Crate ic_canister_sig_creation

Modules

signature_map

Maintains signatures with associated expirations.

Structs

CanisterSig

A canister signature, see https://internetcomputer.org/docs/current/references/ic-interface-spec#canister-signatures

CanisterSigPublicKey

A public key of canister signatures, see https://internetcomputer.org/docs/current/references/ic-interface-spec#canister-signatures

IC_ROOT_PUBLIC_KEY

The IC root public key used when verifying canister signatures.

Constants

CANISTER_SIG_PK_DER_OID

CANISTER_SIG_PK_DER_PREFIX_LENGTH

DELEGATION_SIG_DOMAIN

Signature domain for IC request auth delegations as specified in the IC interface specification: https://internetcomputer.org/docs/current/references/ic-interface-spec/#authentication

IC_ROOT_PK_DER

IC_ROOT_PK_DER_PREFIX

IC_ROOT_PK_LENGTH

Functions

delegation_signature_msg

Computes the signing input for a signature on an IC request authentication delegation. It can be used in conjunction with the DELEGATION_SIG_DOMAIN to create a signed sender_delegation. Relevant part of the IC interface specification: https://internetcomputer.org/docs/current/references/ic-interface-spec#authentication

extract_raw_canister_sig_pk_from_der

Verifies the structure given public key in DER-format, and returns raw bytes of the key.

extract_raw_root_pk_from_der

Verifies the structure given public key in DER-format, and returns raw bytes of the key.

hash_bytes

hash_with_domain

parse_canister_sig_cbor

Parses the given bytes as a CBOR-encoded CanisterSig-struct.