Crate sigstore_crypto 

Cryptographic primitives for Sigstore

This crate provides key generation, signing, and verification functionality using aws-lc-rs as the cryptographic backend.

Re-exports

pub use checkpoint::compute_key_hint;

pub use checkpoint::detect_key_type;

pub use checkpoint::extract_raw_key;

pub use checkpoint::verify_ecdsa_p256;

pub use checkpoint::verify_ed25519;

pub use checkpoint::verify_signature_auto;

pub use checkpoint::CheckpointVerifyExt;

pub use checkpoint::KeyType;

pub use error::Error;

pub use error::Result;

pub use hash::sha256;

pub use hash::sha256_reader;

pub use hash::Sha256Hasher;

pub use keyring::Keyring;

pub use signing::KeyPair;

pub use signing::SigningScheme;

pub use verification::verify_signature;

pub use verification::verify_signature_prehashed;

pub use verification::VerificationKey;

pub use x509::parse_certificate_info;

pub use x509::CertificateInfo;

Modules

checkpoint

Checkpoint verification extension trait.

error

Error types for sigstore-crypto

hash

Hashing utilities using aws-lc-rs

keyring

Keyring for managing multiple verification keys

signing

Key generation and signing using aws-lc-rs

verification

Signature verification using aws-lc-rs

x509

X.509 certificate utilities for Sigstore

Structs

Checkpoint

A checkpoint (signed tree head) from a transparency log.

CheckpointSignature

A signature on a checkpoint.