dsse

type Envelope ¶

type Envelope struct {
	Payload     string      `json:"payload"`
	PayloadType string      `json:"payloadType"`
	Signatures  []Signature `json:"signatures"`
}

func (e *Envelope) Verify(publicKeys ...Verifier) error

type Erroneous ¶

type Erroneous struct {
	Error error
}

func (e Erroneous) Verify([]byte, []byte) error

type GetVerifier ¶

type GetVerifier func(keyId string) Verifier

type Signature ¶

type Signature struct {
	KeyId string `json:"keyid"`
	Sig   string `json:"sig"`
}

type Signer ¶

type Signer interface {
	Sign(data []byte) ([]byte, error)
	KeyID() (string, error)
}

Signer defines the interface for an abstract signing algorithm. The Signer interface is used to inject signature algorithm implementations into the EnvelopeSigner. This decoupling allows for any signing algorithm and key management system can be used. The full message is provided as the parameter. If the signature algorithm depends on hashing of the message prior to signature calculation, the implementor of this interface must perform such hashing. The function must return raw bytes representing the calculated signature using the current algorithm, and the key used (if applicable).

type SignerVerifier ¶

type SignerVerifier interface {
	Signer
	Verifier
}

SignerVerifier provides both the signing and verification interface.

type Verifier ¶

type Verifier interface {
	Verify(pae, signature []byte) error
	KeyID() (string, error)
	Public() crypto.PublicKey
}

Verifier verifies a complete message against a signature and key. If the message was hashed prior to signature generation, the verifier must perform the same steps. If KeyID returns successfully, only signature matching the key ID will be verified.