Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Add a registry of supported signature suites/hash algorithms #189

Closed
woodruffw opened this issue Jan 9, 2024 · 2 comments
Closed

Add a registry of supported signature suites/hash algorithms #189

woodruffw opened this issue Jan 9, 2024 · 2 comments

Comments

@woodruffw
Copy link
Member

Opening as a tracking issue; CCing @tetsuo-cpp and @ret2libc.

From initial discussion, protobuf-specs is probably the right place for this registry to live. It should probably be both a Markdown file and a .proto (containing enums/string constants for the cipher suite names, maybe?)

Blocked on completion of the relevant parts of the Configurable Crypto Algorithms document.

@woodruffw
Copy link
Member Author

Some relevant discussion items:

  • How "detailed" should the protobuf version of the registry be? In other words: should it list things like expected purposes (signing only, verifying only, both), or just be a "bare" list of every algorithm and suite that a Sigstore client might reasonably need to support?

@tetsuo-cpp
Copy link
Contributor

This is addressed in #194, we can close this now.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants