Interface PepperService

All Known Implementing Classes:
InMemoryPepperService, NoOpPepperService
public interface PepperService
Resolves the pepper material associated with a stored pepper key id.

Phase 1a only ships NoOpPepperService; the real HMAC-backed pepper service arrives with Prompt 017 (Real Pepper Service and post-KDF HMAC). Until then this interface exists so the verification pipeline can stay forward compatible without ever pretending to offer pepper protection.

  • Method Summary

    Modifier and Type
    Method
    Description
    Optional<String>
    activeKeyId()
    Currently active pepper key id used by the policy when producing new hashes.
    Optional<byte[]>
    resolve(String keyId)
    Resolves the pepper material for a previously stored hash.

  • Method Details

    • activeKeyId

      Optional<String> activeKeyId()
      Currently active pepper key id used by the policy when producing new hashes. Optional.empty() signals that no pepper is applied to new hashes.

    • resolve

      Optional<byte[]> resolve(String keyId)
      Resolves the pepper material for a previously stored hash.
      Returns:
      the pepper bytes, or Optional.empty() when no pepper service knows about this key id