security

Documentation

Index

• func CheckHmacSig(sigCovered enc.Wire, sigValue []byte, key []byte) bool
• func EcdsaValidate(sigCovered enc.Wire, sig ndn.Signature, pubKey *ecdsa.PublicKey) bool
• func EddsaValidate(sigCovered enc.Wire, sig ndn.Signature, pubKey ed25519.PublicKey) bool
• func HmacValidate(sigCovered enc.Wire, sig ndn.Signature, key []byte) bool
• func NewEccSigner(forCert bool, forInt bool, expireTime time.Duration, key *ecdsa.PrivateKey, ...) ndn.Signer
• func NewEmptySigner() ndn.Signer
• func NewHmacIntSigner(key []byte, timer ndn.Timer) ndn.Signer
• func NewHmacSigner(keyName enc.Name, key []byte, forCert bool, expireTime time.Duration) ndn.Signer
• func NewRsaSigner(forCert bool, forInt bool, expireTime time.Duration, key *rsa.PrivateKey, ...) ndn.Signer
• func NewSha256IntSigner(timer ndn.Timer) ndn.Signer
• func NewSha256Signer() ndn.Signer
• func RsaValidate(sigCovered enc.Wire, sig ndn.Signature, pubKey *rsa.PublicKey) bool
• func Sha256Validate(sigCovered enc.Wire, sig ndn.Signature) bool

Functions

func CheckHmacSig

func CheckHmacSig(sigCovered enc.Wire, sigValue []byte, key []byte) bool

func EcdsaValidate

func EcdsaValidate(sigCovered enc.Wire, sig ndn.Signature, pubKey *ecdsa.PublicKey) bool

EcdsaValidate verifies the signature with a known ECC public key. ndn-cxx's PIB uses secp256r1 key stored in ASN.1 DER format. Use x509.ParsePKIXPublicKey to parse.

func EddsaValidate

func EddsaValidate(sigCovered enc.Wire, sig ndn.Signature, pubKey ed25519.PublicKey) bool

EddsaValidate verifies the signature with a known ed25519 public key. ndn-cxx's PIB does not support this, but a certificate is supposed to use ASN.1 DER format. Use x509.ParsePKIXPublicKey to parse. Note: ed25519.PublicKey is defined to be a pointer type without '*'.

func HmacValidate

func HmacValidate(sigCovered enc.Wire, sig ndn.Signature, key []byte) bool

HmacValidate verifies the signature with a known HMAC shared key.

func NewEccSigner

func NewEccSigner(
	forCert bool, forInt bool, expireTime time.Duration, key *ecdsa.PrivateKey,
	keyLocatorName enc.Name,
) ndn.Signer

NewEccSigner creates a signer using ECDSA key

func NewEmptySigner

func NewEmptySigner() ndn.Signer

NewEmptySigner creates an empty signer for test.

func NewHmacIntSigner

func NewHmacIntSigner(key []byte, timer ndn.Timer) ndn.Signer

NewHmacIntSigner creates an Interest signer that uses DigestSha256.

func NewHmacSigner

func NewHmacSigner(keyName enc.Name, key []byte, forCert bool, expireTime time.Duration) ndn.Signer

NewHmacSigner creates a Data signer that uses DigestSha256.

func NewRsaSigner

func NewRsaSigner(
	forCert bool, forInt bool, expireTime time.Duration, key *rsa.PrivateKey,
	keyLocatorName enc.Name,
) ndn.Signer

NewRsaSigner creates a signer using RSA key

func NewSha256IntSigner

func NewSha256IntSigner(timer ndn.Timer) ndn.Signer

NewSha256IntSigner creates an Interest signer that uses DigestSha256.

func NewSha256Signer

func NewSha256Signer() ndn.Signer

NewSha256Signer creates a Data signer that uses DigestSha256.

func RsaValidate

func RsaValidate(sigCovered enc.Wire, sig ndn.Signature, pubKey *rsa.PublicKey) bool

RsaValidate verifies the signature with a known RSA public key. ndn-cxx's PIB uses RSA 2048 key stored in ASN.1 DER format. Use x509.ParsePKIXPublicKey to parse.

func Sha256Validate

func Sha256Validate(sigCovered enc.Wire, sig ndn.Signature) bool

HmacValidate verifies the sha256 digest.