Feat: Support Wasm-Signature proposal

[hydai]

Motivation

The wasm-Signature proposal is specifically about embedded digital signatures in WebAssembly modules, not about package/OCI signatures. When distributing WebAssembly modules, it will be nice if we can have a way to verify.

To achieve this target, we choose a Wasm-Signature proposal as our implementation standard. With this proposal, WasmEdge can provide sign and verify features.

Specification

1. Follow the Spec of Wasm-Signature proposal.
2. Please use the Options (b) Sign all bytecode preceding the “signature” Section as our solution.
3. Implement the sign and verify features in the WasmEdge command line tool.
4. Add unit tests and coverage to the related functions.
5. Create a demo kit:

# Sign
wasmedge sign --key signerkey.pem --output signed-module.wasm input-module.wasm
# Verify
wasmedge verify --key signerkey.pub.pem signed-module.wasm
# Return 0 if ok, otherwise, return 1 with error messages

Appendix

1. Wasm-Signature: https://github.com/wasm-signatures/design
2. Existed tool, WasmSign: https://github.com/jedisct1/wasmsign
3. Existed tool, wasm-sign: https://github.com/frehberg/wasm-sign

[spider0061]

@hydai Hello, I wanted to say that I am interested in this project. In past I have worked as a GSoC student developer in 2020 where I worked on building a configuration wizard. Also, I have been an Amazon intern where I worked on AWS, React and Java. Other than this I am a proficient developer in C/C++ and Python. Currently I am looking to learn more and grow my tech stack. I just wanted to know what can be the starting point to learn more about WASM. Thanks

[hydai]

Hi @spider0061
For Wasm beginners, I believe the best document is https://developer.mozilla.org/en-US/docs/WebAssembly
This website contains basic concepts and tutorials which are good and clear to developers.

Also, if you want to dig into Wasm, you can check https://webassembly.org/ for the spec.

[anonymousr007]

Hi @hydai , I am Rishabh final year computer engineering student and proficient in C++ and Data Structures and Algorithms. I am interested in this project.I would like to work in this project. Thanks