PqMultiRecipient class abstract final

Builds and opens the recipients[] key-wrap entries.

Properties

hashCode → int

The hash code for this object.

no setter, inherited

runtimeType → Type

A representation of the runtime type of the object.

no setter, inherited

Methods

noSuchMethod(Invocation invocation) → dynamic

Invoked when a nonexistent method or property is accessed.

inherited

toString() → String

A string representation of this object.

inherited

Operators

operator ==(Object other) → bool

The equality operator.

inherited

Static Methods

buildEntries({required PqForgeProfile profile, required Uint8List demKey, required List<PqRecipientSpec> recipients}) → Future<List<Map<String, Object?>>>

Encryptor side: one entry per additional recipient, each wrapping demKey under a KEK only that recipient can derive.

hasEntries(Map<String, Object?> metadata) → bool

True when metadata carries additional-recipient entries.

parseEntries(Map<String, Object?> metadata) → List<({Uint8List? ephemeralPublicKey, Uint8List kemCiphertext, String? keyId, Uint8List nonce, Uint8List wrappedKey})>

Parses and validates the recipients[] entries in metadata. Returns an empty list when the key is absent; throws PqForgeException when an entry is structurally malformed (untrusted container input).

unwrapDemKey({required PqForgeProfile profile, required Map<String, Object?> metadata, required Uint8List recipientSecretKey, Uint8List? recipientKexSecretKey, String? recipientKeyId}) → Future<Uint8List?>

Decryptor side: tries to unwrap the DEM key from the recipients[] entries in metadata with this recipient's keys.

Constants

metadataKey → const String

Metadata key carrying the additional-recipient entries.

primaryKeyIdKey → const String

Metadata key naming the primary recipient's key id.