security

func CheckHmacSig ¶

func CheckHmacSig(sigCovered enc.Wire, sigValue []byte, key []byte) bool

func EcdsaValidate ¶

func EcdsaValidate(sigCovered enc.Wire, sig ndn.Signature, pubKey *ecdsa.PublicKey) bool

EcdsaValidate verifies the signature with a known ECC public key. ndn-cxx's PIB uses secp256r1 key stored in ASN.1 DER format. Use x509.ParsePKIXPublicKey to parse.

func EddsaValidate ¶

func EddsaValidate(sigCovered enc.Wire, sig ndn.Signature, pubKey ed25519.PublicKey) bool

EddsaValidate verifies the signature with a known ed25519 public key. ndn-cxx's PIB does not support this, but a certificate is supposed to use ASN.1 DER format. Use x509.ParsePKIXPublicKey to parse. Note: ed25519.PublicKey is defined to be a pointer type without '*'.

func HmacValidate ¶

func HmacValidate(sigCovered enc.Wire, sig ndn.Signature, key []byte) bool

HmacValidate verifies the signature with a known HMAC shared key.

func NewEccSigner ¶

func NewEccSigner(
	forCert bool, forInt bool, expireTime time.Duration, key *ecdsa.PrivateKey,
	keyLocatorName enc.Name,
) ndn.Signer

NewEccSigner creates a signer using ECDSA key

func NewEmptySigner ¶

func NewEmptySigner() ndn.Signer

NewEmptySigner creates an empty signer for test.

func NewHmacIntSigner ¶

func NewHmacIntSigner(key []byte, timer ndn.Timer) ndn.Signer

NewHmacIntSigner creates an Interest signer that uses DigestSha256.

func NewHmacSigner ¶

func NewHmacSigner(keyName enc.Name, key []byte, forCert bool, expireTime time.Duration) ndn.Signer

NewHmacSigner creates a Data signer that uses DigestSha256.

func NewRsaSigner ¶

func NewRsaSigner(
	forCert bool, forInt bool, expireTime time.Duration, key *rsa.PrivateKey,
	keyLocatorName enc.Name,
) ndn.Signer

NewRsaSigner creates a signer using RSA key

func NewSha256IntSigner ¶

func NewSha256IntSigner(timer ndn.Timer) ndn.Signer

NewSha256IntSigner creates an Interest signer that uses DigestSha256.

func NewSha256Signer ¶

func NewSha256Signer() ndn.Signer

NewSha256Signer creates a Data signer that uses DigestSha256.

func RsaValidate ¶

func RsaValidate(sigCovered enc.Wire, sig ndn.Signature, pubKey *rsa.PublicKey) bool

RsaValidate verifies the signature with a known RSA public key. ndn-cxx's PIB uses RSA 2048 key stored in ASN.1 DER format. Use x509.ParsePKIXPublicKey to parse.

func Sha256Validate ¶

func Sha256Validate(sigCovered enc.Wire, sig ndn.Signature) bool

HmacValidate verifies the sha256 digest.