# Package be.fgov.ehealth.etee.crypto.decrypt

Classes for validation and unsealing of sealed message.

See: Description

- Interface Summary
  Interface | Description
  --- | ---
  DataSealChecker | Verify if outer signature is according to specified policies (ocsp, signing, encryption).
  DataSealCheckerBuilder.BuildStep | Build the `DataSealChecker`
  DataSealCheckerBuilder.OCSPPolicyStep | First step: Choose an OCSP-policy.
  DataSealCheckerBuilder.SigningPolicyStep | Second step: Choose the signing policies that you want to accept.
  DataUnsealer | A DataUnsealer is a thread safe object that can unseal data protected according to the eHealth end-to-end encryption specifications.
  DataUnsealerBuilder.BuildStep | Build the `DataUnsealer`
  DataUnsealerBuilder.OCSPPolicyStep | First step: Choose an OCSP-policy.
  DataUnsealerBuilder.PublicKeyPolicyStep | Third step: Choose a public key `EncryptionPolicy`.
  DataUnsealerBuilder.SecretKeyPolicyStep | Fourth step: Choose a secret key `EncryptionPolicy`.
  DataUnsealerBuilder.SigningPolicyStep | Second step: Choose the signing policies that you want to accept.

- Class Summary
  Class | Description
  --- | ---
  DataSealCheckerBuilder | This builder will create and configure an instance of `DataSealChecker`.
  DataUnsealerBuilder | This builder will create and configure an instance of `DataUnsealer`.
  UnsealedData | Data produced when verifying/unsealing data.

## Package be.fgov.ehealth.etee.crypto.decrypt Description

Classes for validation and unsealing of sealed message.

Use the Builders as starting point to configure the services.

Supported Policies and Options can be passed through the builders.
See `be.fgov.ehealth.etee.crypto.policies`

Supported unsigned attributes in CMS messages

- id-aa-ets-revocationValues: OCSPResponses and CRLs on the certificates contained in the sealed message.
- id-aa-signatureTimeStampToken: Signature Timestamp to prolong the validity of the SigningTime of the sealed message.

Copyright © 2025 eHealth. All rights reserved.