-
Notifications
You must be signed in to change notification settings - Fork 282
Closed
Description
Add tap12 to the reference implementation. This TAP allows for greater flexibility in how keyids are generated. This will require the following changes to the client:
- Remove all use of keyid_hash_algorithms and instead use the keyid defined by the repository. This step is well documented in Documenting or creating a TAP to describe keyid_hash_algorithms #848.
- Check that all keys applied to a signature are unique using a standardized representation (ex modulus and exponent for rsa) so that the same key with multiple keyids cannot be applied to a threshold.
- Make a local keydb for each delegating targets role so that keys can be locally scoped to their delegating instance (ie where the keys are defined in the delegating role and used in the delegated role)
The repository code should not need to change as sha256 may still be used to generate keyids.
Metadata
Metadata
Assignees
Labels
No labels