-verification keys, keyed by issuer domain, for offline verification.

The store can be populated from either the JSON JWK Set (/jwks) or the CBOR COSE_Key_Set (/.well-known/scitt-keys) representation because both are normalized to CodeTransparencyVerificationKeySet before being added.

ToBinaryData() serializes to an SDK-owned, versioned JSON format that persists only public key parameters. Private key material is never stored.

public sealed class CodeTransparencyTrustStore
type CodeTransparencyTrustStore = class
Public NotInheritable Class CodeTransparencyTrustStore
Inheritance
CodeTransparencyTrustStore

Constructors

Name Description
CodeTransparencyTrustStore()

Initializes a new, empty CodeTransparencyTrustStore.

Properties

Name Description
KeysByIssuer

Gets the verification key sets, keyed by issuer domain.

Methods

Name Description
FromBinaryData(BinaryData)

Creates a CodeTransparencyTrustStore from data previously produced by ToBinaryData().

RemoveKeys(String)

Removes the keys for the specified issuer domain.

SetKeys(String, CodeTransparencyVerificationKeySet)

Adds or replaces the verification keys for the specified issuer domain.

ToBinaryData()

Serializes the trust store to an SDK-owned, versioned JSON format containing only public key parameters.

TryGetKeys(String, CodeTransparencyVerificationKeySet)

Gets the verification keys for the specified issuer domain.

Applies to