Interface DummyVerificationService

All Known Implementing Classes:
DefaultDummyVerificationService
public interface DummyVerificationService
Performs a comparable KDF run when the verification pipeline cannot proceed against the supplied envelope (unknown user, malformed envelope, missing provider, unknown pepper key).

The dummy path serves three goals simultaneously:

  • flatten the observable timing between "user exists" and "user does not exist" (CWE-208);
  • flatten the observable behaviour between healthy and corrupted envelopes (CWE-203);
  • consume the same KdfExecutionLimiter permit class that a real verification would have consumed, so a flood of unknown users still pressures the limiter equally (CWE-307).

  • Method Summary

    Modifier and Type
    Method
    Description
    void
    runDummyKdf(char[] password, DummyVerificationContext context)
    Executes a single dummy KDF against a stored dummy envelope built under the active policy.

  • Method Details

    • runDummyKdf

      void runDummyKdf(char[] password, DummyVerificationContext context)
      Executes a single dummy KDF against a stored dummy envelope built under the active policy. Returns nothing meaningful; the caller already knows the verification failed.

      Implementations must not throw on missing providers — they must fall back to the policy's default dummy provider so the dummy path remains uniform across failure types.