Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support ed25519ph for hashedrekord for Go 1.20 #1325

Closed
haydentherapper opened this issue Feb 3, 2023 · 0 comments
Closed

Support ed25519ph for hashedrekord for Go 1.20 #1325

haydentherapper opened this issue Feb 3, 2023 · 0 comments
Labels
enhancement New feature or request

Comments

@haydentherapper
Copy link
Contributor

Description

ed25519 signatures are not supported with the hashedrekord type, though they are supported with rekord. The reason is that ed25519 computes the digest as part of its algorithm, so the original artifact is needed to verify a signature. We return an error when an ed25519 key is used with hashedrekord - https://github.com/sigstore/rekor/blob/main/pkg/types/hashedrekord/v0.0.1/entry.go#L163-L166

Go 1.20 now supports ed25519ph, so only the artifact hash is needed to verify the signature.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant