signature

Documentation

Overview

Package signature provides shared signature validation code functions

Index

• func ValidateSignatureCosign(ctx context.Context, pubkey, sig []byte, payloadHash digest.Digest) (bool, error)
• func ValidateSignatureNotary(ctx context.Context, subjectDesc v1.Descriptor, sig []byte, ...) (*notation.VerificationOutcome, error)

Functions

func ValidateSignatureCosign

func ValidateSignatureCosign(ctx context.Context, pubkey, sig []byte, payloadHash digest.Digest) (bool, error)

ValidateSignatureCosign verifies the provided payload is signed with the provided signature, using cosign PKI sig Currently only supports sha256 hashing algorithm.

func ValidateSignatureNotary

func ValidateSignatureNotary(ctx context.Context, subjectDesc v1.Descriptor, sig []byte, trustStore truststore.X509TrustStore) (*notation.VerificationOutcome, error)

ValidateSignatureNotary performs certificate signature validation using Notary. This function constructs the necessary options and trust policy from a subject descriptor expected to have been signed, and a trust store that provides a x509 certificate.