# Package be.fgov.ehealth.etee.crypto.encrypt

Classes for sealing of message and validation of ETKs.

See: Description

- Interface Summary
  Interface | Description
  --- | ---
  DataSealer | A DataSealer is a thread safe object that can protect data that must be exchanged between two parties.
  DataSealerBuilder.BuildStep | Build the `DataSealer`
  DataSealerBuilder.OCSPPolicyStep | First step: Choose an OCSP-policy.
  DataSealerBuilder.PublicKeyEncryptionPolicyStep | Third step (optional): Choose a public key `EncryptionPolicy`.
  DataSealerBuilder.SecretKeyEncryptionPolicyStep | Fourth step (optional): Choose a secret key `EncryptionPolicy`.
  DataSealerBuilder.SigningPolicyStep | Second step: Choose a signing-policy.
  EncryptionTokenChecker | Checks validity of an EncryptionToken.
  EncryptionTokenCheckerBuilder.BuildStep | Build the `EncryptionTokenChecker`
  EncryptionTokenCheckerBuilder.OCSPPolicyStep | First step: Choose an OCSP-policy.
  EncryptionTokenCheckerBuilder.TrustStoreStep | Second step: Choose a truststore with trust anchors for certpath validation of the certificates found in the EncryptionToken.

- Class Summary
  Class | Description
  --- | ---
  DataSealerBuilder | This builder will create and configure an instance of `DataSealer`.
  EncryptionToken | This class is the eHealth EncryptionToken (aka ETK).
  EncryptionTokenCheckerBuilder | Builder for EncryptionTokenChecker with steps.
  EncryptionTokenFactory | Factory to create EncryptionTokens.

- Exception Summary
  Exception | Description
  --- | ---
  DataSealerException | A custom exception, thrown when something went wrong while sealing data with the `DataSealer`

## Package be.fgov.ehealth.etee.crypto.encrypt Description

Classes for sealing of message and validation of ETKs.

Use the Builders as starting point to configure the services.

Supported Policies and Options can be passed through the builders.
See `be.fgov.ehealth.etee.crypto.policies`

Following unsigned attributes can be added to the CMS messages

- id-aa-ets-revocationValues: OCSPResponses and CRLs on the certificates contained in the sealed message.

Copyright © 2025 eHealth. All rights reserved.