-
Notifications
You must be signed in to change notification settings - Fork 37
ocp cosesign decode/verify #713
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
This reverts commit 4b9b46d.
parvathib
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
swenson
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm okay with merging this but we should maybe try to clean up the workspace in a follow-up if so.
| use openssl::{ | ||
| bn::{BigNum, BigNumContext}, | ||
| ec::{EcGroup, EcKey, EcPoint}, | ||
| nid::Nid, | ||
| pkey::PKey, | ||
| x509::X509, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
perhaps in a different PR we can abstract crypto interface
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
agree! we'll abstract the crypto interface in the upcoming PRs.
| )) | ||
| } | ||
|
|
||
| /// Extract raw P-384 public key coordinates (x, y) from DER X.509 cert |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
consider to make this generic... we`re going to have MLDSA profile too, as soon as it will get ratified
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Agreed—we’ll generalize how the verification key is extracted in future PRs.
… into meilu/ocp_cosesign_verify_clean
ocp cosesign decode/verify