Airlock IAM 8.6.1 EspSignTicketEncoder class and Vineflower decompilation.

Origin: extracted from /opt/airlock-iam-8.6.1/lib/core-8.6.1.jar in a researcher-owned Airlock Cloud trial using an intentionally configured Scriptable Step. No Baloise target filesystem or code was accessed.

The class contains the legacy product-wide fixed RSA-512 private exponent used by EspSignTicketEncoder. The matching public modulus is embedded in EspSignTicketDecoder and is documented by the product plugin behavior. EspSignTicketEncoder.java preserves the exact ticket construction and signing implementation.

EspSignTicketDecoder.class/.java were extracted from the same core JAR. They preserve signature verification, expiry, userids/roles parsing, and ticket field conversion semantics.