signerverifier

README

signerverifier

This package implements methods to sign and verify attestation envelopes.

Documentation

Index

• func ConvertToPEM(ecdsaPubKey *ecdsa.PublicKey) ([]byte, error)
• func GenKeyPair() (dsse.SignerVerifier, error)
• func GetAWSSigner(ctx context.Context, keyARN string, region string) (dsse.SignerVerifier, error)
• func GetGCPSigner(ctx context.Context, reference string, opts ...option.ClientOption) (dsse.SignerVerifier, error)
• func KeyID(pubKey crypto.PublicKey) (string, error)
• func LoadKeyPair(priv []byte) (dsse.SignerVerifier, error)
• func ParsePublicKey(pubkeyBytes []byte) (*ecdsa.PublicKey, error)
• type ECDSA256SignerVerifier
  • func (s *ECDSA256SignerVerifier) KeyID() (string, error)
  • func (s *ECDSA256SignerVerifier) Public() crypto.PublicKey
  • func (s *ECDSA256SignerVerifier) Sign(_ context.Context, data []byte) ([]byte, error)
  • func (s *ECDSA256SignerVerifier) Verify(_ context.Context, data []byte, sig []byte) error

Functions

func ConvertToPEM

func ConvertToPEM(ecdsaPubKey *ecdsa.PublicKey) ([]byte, error)

func GenKeyPair

func GenKeyPair() (dsse.SignerVerifier, error)

func GetAWSSigner

func GetAWSSigner(ctx context.Context, keyARN string, region string) (dsse.SignerVerifier, error)

using AWS KMS.

func GetGCPSigner

func GetGCPSigner(ctx context.Context, reference string, opts ...option.ClientOption) (dsse.SignerVerifier, error)

using GCP KMS reference should be in the format projects/[PROJECT_ID]/locations/[LOCATION]/keyRings/[KEY_RING]/cryptoKeys/[KEY]/cryptoKeyVersions/[VERSION].

func KeyID

func KeyID(pubKey crypto.PublicKey) (string, error)

func LoadKeyPair

func LoadKeyPair(priv []byte) (dsse.SignerVerifier, error)

func ParsePublicKey

func ParsePublicKey(pubkeyBytes []byte) (*ecdsa.PublicKey, error)

Types

type ECDSA256SignerVerifier

type ECDSA256SignerVerifier struct {
	crypto.Signer
}

func (*ECDSA256SignerVerifier) KeyID

func (s *ECDSA256SignerVerifier) KeyID() (string, error)

implement keyid function.

func (*ECDSA256SignerVerifier) Public

func (s *ECDSA256SignerVerifier) Public() crypto.PublicKey

func (*ECDSA256SignerVerifier) Sign

func (s *ECDSA256SignerVerifier) Sign(_ context.Context, data []byte) ([]byte, error)

func (*ECDSA256SignerVerifier) Verify

func (s *ECDSA256SignerVerifier) Verify(_ context.Context, data []byte, sig []byte) error