Skip to content

v0.1.2 — ECDSA signing keys

Choose a tag to compare

View all tags
@milkway milkway released this 14 Jun 23:15
· 39 commits to main since this release
v0.1.2
763b961

The signer's private key can now be ECDSA (P-256 / P-384) in addition to RSA — detected automatically from the keystore.

  • P-256 signs with SHA-256, P-384 with SHA-384; the SignedData digest and signature algorithms are chosen to match the key.
  • The verifier validates RSA and ECDSA signer signatures, and derives the expected messageDigest from the SignerInfo's digestAlgorithm.

Cross-validated by Poppler pdfsig: both curves report "Signature is Valid".

Combined with v0.1.1's chain validation, the crate now does RSA + ECDSA on both the signing and verification sides. Remaining: Ed25519, full RFC 5280 path processing (name constraints, policies).

Assets 2
Loading