Skip to content

Commit

Permalink
Use hex encoding is used for ed25519 and target hashes
Browse files Browse the repository at this point in the history
According to theupdateframework#42, the spec should explicitly state that the ed25519
public key, and the target hash values are hex encoded values,
since that is used by the majority of tuf implementations.
  • Loading branch information
erickt committed Aug 1, 2019
1 parent 6ba6352 commit 16685f2
Showing 1 changed file with 10 additions and 2 deletions.
12 changes: 10 additions & 2 deletions tuf-spec.md
Expand Up @@ -475,7 +475,8 @@ repo](https://github.com/theupdateframework/specification/issues).

KEYID is the identifier of the key signing the ROLE dictionary.

SIGNATURE is a signature of the canonical JSON form of ROLE.
SIGNATURE is a hex-encoded signature of the canonical JSON form of
ROLE.


All keys have the format:
Expand Down Expand Up @@ -532,7 +533,9 @@ repo](https://github.com/theupdateframework/specification/issues).
"keyval" : {"public" : PUBLIC}
}

where PUBLIC is a 32-byte string.
where:

PUBLIC is a 64-byte hex encoded string.

The 'ecdsa' format is:

Expand Down Expand Up @@ -770,6 +773,11 @@ repo](https://github.com/theupdateframework/specification/issues).
It is allowed to have a TARGETS object with no TARGETPATH elements. This
can be used to indicate that no target files are available.

HASHES is a dictionary that specifies one or more hashes, including
the cryptographic hash function. For example: { "sha256": HASH, ... }. It
is required for delegated roles, and optional for all others. HASH is the
hexdigest of the cryptographic function computed on the target file.

If defined, the elements and values of "custom" will be made available to the
client application. The information in "custom" is opaque to the framework
and can include version numbers, dependencies, requirements, and any other
Expand Down

0 comments on commit 16685f2

Please sign in to comment.