Table of Contents

Class SignatureVerifier

Namespace
Sigstore.Crypto
Assembly
Sigstore.dll

Verifies artifact signatures using BCL primitives and BouncyCastle (for Ed25519). Signature algorithms are implied by the leaf certificate public key (PKIX).

public sealed class SignatureVerifier : ISignatureVerifier
Inheritance
SignatureVerifier
Implements
Inherited Members

Methods

VerifyArtifactSignature(X509Certificate2, ReadOnlySpan<byte>, ReadOnlySpan<byte>, HashAlgorithmName)

Verifies signature over artifact using the leaf certificate public key.

public void VerifyArtifactSignature(X509Certificate2 leafCertificate, ReadOnlySpan<byte> artifact, ReadOnlySpan<byte> signature, HashAlgorithmName hashAlgorithm)

Parameters

leafCertificate X509Certificate2

Leaf signing certificate.

artifact ReadOnlySpan<byte>

Raw artifact bytes.

signature ReadOnlySpan<byte>

Signature bytes from the bundle.

hashAlgorithm HashAlgorithmName

Hash algorithm used with the signature scheme.