Documentation
¶
Overview ¶
Package testkeys provides deterministic Ed25519 keys for tests, fixtures, and test vectors.
TEST-ONLY. Every key here is derived from a fixed, public seed and offers no security whatsoever. These keys must never sign anything outside testdata, fixtures, and unit tests (export-format-v1.md §3: "deterministic test keys derived from fixed 32-byte seeds; never used outside tests").
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Key ¶
type Key struct {
Name string
Seed [32]byte // the fixed 32-byte seed the key derives from
Private ed25519.PrivateKey
Public ed25519.PublicKey
JWK dsse.JWK
JKT string // RFC 7638 thumbprint of JWK
}
Key is a deterministic Ed25519 test key.
func ActorHop1 ¶
func ActorHop1() Key
ActorHop1 is the depth-1 delegated agent key (the orchestrator).
func ActorHop2 ¶
func ActorHop2() Key
ActorHop2 is the depth-2 sub-agent key (the leaf actor of the demo runs). In run_9f2a this hop is signature-verified; in run_c71e the same key is only caller-asserted, which is the whole point of the `behalf why` demo.
func ActorRoot ¶
func ActorRoot() Key
ActorRoot, ActorHop1 and ActorHop2 are the delegation-chain hop keys embedded (as public JWKs only) in fixture receipts' authority.chain cnf claims. ActorRoot is the human's device key — the depth-0 root the OIDC nonce binds (D5); the display name that goes with it lives in the CLI's local alias map, never in a receipt (Q16, Q40).
func Emitter ¶
func Emitter() Key
Emitter is the demo mcp-proxy emitter key used by the fixture runs. It signs every fixture leaf and the fixture heads.
func HeadSigner ¶
func HeadSigner() Key
HeadSigner is a second key used by the tiny vector export so the corpus exercises multi-key headers.
Source Files