crypto

package

v1.3.13 Latest Latest Go to latest Published: Feb 16, 2021 License: Apache-2.0 Imports: 13 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/google/trillian

Links

Open Source Insights

Documentation ¶

Overview ¶

Package crypto provides signing functionality for Trillian.

Index ¶

func SignatureAlgorithm(k gocrypto.PublicKey) sigpb.DigitallySigned_SignatureAlgorithm
func Verify(pub crypto.PublicKey, hasher crypto.Hash, data, sig []byte) error
func VerifySignedLogRoot(pub crypto.PublicKey, hash crypto.Hash, r *trillian.SignedLogRoot) (*types.LogRootV1, error)
type Signer
- func NewSHA256Signer(signer crypto.Signer) *Signerdeprecated
- func NewSigner(keyID int64, signer crypto.Signer, hash crypto.Hash) *Signer

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func SignatureAlgorithm ¶

func SignatureAlgorithm(k gocrypto.PublicKey) sigpb.DigitallySigned_SignatureAlgorithm

SignatureAlgorithm returns the algorithm used for this public key. Only ECDSA and RSA keys are supported. Other key types will return sigpb.DigitallySigned_ANONYMOUS.

func Verify ¶

func Verify(pub crypto.PublicKey, hasher crypto.Hash, data, sig []byte) error

Verify cryptographically verifies the output of Signer.

func VerifySignedLogRoot ¶ added in v1.0.8

func VerifySignedLogRoot(pub crypto.PublicKey, hash crypto.Hash, r *trillian.SignedLogRoot) (*types.LogRootV1, error)

VerifySignedLogRoot verifies the SignedLogRoot and returns its contents.

Types ¶

type Signer ¶

type Signer struct {
	KeyHint []byte
	// If Hash is noHash (zero), the signer expects to be given the full message not a hashed digest.
	Hash   crypto.Hash
	Signer crypto.Signer
}

Signer is responsible for signing log-related data and producing the appropriate application specific signature objects.

func NewSHA256Signer deprecated

func NewSHA256Signer(signer crypto.Signer) *Signer

NewSHA256Signer creates a new SHA256 based Signer and a KeyID of 0.

Deprecated: NewSHA256Signer was only meant for use in tests. It can be replaced by NewSigner(0, key, crypto.SHA256).

func NewSigner ¶ added in v1.1.0

func NewSigner(keyID int64, signer crypto.Signer, hash crypto.Hash) *Signer

NewSigner returns a new signer. The signer will set the KeyHint field, when available, with KeyID.

func (*Signer) Public ¶

func (s *Signer) Public() crypto.PublicKey

Public returns the public key that can verify signatures produced by s.

func (*Signer) Sign ¶

func (s *Signer) Sign(data []byte) ([]byte, error)

Sign obtains a signature over the input data; this typically (but not always) involves first hashing the input data.

func (*Signer) SignLogRoot ¶ added in v1.0.5

func (s *Signer) SignLogRoot(r *types.LogRootV1) (*trillian.SignedLogRoot, error)

SignLogRoot returns a complete SignedLogRoot (including signature).

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
keys Package keys provides access to public and private keys for signing and verification of signatures.	Package keys provides access to public and private keys for signing and verification of signatures.
der
der/proto Package proto registers a DER keys.ProtoHandler using keys.RegisterHandler.	Package proto registers a DER keys.ProtoHandler using keys.RegisterHandler.
pem
pem/proto Package proto registers a PEM keys.ProtoHandler using keys.RegisterHandler.	Package proto registers a PEM keys.ProtoHandler using keys.RegisterHandler.
pkcs11 Package pkcs11 provides access to private keys using a PKCS#11 interface.	Package pkcs11 provides access to private keys using a PKCS#11 interface.
pkcs11/proto Package proto registers a PKCS#11 keys.ProtoHandler using keys.RegisterHandler.	Package proto registers a PKCS#11 keys.ProtoHandler using keys.RegisterHandler.
testonly Package testonly contains code and data that should only be used by tests.	Package testonly contains code and data that should only be used by tests.
keyspb
sigpb

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL