-
Notifications
You must be signed in to change notification settings - Fork 5k
Open
Labels
area/securityarea/wasmenhancementFeature requests. Not bugs or questions.Feature requests. Not bugs or questions.help wantedNeeds help!Needs help!
Description
Title: Wasm module signature verification
Description:
Add the ability to configure verification options to satisfy before executing a Wasm module. This could include checking all/some/at least one signature is present from a list of specified verification keys in the Wasm bytecode according to https://github.com/jedisct1/wasmsign. I propose some kind of VerificationOption struct that contains
- repeated public keys
- verification type (at least 'n', ALL)
- signature type (maybe reference to wasmsign)
If this is something interesting/use-able to others, I am happy to continue implementation.
Relevant Links
Draft PR here: #17221
The change depends on a PR in proxy-wasm-cpp-host: proxy-wasm/proxy-wasm-cpp-host#177
Metadata
Metadata
Assignees
Labels
area/securityarea/wasmenhancementFeature requests. Not bugs or questions.Feature requests. Not bugs or questions.help wantedNeeds help!Needs help!