importproof

package

v0.9.1 Latest Latest Go to latest Published: Jul 20, 2026 License: MIT Imports: 7 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/forgekeep/nebula-mesh

Links

Open Source Insights

Documentation ¶

Overview ¶

Package importproof implements the one-time X25519 proof used while adopting an existing Nebula host. It proves possession of host.key without uploading the private key and binds the proof to the exact registration payload.

Index ¶

func Compute(hostPrivateKey, serverPublicKey, nonce []byte, binding Binding) ([]byte, error)
func ProofHash(proof []byte) string
func VerifyHash(expectedHash string, proof []byte) bool
type Binding
type Challenge
- func Generate(random io.Reader, hostPublicKey []byte, binding Binding) (Challenge, string, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func Compute ¶

func Compute(hostPrivateKey, serverPublicKey, nonce []byte, binding Binding) ([]byte, error)

func ProofHash ¶

func ProofHash(proof []byte) string

func VerifyHash ¶

func VerifyHash(expectedHash string, proof []byte) bool

Types ¶

type Binding ¶

type Binding struct {
	SessionID                string
	CertificateFingerprint   string
	AgentSigningPublicKeyPEM string
	PayloadHash              string
}

type Challenge ¶

type Challenge struct {
	ServerPublicKey []byte
	Nonce           []byte
}

func Generate ¶

func Generate(random io.Reader, hostPublicKey []byte, binding Binding) (Challenge, string, error)

Source Files ¶

View all Source files

proof.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL