Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch to v2 and implement crypto keys #90

Merged
merged 3 commits into from
Sep 12, 2023
Merged

Switch to v2 and implement crypto keys #90

merged 3 commits into from
Sep 12, 2023

Conversation

setrofim
Copy link
Contributor

  • Switch to v2 development, as, going forward, we're going to be implementing breaking changes from the v1 releases
  • Implement Crypto Keys as defined by the latest draft of the CoRIM spec
  • Update a deprecated go-cose algorithm name

The former name is deprecated in the latest go-cose.

Signed-off-by: Sergei Trofimov <[email protected]>
README.md Outdated Show resolved Hide resolved
comid/cryptokey.go Outdated Show resolved Hide resolved
@yogeshbdeshpande
Copy link
Contributor

@setrofim Thank you for the change, I will review it little later today!

Copy link
Contributor

@thomas-fossati thomas-fossati left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

README.md Outdated Show resolved Hide resolved
README.md Outdated Show resolved Hide resolved
README.md Outdated Show resolved Hide resolved
Copy link
Contributor

@yogeshbdeshpande yogeshbdeshpande left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have made some minor comments!

There is already a v1 release published to pkg.dev. This was premature
as a number of breaking changes to the API are still planned. The
underlying spec is still in development with regular drafts being
released. This code is going to change tracking the changes in the spec,
as well as likely making non-spec changes to the API as they slowly
mature.

In order to stay compliant with golang [versioning
workflow](https://go.dev/doc/modules/release-workflow), development is
witching over to v2, so that v1 can remain stable.

(note: the first full v2 release is expected to align with the
final publication of the CoRIM spec, and so will not happen for some
time. In the mean time, "release candidates" will be published to
provided milestone references for dependents)

Signed-off-by: Sergei Trofimov <[email protected]>
Implement Crypto Keys as described by section 3.1.4.1.6 of
draft-ietf-rats-corim-02:

https://www.ietf.org/archive/id/draft-ietf-rats-corim-02.html#name-crypto-keys

The replaces the equivalent VerifKey construct in the existing
implementation. Crypo Keys are one of pre-defined types, allowing for
stronger validation of the underlying value.

As part of this change, the dependency on swid library is updated to the
most current version, which changes the representation of digests to use
";" instead of ":" as the separator.

Signed-off-by: Sergei Trofimov <[email protected]>
@setrofim setrofim merged commit 58a92b0 into main Sep 12, 2023
9 checks passed
@setrofim setrofim deleted the crypto-keys branch September 12, 2023 14:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants