identity

package

v1.8.0 Latest Latest Go to latest Published: Apr 26, 2026 License: Apache-2.0 Imports: 15 Imported by: 0

Details

This section is empty.

This section is empty.

func MarshalCertificate(cert *x509.Certificate) []byte

MarshalCertificate exports the certificate in PEM format.

func MarshalPrivateKey(priv crypto.PrivateKey, passphrase string) ([]byte, error)

MarshalPrivateKey exports the private key in PEM format, optionally encrypted.

func UnmarshalCertificate(data []byte) (*x509.Certificate, error)

UnmarshalCertificate imports a certificate from PEM format.

func UnmarshalPrivateKey(data []byte, passphrase string) (crypto.PrivateKey, error)

UnmarshalPrivateKey imports a private key from PEM format.

func Verify(cert *x509.Certificate, data []byte, signature []byte) error

Verify checks a signature against the given data and certificate.

func VerifyMessage(cert *x509.Certificate, msg proto.Message, signature []byte) error

VerifyMessage verifies a protobuf message's signature. It clears the 'auth' field before verifying.

type Identity struct {
	Certificate *x509.Certificate
	PrivateKey  crypto.PrivateKey
}

Identity represents the cryptographic identity of an agent.

func Generate(shortName string) (*Identity, error)

Generate creates a new self-signed X.509 certificate and ECDSA private key.

func (i *Identity) AgentID() string

AgentID derives a unique agent ID from the certificate's public key.

func (i *Identity) Authenticate(msg proto.Message)

Authenticate signs the given message and sets its 'auth' field if it exists.

func (i *Identity) Sign(data []byte) ([]byte, error)

Sign creates a signature for the given data using the private key.

func (i *Identity) SignMessage(msg proto.Message) (signature []byte, certificate []byte, err error)

SignMessage signs a protobuf message. It clears the 'auth' field before signing.