algorithms

type Algorithm interface {
	// Name returns the algorithm name (e.g., "ES256", "RS256")
	Name() string

	// Hash returns the hash function used by the algorithm
	Hash() crypto.Hash

	// VaultKeyType returns the required Vault Transit key type
	// Examples: "ecdsa-p256", "rsa-2048"
	VaultKeyType() string

	// SigningParams returns algorithm-specific Vault signing parameters
	// Including base params (prehashed, hash_algorithm) and algorithm specific ones
	// All algorithms use marshaling_algorithm=jws
	SigningParams() map[string]interface{}

	// Verify verifies the signature against the message using given public key
	// Key must be *ecdsa.PublicKey or *rsa.PublicKey matching the algorithm
	Verify(message, signature []byte, key interface{}) error

	// KeyCheck validates the key type for verification
	// Returns ErrInvalidKeyType if key type doesn't match algorithm
	KeyCheck(key interface{}) error
}

type BaseAlgorithm struct {
	// contains filtered or unexported fields
}

type ECDSAAlgorithm struct {
	BaseAlgorithm
	// contains filtered or unexported fields
}

type ECDSASignature struct {
	R, S *big.Int
}

type KeyType int

type RSAAlgorithm struct {
	BaseAlgorithm
	// contains filtered or unexported fields
}