Variable cryptoJson

Type Declaration

• • (
        base: any,
    ): {
        drift: {
            checked: boolean;
            envelopes: any[];
            stale: string[];
            undescribed: any;
        };
        encryption: {
            jwe: {
                contentEncryption: {
                    authenticated: boolean;
                    bits: any;
                    cekBytes: any;
                    enc: string;
                    mode: any;
                    note: string;
                }[];
                keyManagementIn: any;
                keyManagementOut: any;
            };
            kerberos: { decodeOnly: any[]; performed: any[]; preference: number[] };
            tls: { sockets: string[]; what: string };
            xml: {
                blockCiphers: {
                    authenticated: boolean;
                    ivBytes: any;
                    keyBits: number;
                    mode: any;
                    name: string;
                    uri: any;
                }[];
                configured: {
                    blockCipher: string;
                    encryptAssertion: boolean;
                    encryptLogoutNameId: boolean;
                    keyTransport: string;
                };
                keyTransports: { name: string; safe: boolean; scheme: any; uri: any }[];
            };
        };
        families: {
            algorithms: { values: any; what: any }[];
            decrypts: string;
            encrypts: string;
            envelopes: string[];
            hashes: string;
            name: string;
            signs: string;
            verifies: string;
            whatItDoesNot: string;
        }[];
        generatedAt: string;
        hashing: {
            fixed: { hash: string; what: string; where: string }[];
            jws: any[];
            scimDigest: { hash: string; token: string }[];
            weak: { hash: string; where: string; why: string }[];
            xmlDigestMethods: { label: any; uri: string }[];
        };
        issuer: any;
        keys: {
            bbs: { cryptosuite: string; curve: string; what: string };
            curveKeys: any;
            postQuantum: {
                algorithms: string[];
                generated: boolean;
                keys: any;
                what: string;
            };
            realm: any;
            regeneratedEveryStart: boolean;
            signerGroups: { keys: any; model: string };
            signing: {
                alg: string;
                bits: number;
                certificate: string;
                certificateFingerprint: string;
                kid: string;
                kty: string;
                what: string;
            };
            spiffe: {
                authorityFingerprint: string;
                authorityKeyType: string;
                authoritySource: any;
                enabled: boolean;
                jwtAuthorities: any;
                jwtKeyType: string;
                perRealm: boolean;
                ready: boolean;
                svidKeyType: string;
                trustAnchors: any;
                trustDomain: string;
                x509Authorities: number;
                x509KeyType: string;
            };
            tls: {
                certificates: { algorithm: any; certificateFingerprint: string }[];
                fingerprint256: any;
                names: any;
                notAfter: any;
                perRealm: boolean;
                subject: any;
                what: string;
            };
        };
        oneModule: string;
        postQuantum: {
            algorithms: {
                composite: {
                    alg: string;
                    domainSeparator: any;
                    mlDsa: any;
                    prehash: any;
                    traditional: any;
                }[];
                independence: string;
                keyType: string;
                mlDsa: string[];
                slhDsa: string[];
                what: string;
            };
            keyEstablishment: {
                drafts: { hpke: string; hybrid: string; mlKem: string };
                hybrid: string[];
                mechanisms: string[];
                postQuantum: string[];
                state: string;
                surfaces: { how: string; state: string; surface: string }[];
                what: string;
                whatWouldClose: string;
            };
            signatures: { how: string; state: string; surface: string }[];
            symmetric: { state: string; strongest: string; what: string };
        };
        realm: any;
        signatures: {
            canonicalization: {
                comments: any;
                exclusive: any;
                label: any;
                uri: string;
                usedHere: boolean;
            }[];
            cose: { coseAlg: number; jose: any }[];
            jws: {
                alg: string;
                asymmetric: boolean;
                composite: boolean;
                crv: any;
                dpop: boolean;
                family: any;
                hash: any;
                kty: any;
                postQuantum: boolean;
            }[];
            other: { name: string; what: string }[];
            xml: {
                family: any;
                hash: any;
                keyKind: any;
                label: any;
                signsWith: boolean;
                uri: string;
                verifiedHere: boolean;
            }[];
        };
        standards: {
            coverage: string;
            key: string;
            name: string;
            specs: string[];
            what: string;
        }[];
    }

  • Builds the whole report once, for the page and GET /admin-api/crypto (rule 7).

    Parameters

    • base: any

      the realm's issuer base URL

    Returns {
        drift: {
            checked: boolean;
            envelopes: any[];
            stale: string[];
            undescribed: any;
        };
        encryption: {
            jwe: {
                contentEncryption: {
                    authenticated: boolean;
                    bits: any;
                    cekBytes: any;
                    enc: string;
                    mode: any;
                    note: string;
                }[];
                keyManagementIn: any;
                keyManagementOut: any;
            };
            kerberos: { decodeOnly: any[]; performed: any[]; preference: number[] };
            tls: { sockets: string[]; what: string };
            xml: {
                blockCiphers: {
                    authenticated: boolean;
                    ivBytes: any;
                    keyBits: number;
                    mode: any;
                    name: string;
                    uri: any;
                }[];
                configured: {
                    blockCipher: string;
                    encryptAssertion: boolean;
                    encryptLogoutNameId: boolean;
                    keyTransport: string;
                };
                keyTransports: { name: string; safe: boolean; scheme: any; uri: any }[];
            };
        };
        families: {
            algorithms: { values: any; what: any }[];
            decrypts: string;
            encrypts: string;
            envelopes: string[];
            hashes: string;
            name: string;
            signs: string;
            verifies: string;
            whatItDoesNot: string;
        }[];
        generatedAt: string;
        hashing: {
            fixed: { hash: string; what: string; where: string }[];
            jws: any[];
            scimDigest: { hash: string; token: string }[];
            weak: { hash: string; where: string; why: string }[];
            xmlDigestMethods: { label: any; uri: string }[];
        };
        issuer: any;
        keys: {
            bbs: { cryptosuite: string; curve: string; what: string };
            curveKeys: any;
            postQuantum: {
                algorithms: string[];
                generated: boolean;
                keys: any;
                what: string;
            };
            realm: any;
            regeneratedEveryStart: boolean;
            signerGroups: { keys: any; model: string };
            signing: {
                alg: string;
                bits: number;
                certificate: string;
                certificateFingerprint: string;
                kid: string;
                kty: string;
                what: string;
            };
            spiffe: {
                authorityFingerprint: string;
                authorityKeyType: string;
                authoritySource: any;
                enabled: boolean;
                jwtAuthorities: any;
                jwtKeyType: string;
                perRealm: boolean;
                ready: boolean;
                svidKeyType: string;
                trustAnchors: any;
                trustDomain: string;
                x509Authorities: number;
                x509KeyType: string;
            };
            tls: {
                certificates: { algorithm: any; certificateFingerprint: string }[];
                fingerprint256: any;
                names: any;
                notAfter: any;
                perRealm: boolean;
                subject: any;
                what: string;
            };
        };
        oneModule: string;
        postQuantum: {
            algorithms: {
                composite: {
                    alg: string;
                    domainSeparator: any;
                    mlDsa: any;
                    prehash: any;
                    traditional: any;
                }[];
                independence: string;
                keyType: string;
                mlDsa: string[];
                slhDsa: string[];
                what: string;
            };
            keyEstablishment: {
                drafts: { hpke: string; hybrid: string; mlKem: string };
                hybrid: string[];
                mechanisms: string[];
                postQuantum: string[];
                state: string;
                surfaces: { how: string; state: string; surface: string }[];
                what: string;
                whatWouldClose: string;
            };
            signatures: { how: string; state: string; surface: string }[];
            symmetric: { state: string; strongest: string; what: string };
        };
        realm: any;
        signatures: {
            canonicalization: {
                comments: any;
                exclusive: any;
                label: any;
                uri: string;
                usedHere: boolean;
            }[];
            cose: { coseAlg: number; jose: any }[];
            jws: {
                alg: string;
                asymmetric: boolean;
                composite: boolean;
                crv: any;
                dpop: boolean;
                family: any;
                hash: any;
                kty: any;
                postQuantum: boolean;
            }[];
            other: { name: string; what: string }[];
            xml: {
                family: any;
                hash: any;
                keyKind: any;
                label: any;
                signsWith: boolean;
                uri: string;
                verifiedHere: boolean;
            }[];
        };
        standards: {
            coverage: string;
            key: string;
            name: string;
            specs: string[];
            what: string;
        }[];
    }

    the report