Versions in this module Expand all Collapse all v0 v0.2.0 Aug 28, 2026 Changes in this version + const ModelBundlePredicateType + const SourceBatchPredicateType v0.1.0 Aug 5, 2026 Changes in this version + const BundlePredicateType + const CEKSize + const PayloadType + const SegmentSize + const StatementType + var ErrWrongCurve = errors.New("bundle: key is not ECDSA P-384") + func DecryptStream(w io.Writer, r io.Reader, cek, streamAAD []byte) error + func EncryptStream(w io.Writer, r io.Reader, cek, streamAAD []byte) error + func GenerateCEK() ([]byte, error) + func KeyFingerprint(pub crypto.PublicKey) (string, error) + func SignStatement(priv *ecdsa.PrivateKey, st *Statement) (*dsse.Envelope, error) + func SignStatementHybrid(ecdsaPriv *ecdsa.PrivateKey, mldsaPriv *mldsa.PrivateKey, st *Statement) (*dsse.Envelope, error) + func UnwrapCEK(recipient *ecdh.PrivateKey, stanza *WrapStanza) ([]byte, error) + type Algorithm string + const AlgECDSAP384 + const AlgMLDSA87 + type Anchor struct + Algorithm Algorithm + Public crypto.PublicKey + type Mode int + const Enforced2of2 + const Phase1 + type Policy struct + Anchors []Anchor + Mode Mode + func (p *Policy) VerifyStatement(env *dsse.Envelope) (*Statement, error) + type Statement struct + Predicate map[string]any + PredicateType string + Subject []Subject + Type string + func NewStatement(predicateType string, predicate map[string]any, subjects ...Subject) *Statement + func VerifyStatement(anchors []*ecdsa.PublicKey, env *dsse.Envelope) (*Statement, error) + type Subject struct + Digest map[string]string + Name string + type WrapStanza struct + EphemeralPublic []byte + Wrapped []byte + func WrapCEK(recipient *ecdh.PublicKey, cek []byte) (*WrapStanza, error)
Go to main page