Skip to content

Releases

v0.1.0

v0.1.0 Latest
Latest

Choose a tag to compare

View all tags
@srivtx srivtx released this 20 Sep 15:56
v0.1.0
163c4e5

Initial release.

  • Parse the JUMBF manifest store from JPEG (APP11), PNG (caBX), WebP (C2PA), or a raw JUMBF file.
  • Decode the CBOR claim, including indefinite-length items.
  • Verify the COSE_Sign1 signature with WebCrypto: ES256/384/512, PS256/384/512, RS256, Ed25519. RSA keys are imported through a JWK when the SPKI carries RSASSA-PSS parameters.
  • Verify every assertion hash and the c2pa.hash.data hard binding over the asset bytes with exclusions.
  • Walk the certificate chain and evaluate a C2PA trust list or PEM bundle.
  • Report a validation state with stable codes; exit 0/1/2/3.
  • Emit a portable provenance card and anchor cards in a JSON Lines registry.
  • Browser verifier, a Bun CLI, and an MCP server with provenance_verify, provenance_inspect, and provenance_card.

by svx · MIT Licensed

Full Changelog: https://github.com/srivtx/attest/commits/v0.1.0

Assets 2
Loading