certification

README

Certificates

A certificate consists of

• a tree.
• a signature on the tree root hash valid under some public key.
• an optional delegation that links that public key to root public key.

Read More

• Certified Data
• Certification

Documentation

Index

• Constants
• func PublicKeyFromDER(der []byte) (*bls.PublicKey, error)
• func PublicKeyToDER(publicKey []byte) ([]byte, error)
• func VerifyCertificate(certificate Certificate, canisterID principal.Principal, rootPublicKey []byte) error
• func VerifyCertifiedData(certificate Certificate, canisterID principal.Principal, rootPublicKey []byte, ...) error
• type Certificate
• type Delegation
  • func (d *Delegation) UnmarshalCBOR(bytes []byte) error

Constants

const RootKey = "" /* 266-byte string literal not displayed */

RootKey is the root key of IC main net.

Functions

func PublicKeyFromDER

func PublicKeyFromDER(der []byte) (*bls.PublicKey, error)

func PublicKeyToDER

func PublicKeyToDER(publicKey []byte) ([]byte, error)

func VerifyCertificate

func VerifyCertificate(
	certificate Certificate,
	canisterID principal.Principal,
	rootPublicKey []byte,
) error

func VerifyCertifiedData

func VerifyCertifiedData(
	certificate Certificate,
	canisterID principal.Principal,
	rootPublicKey []byte,
	certifiedData []byte,
) error

Types

type Certificate

type Certificate struct {
	// Tree is the certificate tree.
	Tree hashtree.HashTree `cbor:"tree"`
	// Signature is the signature of the certificate tree.
	Signature []byte `cbor:"signature"`
	// Delegation is the delegation of the certificate.
	Delegation *Delegation `cbor:"delegation"`
}

Certificate is a certificate gets returned by the IC.

type Delegation

type Delegation struct {
	// SubnetId is the subnet ID of the delegation.
	SubnetId principal.Principal `cbor:"subnet_id"`
	// The nested certificate typically does not itself again contain a
	// delegation, although there is no reason why agents should enforce that
	// property.
	Certificate Certificate `cbor:"certificate"`
}

Delegation is a delegation of a certificate.

func (*Delegation) UnmarshalCBOR

func (d *Delegation) UnmarshalCBOR(bytes []byte) error

UnmarshalCBOR unmarshals a delegation.