attestation

Documentation

Overview

Package attestation defines methods to attest a message using Pgp Private and Public Key pair.

Index

• Constants
• func CreateMessageAttestation(pgpKey *secrets.PgpKey, message string) (string, error)
• func GetPlainMessage(pubKey string, sig string) ([]byte, error)
• func VerifyMessageAttestation(pubKey string, sig string, message string) error
• type ValidatedAttestation

Constants

const (
	RSABits = 4096
)

Functions

func CreateMessageAttestation

func CreateMessageAttestation(pgpKey *secrets.PgpKey, message string) (string, error)

CreateMessageAttestation attests the message using the given PGP key. pgpKey: PGP key message: Message to attest

func GetPlainMessage

func GetPlainMessage(pubKey string, sig string) ([]byte, error)

GetPlainMessage verifies if the image is attested using the PEM encoded public key and returns the plain text in bytes

func VerifyMessageAttestation

func VerifyMessageAttestation(pubKey string, sig string, message string) error

VerifyMessageAttestation verifies if the image is attested using the PEM encoded public key.

Types

type ValidatedAttestation

type ValidatedAttestation struct {
	AttestorName string
	Image        string
}

ValidatedAttestation represents a trusted and verified attestation made by the named attestation authority about the named container image. An example ValidatedAttestation may look like:

{
  AttestorName: "build-attestor",
  Image: "gcr.io/img@sha256:abcd",
}