You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
ed25519 signatures are not supported with the hashedrekord type, though they are supported with rekord. The reason is that ed25519 computes the digest as part of its algorithm, so the original artifact is needed to verify a signature. We return an error when an ed25519 key is used with hashedrekord - https://github.com/sigstore/rekor/blob/main/pkg/types/hashedrekord/v0.0.1/entry.go#L163-L166
Go 1.20 now supports ed25519ph, so only the artifact hash is needed to verify the signature.
The text was updated successfully, but these errors were encountered:
Description
ed25519 signatures are not supported with the hashedrekord type, though they are supported with rekord. The reason is that ed25519 computes the digest as part of its algorithm, so the original artifact is needed to verify a signature. We return an error when an ed25519 key is used with hashedrekord - https://github.com/sigstore/rekor/blob/main/pkg/types/hashedrekord/v0.0.1/entry.go#L163-L166
Go 1.20 now supports ed25519ph, so only the artifact hash is needed to verify the signature.
The text was updated successfully, but these errors were encountered: