Compare commits
5 Commits
v1.0.0-pre
...
constants-
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
5cea53af26 | ||
|
|
8dcaefbf3a | ||
|
|
caaa0204b8 | ||
|
|
8c932e0eb8 | ||
|
|
83227f36a7 |
@@ -31,7 +31,7 @@ formatters:
|
||||
settings:
|
||||
goimports:
|
||||
local-prefixes:
|
||||
- github.com/selesy/go-varsig
|
||||
- github.com/ucan-wg/go-varsig
|
||||
exclusions:
|
||||
generated: lax
|
||||
paths:
|
||||
|
||||
212
LICENSE
212
LICENSE
@@ -1,201 +1,25 @@
|
||||
Apache License
|
||||
Version 2.0, January 2004
|
||||
http://www.apache.org/licenses/
|
||||
The contents of this repository are Copyright (c) corresponding authors and
|
||||
contributors, licensed under the `Permissive License Stack` meaning either of:
|
||||
|
||||
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||
- Apache-2.0 Software License: https://www.apache.org/licenses/LICENSE-2.0
|
||||
([...4tr2kfsq](https://dweb.link/ipfs/bafkreiankqxazcae4onkp436wag2lj3ccso4nawxqkkfckd6cg4tr2kfsq))
|
||||
|
||||
1. Definitions.
|
||||
- MIT Software License: https://opensource.org/licenses/MIT
|
||||
([...vljevcba](https://dweb.link/ipfs/bafkreiepofszg4gfe2gzuhojmksgemsub2h4uy2gewdnr35kswvljevcba))
|
||||
|
||||
"License" shall mean the terms and conditions for use, reproduction,
|
||||
and distribution as defined by Sections 1 through 9 of this document.
|
||||
You may not use the contents of this repository except in compliance
|
||||
with one of the listed Licenses. For an extended clarification of the
|
||||
intent behind the choice of Licensing please refer to
|
||||
https://protocol.ai/blog/announcing-the-permissive-license-stack/
|
||||
|
||||
"Licensor" shall mean the copyright owner or entity authorized by
|
||||
the copyright owner that is granting the License.
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the terms listed in this notice is distributed on
|
||||
an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
|
||||
either express or implied. See each License for the specific language
|
||||
governing permissions and limitations under that License.
|
||||
|
||||
"Legal Entity" shall mean the union of the acting entity and all
|
||||
other entities that control, are controlled by, or are under common
|
||||
control with that entity. For the purposes of this definition,
|
||||
"control" means (i) the power, direct or indirect, to cause the
|
||||
direction or management of such entity, whether by contract or
|
||||
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||
<!--- SPDX-License-Identifier: Apache-2.0 OR MIT -->
|
||||
|
||||
"You" (or "Your") shall mean an individual or Legal Entity
|
||||
exercising permissions granted by this License.
|
||||
`SPDX-License-Identifier: Apache-2.0 OR MIT`
|
||||
|
||||
"Source" form shall mean the preferred form for making modifications,
|
||||
including but not limited to software source code, documentation
|
||||
source, and configuration files.
|
||||
|
||||
"Object" form shall mean any form resulting from mechanical
|
||||
transformation or translation of a Source form, including but
|
||||
not limited to compiled object code, generated documentation,
|
||||
and conversions to other media types.
|
||||
|
||||
"Work" shall mean the work of authorship, whether in Source or
|
||||
Object form, made available under the License, as indicated by a
|
||||
copyright notice that is included in or attached to the work
|
||||
(an example is provided in the Appendix below).
|
||||
|
||||
"Derivative Works" shall mean any work, whether in Source or Object
|
||||
form, that is based on (or derived from) the Work and for which the
|
||||
editorial revisions, annotations, elaborations, or other modifications
|
||||
represent, as a whole, an original work of authorship. For the purposes
|
||||
of this License, Derivative Works shall not include works that remain
|
||||
separable from, or merely link (or bind by name) to the interfaces of,
|
||||
the Work and Derivative Works thereof.
|
||||
|
||||
"Contribution" shall mean any work of authorship, including
|
||||
the original version of the Work and any modifications or additions
|
||||
to that Work or Derivative Works thereof, that is intentionally
|
||||
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||
or by an individual or Legal Entity authorized to submit on behalf of
|
||||
the copyright owner. For the purposes of this definition, "submitted"
|
||||
means any form of electronic, verbal, or written communication sent
|
||||
to the Licensor or its representatives, including but not limited to
|
||||
communication on electronic mailing lists, source code control systems,
|
||||
and issue tracking systems that are managed by, or on behalf of, the
|
||||
Licensor for the purpose of discussing and improving the Work, but
|
||||
excluding communication that is conspicuously marked or otherwise
|
||||
designated in writing by the copyright owner as "Not a Contribution."
|
||||
|
||||
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||
on behalf of whom a Contribution has been received by Licensor and
|
||||
subsequently incorporated within the Work.
|
||||
|
||||
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
copyright license to reproduce, prepare Derivative Works of,
|
||||
publicly display, publicly perform, sublicense, and distribute the
|
||||
Work and such Derivative Works in Source or Object form.
|
||||
|
||||
3. Grant of Patent License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
(except as stated in this section) patent license to make, have made,
|
||||
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||
where such license applies only to those patent claims licensable
|
||||
by such Contributor that are necessarily infringed by their
|
||||
Contribution(s) alone or by combination of their Contribution(s)
|
||||
with the Work to which such Contribution(s) was submitted. If You
|
||||
institute patent litigation against any entity (including a
|
||||
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||
or a Contribution incorporated within the Work constitutes direct
|
||||
or contributory patent infringement, then any patent licenses
|
||||
granted to You under this License for that Work shall terminate
|
||||
as of the date such litigation is filed.
|
||||
|
||||
4. Redistribution. You may reproduce and distribute copies of the
|
||||
Work or Derivative Works thereof in any medium, with or without
|
||||
modifications, and in Source or Object form, provided that You
|
||||
meet the following conditions:
|
||||
|
||||
(a) You must give any other recipients of the Work or
|
||||
Derivative Works a copy of this License; and
|
||||
|
||||
(b) You must cause any modified files to carry prominent notices
|
||||
stating that You changed the files; and
|
||||
|
||||
(c) You must retain, in the Source form of any Derivative Works
|
||||
that You distribute, all copyright, patent, trademark, and
|
||||
attribution notices from the Source form of the Work,
|
||||
excluding those notices that do not pertain to any part of
|
||||
the Derivative Works; and
|
||||
|
||||
(d) If the Work includes a "NOTICE" text file as part of its
|
||||
distribution, then any Derivative Works that You distribute must
|
||||
include a readable copy of the attribution notices contained
|
||||
within such NOTICE file, excluding those notices that do not
|
||||
pertain to any part of the Derivative Works, in at least one
|
||||
of the following places: within a NOTICE text file distributed
|
||||
as part of the Derivative Works; within the Source form or
|
||||
documentation, if provided along with the Derivative Works; or,
|
||||
within a display generated by the Derivative Works, if and
|
||||
wherever such third-party notices normally appear. The contents
|
||||
of the NOTICE file are for informational purposes only and
|
||||
do not modify the License. You may add Your own attribution
|
||||
notices within Derivative Works that You distribute, alongside
|
||||
or as an addendum to the NOTICE text from the Work, provided
|
||||
that such additional attribution notices cannot be construed
|
||||
as modifying the License.
|
||||
|
||||
You may add Your own copyright statement to Your modifications and
|
||||
may provide additional or different license terms and conditions
|
||||
for use, reproduction, or distribution of Your modifications, or
|
||||
for any such Derivative Works as a whole, provided Your use,
|
||||
reproduction, and distribution of the Work otherwise complies with
|
||||
the conditions stated in this License.
|
||||
|
||||
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||
any Contribution intentionally submitted for inclusion in the Work
|
||||
by You to the Licensor shall be under the terms and conditions of
|
||||
this License, without any additional terms or conditions.
|
||||
Notwithstanding the above, nothing herein shall supersede or modify
|
||||
the terms of any separate license agreement you may have executed
|
||||
with Licensor regarding such Contributions.
|
||||
|
||||
6. Trademarks. This License does not grant permission to use the trade
|
||||
names, trademarks, service marks, or product names of the Licensor,
|
||||
except as required for reasonable and customary use in describing the
|
||||
origin of the Work and reproducing the content of the NOTICE file.
|
||||
|
||||
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||
agreed to in writing, Licensor provides the Work (and each
|
||||
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||
implied, including, without limitation, any warranties or conditions
|
||||
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||
appropriateness of using or redistributing the Work and assume any
|
||||
risks associated with Your exercise of permissions under this License.
|
||||
|
||||
8. Limitation of Liability. In no event and under no legal theory,
|
||||
whether in tort (including negligence), contract, or otherwise,
|
||||
unless required by applicable law (such as deliberate and grossly
|
||||
negligent acts) or agreed to in writing, shall any Contributor be
|
||||
liable to You for damages, including any direct, indirect, special,
|
||||
incidental, or consequential damages of any character arising as a
|
||||
result of this License or out of the use or inability to use the
|
||||
Work (including but not limited to damages for loss of goodwill,
|
||||
work stoppage, computer failure or malfunction, or any and all
|
||||
other commercial damages or losses), even if such Contributor
|
||||
has been advised of the possibility of such damages.
|
||||
|
||||
9. Accepting Warranty or Additional Liability. While redistributing
|
||||
the Work or Derivative Works thereof, You may choose to offer,
|
||||
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||
or other liability obligations and/or rights consistent with this
|
||||
License. However, in accepting such obligations, You may act only
|
||||
on Your own behalf and on Your sole responsibility, not on behalf
|
||||
of any other Contributor, and only if You agree to indemnify,
|
||||
defend, and hold each Contributor harmless for any liability
|
||||
incurred by, or claims asserted against, such Contributor by reason
|
||||
of your accepting any such warranty or additional liability.
|
||||
|
||||
END OF TERMS AND CONDITIONS
|
||||
|
||||
APPENDIX: How to apply the Apache License to your work.
|
||||
|
||||
To apply the Apache License to your work, attach the following
|
||||
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||
replaced with your own identifying information. (Don't include
|
||||
the brackets!) The text should be enclosed in the appropriate
|
||||
comment syntax for the file format. We also recommend that a
|
||||
file or class name and description of purpose be included on the
|
||||
same "printed page" as the copyright notice for easier
|
||||
identification within third-party archives.
|
||||
|
||||
Copyright [yyyy] [name of copyright owner]
|
||||
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
Verbatim copies of both licenses are included in the LICENSE-APACHE-2.0 and LICENSE-MIT files.
|
||||
|
||||
201
LICENSE-APACHE-2.0
Normal file
201
LICENSE-APACHE-2.0
Normal file
@@ -0,0 +1,201 @@
|
||||
Apache License
|
||||
Version 2.0, January 2004
|
||||
http://www.apache.org/licenses/
|
||||
|
||||
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||
|
||||
1. Definitions.
|
||||
|
||||
"License" shall mean the terms and conditions for use, reproduction,
|
||||
and distribution as defined by Sections 1 through 9 of this document.
|
||||
|
||||
"Licensor" shall mean the copyright owner or entity authorized by
|
||||
the copyright owner that is granting the License.
|
||||
|
||||
"Legal Entity" shall mean the union of the acting entity and all
|
||||
other entities that control, are controlled by, or are under common
|
||||
control with that entity. For the purposes of this definition,
|
||||
"control" means (i) the power, direct or indirect, to cause the
|
||||
direction or management of such entity, whether by contract or
|
||||
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||
|
||||
"You" (or "Your") shall mean an individual or Legal Entity
|
||||
exercising permissions granted by this License.
|
||||
|
||||
"Source" form shall mean the preferred form for making modifications,
|
||||
including but not limited to software source code, documentation
|
||||
source, and configuration files.
|
||||
|
||||
"Object" form shall mean any form resulting from mechanical
|
||||
transformation or translation of a Source form, including but
|
||||
not limited to compiled object code, generated documentation,
|
||||
and conversions to other media types.
|
||||
|
||||
"Work" shall mean the work of authorship, whether in Source or
|
||||
Object form, made available under the License, as indicated by a
|
||||
copyright notice that is included in or attached to the work
|
||||
(an example is provided in the Appendix below).
|
||||
|
||||
"Derivative Works" shall mean any work, whether in Source or Object
|
||||
form, that is based on (or derived from) the Work and for which the
|
||||
editorial revisions, annotations, elaborations, or other modifications
|
||||
represent, as a whole, an original work of authorship. For the purposes
|
||||
of this License, Derivative Works shall not include works that remain
|
||||
separable from, or merely link (or bind by name) to the interfaces of,
|
||||
the Work and Derivative Works thereof.
|
||||
|
||||
"Contribution" shall mean any work of authorship, including
|
||||
the original version of the Work and any modifications or additions
|
||||
to that Work or Derivative Works thereof, that is intentionally
|
||||
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||
or by an individual or Legal Entity authorized to submit on behalf of
|
||||
the copyright owner. For the purposes of this definition, "submitted"
|
||||
means any form of electronic, verbal, or written communication sent
|
||||
to the Licensor or its representatives, including but not limited to
|
||||
communication on electronic mailing lists, source code control systems,
|
||||
and issue tracking systems that are managed by, or on behalf of, the
|
||||
Licensor for the purpose of discussing and improving the Work, but
|
||||
excluding communication that is conspicuously marked or otherwise
|
||||
designated in writing by the copyright owner as "Not a Contribution."
|
||||
|
||||
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||
on behalf of whom a Contribution has been received by Licensor and
|
||||
subsequently incorporated within the Work.
|
||||
|
||||
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
copyright license to reproduce, prepare Derivative Works of,
|
||||
publicly display, publicly perform, sublicense, and distribute the
|
||||
Work and such Derivative Works in Source or Object form.
|
||||
|
||||
3. Grant of Patent License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
(except as stated in this section) patent license to make, have made,
|
||||
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||
where such license applies only to those patent claims licensable
|
||||
by such Contributor that are necessarily infringed by their
|
||||
Contribution(s) alone or by combination of their Contribution(s)
|
||||
with the Work to which such Contribution(s) was submitted. If You
|
||||
institute patent litigation against any entity (including a
|
||||
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||
or a Contribution incorporated within the Work constitutes direct
|
||||
or contributory patent infringement, then any patent licenses
|
||||
granted to You under this License for that Work shall terminate
|
||||
as of the date such litigation is filed.
|
||||
|
||||
4. Redistribution. You may reproduce and distribute copies of the
|
||||
Work or Derivative Works thereof in any medium, with or without
|
||||
modifications, and in Source or Object form, provided that You
|
||||
meet the following conditions:
|
||||
|
||||
(a) You must give any other recipients of the Work or
|
||||
Derivative Works a copy of this License; and
|
||||
|
||||
(b) You must cause any modified files to carry prominent notices
|
||||
stating that You changed the files; and
|
||||
|
||||
(c) You must retain, in the Source form of any Derivative Works
|
||||
that You distribute, all copyright, patent, trademark, and
|
||||
attribution notices from the Source form of the Work,
|
||||
excluding those notices that do not pertain to any part of
|
||||
the Derivative Works; and
|
||||
|
||||
(d) If the Work includes a "NOTICE" text file as part of its
|
||||
distribution, then any Derivative Works that You distribute must
|
||||
include a readable copy of the attribution notices contained
|
||||
within such NOTICE file, excluding those notices that do not
|
||||
pertain to any part of the Derivative Works, in at least one
|
||||
of the following places: within a NOTICE text file distributed
|
||||
as part of the Derivative Works; within the Source form or
|
||||
documentation, if provided along with the Derivative Works; or,
|
||||
within a display generated by the Derivative Works, if and
|
||||
wherever such third-party notices normally appear. The contents
|
||||
of the NOTICE file are for informational purposes only and
|
||||
do not modify the License. You may add Your own attribution
|
||||
notices within Derivative Works that You distribute, alongside
|
||||
or as an addendum to the NOTICE text from the Work, provided
|
||||
that such additional attribution notices cannot be construed
|
||||
as modifying the License.
|
||||
|
||||
You may add Your own copyright statement to Your modifications and
|
||||
may provide additional or different license terms and conditions
|
||||
for use, reproduction, or distribution of Your modifications, or
|
||||
for any such Derivative Works as a whole, provided Your use,
|
||||
reproduction, and distribution of the Work otherwise complies with
|
||||
the conditions stated in this License.
|
||||
|
||||
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||
any Contribution intentionally submitted for inclusion in the Work
|
||||
by You to the Licensor shall be under the terms and conditions of
|
||||
this License, without any additional terms or conditions.
|
||||
Notwithstanding the above, nothing herein shall supersede or modify
|
||||
the terms of any separate license agreement you may have executed
|
||||
with Licensor regarding such Contributions.
|
||||
|
||||
6. Trademarks. This License does not grant permission to use the trade
|
||||
names, trademarks, service marks, or product names of the Licensor,
|
||||
except as required for reasonable and customary use in describing the
|
||||
origin of the Work and reproducing the content of the NOTICE file.
|
||||
|
||||
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||
agreed to in writing, Licensor provides the Work (and each
|
||||
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||
implied, including, without limitation, any warranties or conditions
|
||||
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||
appropriateness of using or redistributing the Work and assume any
|
||||
risks associated with Your exercise of permissions under this License.
|
||||
|
||||
8. Limitation of Liability. In no event and under no legal theory,
|
||||
whether in tort (including negligence), contract, or otherwise,
|
||||
unless required by applicable law (such as deliberate and grossly
|
||||
negligent acts) or agreed to in writing, shall any Contributor be
|
||||
liable to You for damages, including any direct, indirect, special,
|
||||
incidental, or consequential damages of any character arising as a
|
||||
result of this License or out of the use or inability to use the
|
||||
Work (including but not limited to damages for loss of goodwill,
|
||||
work stoppage, computer failure or malfunction, or any and all
|
||||
other commercial damages or losses), even if such Contributor
|
||||
has been advised of the possibility of such damages.
|
||||
|
||||
9. Accepting Warranty or Additional Liability. While redistributing
|
||||
the Work or Derivative Works thereof, You may choose to offer,
|
||||
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||
or other liability obligations and/or rights consistent with this
|
||||
License. However, in accepting such obligations, You may act only
|
||||
on Your own behalf and on Your sole responsibility, not on behalf
|
||||
of any other Contributor, and only if You agree to indemnify,
|
||||
defend, and hold each Contributor harmless for any liability
|
||||
incurred by, or claims asserted against, such Contributor by reason
|
||||
of your accepting any such warranty or additional liability.
|
||||
|
||||
END OF TERMS AND CONDITIONS
|
||||
|
||||
APPENDIX: How to apply the Apache License to your work.
|
||||
|
||||
To apply the Apache License to your work, attach the following
|
||||
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||
replaced with your own identifying information. (Don't include
|
||||
the brackets!) The text should be enclosed in the appropriate
|
||||
comment syntax for the file format. We also recommend that a
|
||||
file or class name and description of purpose be included on the
|
||||
same "printed page" as the copyright notice for easier
|
||||
identification within third-party archives.
|
||||
|
||||
Copyright 2025 UCAN Working Group - All right reserved
|
||||
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
21
LICENSE-MIT
Normal file
21
LICENSE-MIT
Normal file
@@ -0,0 +1,21 @@
|
||||
MIT License
|
||||
|
||||
Copyright (c) 2025 UCAN Working Group - All rights reserved
|
||||
|
||||
Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
of this software and associated documentation files (the "Software"), to deal
|
||||
in the Software without restriction, including without limitation the rights
|
||||
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
copies of the Software, and to permit persons to whom the Software is
|
||||
furnished to do so, subject to the following conditions:
|
||||
|
||||
The above copyright notice and this permission notice shall be included in all
|
||||
copies or substantial portions of the Software.
|
||||
|
||||
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
||||
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
||||
SOFTWARE.
|
||||
55
README.md
55
README.md
@@ -1,3 +1,56 @@
|
||||
# go-varsig
|
||||
|
||||
`go-varsig` implements v0.1.0 of the [`varsig` specification]
|
||||
`go-varsig` implements the upcoming v1.0.0 release of the [`varsig` specification](https://github.com/ChainAgnostic/varsig/pull/18)
|
||||
with limited (and soon to be deprecated) support for the `varsig` < v1.0
|
||||
specification. This is predominatly included to support the UCAN v1.0
|
||||
use-case.
|
||||
|
||||
## Usage
|
||||
|
||||
Include the `go-varsig` library by running the following command:
|
||||
|
||||
```bash
|
||||
go get github.com/ucan-wg/go-varsig@latest
|
||||
```
|
||||
|
||||
## Documentation
|
||||
|
||||
Documentation for this library is provided as Go docs at
|
||||
https://pkg.go.dev/github.com/ucan-wg/go-varsig.
|
||||
|
||||
## Development
|
||||
|
||||
Install the required development tools using `asdf` by running the
|
||||
following command in this repository (or install them manually):
|
||||
|
||||
```bash
|
||||
asdf install
|
||||
```
|
||||
|
||||
### Checks
|
||||
|
||||
This repository contains an set of pre-commit hooks that are run prior to
|
||||
each `git commit`. You can also run these checks manually using the
|
||||
following command:
|
||||
|
||||
```bash
|
||||
pre-commit run --all-files
|
||||
```
|
||||
|
||||
### Github workflows development
|
||||
|
||||
ASDF installs `act` to support Github workflow development - in general,
|
||||
follow these steps to test the workflow:
|
||||
|
||||
If you're using `podman` instead of `docker`, use the `podman` socket to
|
||||
simulate the `docker` daemon:
|
||||
|
||||
```bash
|
||||
export DOCKER_HOST=unix:///var/run/podman/podman.sock
|
||||
```
|
||||
|
||||
Since there's only one workflow, the simplest command to test it is:
|
||||
|
||||
```bash
|
||||
act
|
||||
```
|
||||
|
||||
10
common.go
10
common.go
@@ -3,7 +3,7 @@ package varsig
|
||||
// Ed25519 produces a varsig that describes the associated algorithm defined
|
||||
// by the [IANA JOSE specification].
|
||||
//
|
||||
// [IANA JOSE specidication]: https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms
|
||||
// [IANA JOSE specification]: https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms
|
||||
func Ed25519(payloadEncoding PayloadEncoding, opts ...Option) (*EdDSAVarsig, error) {
|
||||
return NewEdDSAVarsig(CurveEd25519, HashAlgorithmSHA512, payloadEncoding, opts...)
|
||||
}
|
||||
@@ -11,7 +11,7 @@ func Ed25519(payloadEncoding PayloadEncoding, opts ...Option) (*EdDSAVarsig, err
|
||||
// Ed448 produces a varsig that describes the associated algorithm defined
|
||||
// by the [IANA JOSE specification].
|
||||
//
|
||||
// [IANA JOSE specidication]: https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms
|
||||
// [IANA JOSE specification]: https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms
|
||||
func Ed448(payloadEncoding PayloadEncoding, opts ...Option) (*EdDSAVarsig, error) {
|
||||
return NewEdDSAVarsig(CurveEd448, HashAlgorithmShake256, payloadEncoding, opts...)
|
||||
}
|
||||
@@ -19,7 +19,7 @@ func Ed448(payloadEncoding PayloadEncoding, opts ...Option) (*EdDSAVarsig, error
|
||||
// RS256 produces a varsig that describes the associated algorithm defined
|
||||
// by the [IANA JOSE specification].
|
||||
//
|
||||
// [IANA JOSE specidication]: https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms
|
||||
// [IANA JOSE specification]: https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms
|
||||
func RS256(keyLength uint64, payloadEncoding PayloadEncoding, opts ...Option) (*RSAVarsig, error) {
|
||||
return NewRSAVarsig(HashAlgorithmSHA256, keyLength, payloadEncoding, opts...)
|
||||
}
|
||||
@@ -27,7 +27,7 @@ func RS256(keyLength uint64, payloadEncoding PayloadEncoding, opts ...Option) (*
|
||||
// RS384 produces a varsig that describes the associated algorithm defined
|
||||
// by the [IANA JOSE specification].
|
||||
//
|
||||
// [IANA JOSE specidication]: https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms
|
||||
// [IANA JOSE specification]: https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms
|
||||
func RS384(keyLength uint64, payloadEncoding PayloadEncoding, opts ...Option) (*RSAVarsig, error) {
|
||||
return NewRSAVarsig(HashAlgorithmSHA384, keyLength, payloadEncoding, opts...)
|
||||
}
|
||||
@@ -35,7 +35,7 @@ func RS384(keyLength uint64, payloadEncoding PayloadEncoding, opts ...Option) (*
|
||||
// RS512 produces a varsig that describes the associated algorithm defined
|
||||
// by the [IANA JOSE specification].
|
||||
//
|
||||
// [IANA JOSE specidication]: https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms
|
||||
// [IANA JOSE specification]: https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms
|
||||
func RS512(keyLength uint64, payloadEncoding PayloadEncoding, opts ...Option) (*RSAVarsig, error) {
|
||||
return NewRSAVarsig(HashAlgorithmSHA512, keyLength, payloadEncoding, opts...)
|
||||
}
|
||||
|
||||
@@ -5,7 +5,7 @@ import (
|
||||
|
||||
"github.com/stretchr/testify/assert"
|
||||
|
||||
"github.com/selesy/go-varsig"
|
||||
"github.com/ucan-wg/go-varsig"
|
||||
)
|
||||
|
||||
func TestEd25519(t *testing.T) {
|
||||
|
||||
69
constant.go
69
constant.go
@@ -8,10 +8,16 @@ import (
|
||||
"github.com/multiformats/go-multicodec"
|
||||
)
|
||||
|
||||
// Prefix is the multicodec.Code for the varsig's varuint prefix byte.
|
||||
const Prefix = uint64(multicodec.Varsig)
|
||||
|
||||
// HashAlgorithm is the multicodec.Code that specifies the hash algorithm
|
||||
// that's used to reduced the signed content
|
||||
// that's used to reduce the signed content
|
||||
type HashAlgorithm uint64
|
||||
|
||||
// Constant multicodec.Code values that allow Varsig implementations to
|
||||
// specify how the payload content is hashed before the signature is
|
||||
// generated.
|
||||
const (
|
||||
HashAlgorithmUnspecified HashAlgorithm = 0x00
|
||||
HashAlgorithmSHA256 = HashAlgorithm(multicodec.Sha2_256)
|
||||
@@ -30,17 +36,15 @@ func DecodeHashAlgorithm(r *bytes.Reader) (HashAlgorithm, error) {
|
||||
|
||||
h := HashAlgorithm(u)
|
||||
|
||||
if _, ok := map[HashAlgorithm]struct{}{
|
||||
HashAlgorithmUnspecified: {},
|
||||
HashAlgorithmSHA256: {},
|
||||
HashAlgorithmSHA384: {},
|
||||
HashAlgorithmSHA512: {},
|
||||
HashAlgorithmShake256: {},
|
||||
}[h]; !ok {
|
||||
switch h {
|
||||
case HashAlgorithmSHA256,
|
||||
HashAlgorithmSHA384,
|
||||
HashAlgorithmSHA512,
|
||||
HashAlgorithmShake256:
|
||||
return h, nil
|
||||
default:
|
||||
return HashAlgorithmUnspecified, fmt.Errorf("%w: %x", ErrUnknownHashAlgorithm, h)
|
||||
}
|
||||
|
||||
return h, nil
|
||||
}
|
||||
|
||||
// PayloadEncoding specifies the encoding of the data being (hashed and)
|
||||
@@ -48,6 +52,9 @@ func DecodeHashAlgorithm(r *bytes.Reader) (HashAlgorithm, error) {
|
||||
// consistent hashes and signatures.
|
||||
type PayloadEncoding uint64
|
||||
|
||||
// Constant multicodec.Code values that allow Varsig implementations to
|
||||
// specify how the payload content is encoded before being hashed. In
|
||||
// varsig >= v1, only canonical encoding is allowed.
|
||||
const (
|
||||
PayloadEncodingUnspecified PayloadEncoding = 0x00
|
||||
PayloadEncodingVerbatim PayloadEncoding = 0x5f
|
||||
@@ -80,42 +87,40 @@ func DecodePayloadEncoding(r *bytes.Reader, vers Version) (PayloadEncoding, erro
|
||||
|
||||
// https://github.com/ChainAgnostic/varsig#4-payload-encoding
|
||||
func decodeEncodingInfoV0(payEnc PayloadEncoding) (PayloadEncoding, error) {
|
||||
if _, ok := map[PayloadEncoding]struct{}{
|
||||
PayloadEncodingVerbatim: {},
|
||||
PayloadEncodingDAGPB: {},
|
||||
PayloadEncodingDAGCBOR: {},
|
||||
PayloadEncodingDAGJSON: {},
|
||||
PayloadEncodingJWT: {},
|
||||
PayloadEncodingEIP191: {},
|
||||
}[payEnc]; !ok {
|
||||
switch payEnc {
|
||||
case PayloadEncodingVerbatim,
|
||||
PayloadEncodingDAGPB,
|
||||
PayloadEncodingDAGCBOR,
|
||||
PayloadEncodingDAGJSON,
|
||||
PayloadEncodingJWT,
|
||||
PayloadEncodingEIP191:
|
||||
return payEnc, nil
|
||||
default:
|
||||
return PayloadEncodingUnspecified, fmt.Errorf("%w: version=%d, encoding=%x", ErrUnsupportedPayloadEncoding, Version0, payEnc)
|
||||
}
|
||||
|
||||
return payEnc, nil
|
||||
}
|
||||
|
||||
// https://github.com/expede/varsig/blob/main/README.md#payload-encoding
|
||||
func decodeEncodingInfoV1(payEnc PayloadEncoding) (PayloadEncoding, error) {
|
||||
if _, ok := map[PayloadEncoding]struct{}{
|
||||
PayloadEncodingVerbatim: {},
|
||||
PayloadEncodingDAGCBOR: {},
|
||||
PayloadEncodingDAGJSON: {},
|
||||
PayloadEncodingEIP191: {},
|
||||
}[payEnc]; !ok {
|
||||
switch payEnc {
|
||||
case PayloadEncodingVerbatim,
|
||||
PayloadEncodingDAGCBOR,
|
||||
PayloadEncodingDAGJSON,
|
||||
PayloadEncodingEIP191:
|
||||
return payEnc, nil
|
||||
default:
|
||||
return PayloadEncodingUnspecified, fmt.Errorf("%w: version=%d, encoding=%x", ErrUnsupportedPayloadEncoding, Version1, payEnc)
|
||||
}
|
||||
|
||||
return payEnc, nil
|
||||
}
|
||||
|
||||
// SignAlgorithm is (usually) the multicodec.Code representing the public
|
||||
// Discriminator is (usually) the multicodec.Code representing the public
|
||||
// key type of the algorithm used to create the signature.
|
||||
//
|
||||
// There is not set list of constants here, nor is there a decode function
|
||||
// as the author of an implementation should include the constant with the
|
||||
// implementation, and the decoding is handled by the Handler, which uses
|
||||
// the SignAlgorithm to choose the correct implementation. Also note that
|
||||
// some of the SignAlgorithm values for a specific implementation have
|
||||
// the Discriminator to choose the correct implementation. Also note that
|
||||
// some of the Discriminator values for a specific implementation have
|
||||
// changed between varsig v0 and v1, so it's possible to have more than one
|
||||
// constant defined per implementation.
|
||||
type SignAlgorithm uint64
|
||||
type Discriminator uint64
|
||||
|
||||
@@ -7,7 +7,7 @@ import (
|
||||
|
||||
"github.com/stretchr/testify/require"
|
||||
|
||||
"github.com/selesy/go-varsig"
|
||||
"github.com/ucan-wg/go-varsig"
|
||||
)
|
||||
|
||||
func TestDecodeHashAlgorithm(t *testing.T) {
|
||||
@@ -39,6 +39,14 @@ func TestDecodeHashAlgorithm(t *testing.T) {
|
||||
})
|
||||
}
|
||||
|
||||
func BenchmarkDecodeHashAlgorithm(b *testing.B) {
|
||||
b.ReportAllocs()
|
||||
data := []byte{0x12}
|
||||
for i := 0; i < b.N; i++ {
|
||||
_, _ = varsig.DecodeHashAlgorithm(bytes.NewReader(data))
|
||||
}
|
||||
}
|
||||
|
||||
func TestDecodePayloadEncoding(t *testing.T) {
|
||||
t.Parallel()
|
||||
|
||||
@@ -105,3 +113,11 @@ func TestDecodePayloadEncoding(t *testing.T) {
|
||||
}
|
||||
})
|
||||
}
|
||||
|
||||
func BenchmarkDecodePayloadEncoding(b *testing.B) {
|
||||
b.ReportAllocs()
|
||||
data := []byte{0x5f}
|
||||
for i := 0; i < b.N; i++ {
|
||||
_, _ = varsig.DecodePayloadEncoding(bytes.NewReader(data), varsig.Version1)
|
||||
}
|
||||
}
|
||||
|
||||
8
ecdsa.go
8
ecdsa.go
@@ -2,8 +2,8 @@ package varsig
|
||||
|
||||
// Stub
|
||||
const (
|
||||
SignAlgorithmECDSASecp256k1 SignAlgorithm = 0xe7
|
||||
SignAlgorithmECDSAP256 SignAlgorithm = 0x1200
|
||||
SignAlgorithmECDSAP384 SignAlgorithm = 0x1201
|
||||
SignAlgorithmECDSAP521 SignAlgorithm = 0x1202
|
||||
DiscriminatorECDSASecp256k1 Discriminator = 0xe7
|
||||
DiscriminatorECDSAP256 Discriminator = 0x1200
|
||||
DiscriminatorECDSAP384 Discriminator = 0x1201
|
||||
DiscriminatorECDSAP521 Discriminator = 0x1202
|
||||
)
|
||||
|
||||
48
eddsa.go
48
eddsa.go
@@ -8,14 +8,19 @@ import (
|
||||
"github.com/multiformats/go-multicodec"
|
||||
)
|
||||
|
||||
// Constants containing multicodec.Code values that specify EdDSA signatures.
|
||||
const (
|
||||
SignAlgorithmEdDSA = SignAlgorithm(multicodec.Ed25519Pub)
|
||||
SignAlgorithmEd25519 = SignAlgorithm(multicodec.Ed25519Pub)
|
||||
SignAlgorithmEd448 = SignAlgorithm(multicodec.Ed448Pub)
|
||||
DiscriminatorEdDSA = Discriminator(multicodec.Ed25519Pub)
|
||||
DiscriminatorEd25519 = Discriminator(multicodec.Ed25519Pub)
|
||||
DiscriminatorEd448 = Discriminator(multicodec.Ed448Pub)
|
||||
)
|
||||
|
||||
// EdDSACurve are multicodec.Code values that specify which Edwards curve
|
||||
// is used when generating the signature.
|
||||
type EdDSACurve uint64
|
||||
|
||||
// Constants describing the multicodec.Code for each specific Edwards
|
||||
// curve that can be encoded into a Varsig.
|
||||
const (
|
||||
CurveEd25519 = EdDSACurve(multicodec.Ed25519Pub)
|
||||
CurveEd448 = EdDSACurve(multicodec.Ed448Pub)
|
||||
@@ -23,6 +28,8 @@ const (
|
||||
|
||||
var _ Varsig = (*EdDSAVarsig)(nil)
|
||||
|
||||
// EdDSAVarsig is a varsig that encodes the parameters required to describe
|
||||
// an EdDSA signature.
|
||||
type EdDSAVarsig struct {
|
||||
varsig[EdDSAVarsig]
|
||||
|
||||
@@ -30,27 +37,29 @@ type EdDSAVarsig struct {
|
||||
hashAlg HashAlgorithm
|
||||
}
|
||||
|
||||
// NewEdDSAVarsig creates and validates an EdDSA varsig with the provided
|
||||
// curve, hash algorithm and payload encoding.
|
||||
func NewEdDSAVarsig(curve EdDSACurve, hashAlgorithm HashAlgorithm, payloadEncoding PayloadEncoding, opts ...Option) (*EdDSAVarsig, error) {
|
||||
options := newOptions(opts...)
|
||||
|
||||
var (
|
||||
vers = Version1
|
||||
signAlg = SignAlgorithmEdDSA
|
||||
sig = []byte{}
|
||||
vers = Version1
|
||||
disc = DiscriminatorEdDSA
|
||||
sig = []byte{}
|
||||
)
|
||||
|
||||
if options.ForceVersion0() {
|
||||
vers = Version0
|
||||
signAlg = SignAlgorithm(curve)
|
||||
disc = Discriminator(curve)
|
||||
sig = options.Signature()
|
||||
}
|
||||
|
||||
v := &EdDSAVarsig{
|
||||
varsig: varsig[EdDSAVarsig]{
|
||||
vers: vers,
|
||||
signAlg: signAlg,
|
||||
payEnc: payloadEncoding,
|
||||
sig: sig,
|
||||
vers: vers,
|
||||
disc: disc,
|
||||
payEnc: payloadEncoding,
|
||||
sig: sig,
|
||||
},
|
||||
curve: curve,
|
||||
hashAlg: hashAlgorithm,
|
||||
@@ -59,14 +68,18 @@ func NewEdDSAVarsig(curve EdDSACurve, hashAlgorithm HashAlgorithm, payloadEncodi
|
||||
return v.validateSig(v, ed25519.PrivateKeySize)
|
||||
}
|
||||
|
||||
// Curve returns the Edwards curve used to generate the EdDSA signature.
|
||||
func (v *EdDSAVarsig) Curve() EdDSACurve {
|
||||
return v.curve
|
||||
}
|
||||
|
||||
// HashAlgorithm returns the multicodec.Code describing the hash algorithm
|
||||
// used to hash the payload content before the signature is generated.
|
||||
func (v *EdDSAVarsig) HashAlgorithm() HashAlgorithm {
|
||||
return v.hashAlg
|
||||
}
|
||||
|
||||
// Encode returns the encoded byte format of the EdDSAVarsig.
|
||||
func (v EdDSAVarsig) Encode() []byte {
|
||||
buf := v.encode()
|
||||
|
||||
@@ -81,8 +94,8 @@ func (v EdDSAVarsig) Encode() []byte {
|
||||
return buf
|
||||
}
|
||||
|
||||
func decodeEd25519(r *bytes.Reader, vers Version, signAlg SignAlgorithm) (Varsig, error) {
|
||||
curve := uint64(signAlg)
|
||||
func decodeEd25519(r *bytes.Reader, vers Version, disc Discriminator) (Varsig, error) {
|
||||
curve := uint64(disc)
|
||||
if vers != Version0 {
|
||||
u, err := binary.ReadUvarint(r)
|
||||
|
||||
@@ -100,8 +113,8 @@ func decodeEd25519(r *bytes.Reader, vers Version, signAlg SignAlgorithm) (Varsig
|
||||
|
||||
v := &EdDSAVarsig{
|
||||
varsig: varsig[EdDSAVarsig]{
|
||||
vers: vers,
|
||||
signAlg: signAlg,
|
||||
vers: vers,
|
||||
disc: disc,
|
||||
},
|
||||
curve: EdDSACurve(curve),
|
||||
hashAlg: HashAlgorithm(hashAlg),
|
||||
@@ -109,8 +122,3 @@ func decodeEd25519(r *bytes.Reader, vers Version, signAlg SignAlgorithm) (Varsig
|
||||
|
||||
return v.decodePayEncAndSig(r, v, ed25519.PrivateKeySize)
|
||||
}
|
||||
|
||||
// TODO: remove this when parseEd25519 is added to the DefaultRegistry.
|
||||
func Junk() {
|
||||
_, _ = decodeEd25519(nil, 0, 0)
|
||||
}
|
||||
|
||||
@@ -7,7 +7,7 @@ import (
|
||||
"github.com/stretchr/testify/assert"
|
||||
"github.com/stretchr/testify/require"
|
||||
|
||||
"github.com/selesy/go-varsig"
|
||||
"github.com/ucan-wg/go-varsig"
|
||||
)
|
||||
|
||||
func TestDecodeEd25519(t *testing.T) {
|
||||
@@ -31,7 +31,7 @@ func TestDecodeEd25519(t *testing.T) {
|
||||
require.NoError(t, err)
|
||||
require.NotNil(t, v)
|
||||
assert.Equal(t, varsig.Version0, v.Version())
|
||||
assert.Equal(t, varsig.SignAlgorithmEd25519, v.SignatureAlgorithm())
|
||||
assert.Equal(t, varsig.DiscriminatorEd25519, v.Discriminator())
|
||||
assert.Equal(t, varsig.PayloadEncodingDAGCBOR, v.PayloadEncoding())
|
||||
assert.Len(t, v.Signature(), 64)
|
||||
|
||||
|
||||
4
error.go
4
error.go
@@ -30,9 +30,9 @@ var ErrUnknownHashAlgorithm = errors.New("unknown hash algorithm")
|
||||
// for this field may vary based on the varsig version.
|
||||
var ErrUnsupportedPayloadEncoding = errors.New("unsupported payload encoding")
|
||||
|
||||
// ErrUnknownSignAlgorith is returned when the Registry doesn't have a
|
||||
// ErrUnknowndiscorith is returned when the Registry doesn't have a
|
||||
// parsing function for the decoded signing algorithm.
|
||||
var ErrUnknownSignAlgorithm = errors.New("unknown signing algorithm")
|
||||
var ErrUnknownDiscriminator = errors.New("unknown signing algorithm")
|
||||
|
||||
// ErrUnsupportedVersion is returned when an unsupported varsig version
|
||||
// field is present.
|
||||
|
||||
2
go.mod
2
go.mod
@@ -1,4 +1,4 @@
|
||||
module github.com/selesy/go-varsig
|
||||
module github.com/ucan-wg/go-varsig
|
||||
|
||||
go 1.24.4
|
||||
|
||||
|
||||
43
registry.go
43
registry.go
@@ -6,8 +6,11 @@ import (
|
||||
"fmt"
|
||||
)
|
||||
|
||||
// Version represents which version of the vasig specification was used
|
||||
// to produce Varsig value.
|
||||
type Version uint64
|
||||
|
||||
// Constancts for the existing varsig specifications
|
||||
const (
|
||||
Version0 Version = 0
|
||||
Version1 Version = 1
|
||||
@@ -15,22 +18,22 @@ const (
|
||||
|
||||
// DecodeFunc is a function that parses the varsig representing a specific
|
||||
// signing algorithm.
|
||||
type DecodeFunc func(*bytes.Reader, Version, SignAlgorithm) (Varsig, error)
|
||||
type DecodeFunc func(*bytes.Reader, Version, Discriminator) (Varsig, error)
|
||||
|
||||
// Registry contains a mapping between known signing algorithms, and
|
||||
// functions that can parse varsigs for that signing algorithm.
|
||||
type Registry map[SignAlgorithm]DecodeFunc
|
||||
type Registry map[Discriminator]DecodeFunc
|
||||
|
||||
// DefaultRegistry provides a Registry containing the mappings for the
|
||||
// signing algorithms which have an implementation within this library.
|
||||
func DefaultRegistry() Registry {
|
||||
return map[SignAlgorithm]DecodeFunc{
|
||||
SignAlgorithmRSA: decodeRSA,
|
||||
SignAlgorithmEdDSA: decodeEd25519,
|
||||
SignAlgorithmEd448: decodeEd25519,
|
||||
SignAlgorithmECDSAP256: notYetImplementedVarsigDecoder,
|
||||
SignAlgorithmECDSASecp256k1: notYetImplementedVarsigDecoder,
|
||||
SignAlgorithmECDSAP521: notYetImplementedVarsigDecoder,
|
||||
return map[Discriminator]DecodeFunc{
|
||||
DiscriminatorRSA: decodeRSA,
|
||||
DiscriminatorEdDSA: decodeEd25519,
|
||||
DiscriminatorEd448: decodeEd25519,
|
||||
DiscriminatorECDSAP256: notYetImplementedVarsigDecoder,
|
||||
DiscriminatorECDSASecp256k1: notYetImplementedVarsigDecoder,
|
||||
DiscriminatorECDSAP521: notYetImplementedVarsigDecoder,
|
||||
}
|
||||
}
|
||||
|
||||
@@ -41,7 +44,7 @@ func NewRegistry() Registry {
|
||||
|
||||
// Register allows new mappings between a signing algorithm and its parsing
|
||||
// function to the Registry.
|
||||
func (rs Registry) Register(alg SignAlgorithm, decodeFunc DecodeFunc) {
|
||||
func (rs Registry) Register(alg Discriminator, decodeFunc DecodeFunc) {
|
||||
rs[alg] = decodeFunc
|
||||
}
|
||||
|
||||
@@ -63,20 +66,20 @@ func (rs Registry) DecodeStream(r *bytes.Reader) (Varsig, error) {
|
||||
return nil, fmt.Errorf("%w: expected %d, got %d", ErrBadPrefix, Prefix, pre)
|
||||
}
|
||||
|
||||
vers, signAlg, err := rs.decodeVersAndSignAlg(r)
|
||||
vers, disc, err := rs.decodeVersAnddisc(r)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
decodeFunc, ok := rs[SignAlgorithm(signAlg)]
|
||||
decodeFunc, ok := rs[Discriminator(disc)]
|
||||
if !ok {
|
||||
return nil, fmt.Errorf("%w: %x", ErrUnknownSignAlgorithm, signAlg)
|
||||
return nil, fmt.Errorf("%w: %x", ErrUnknownDiscriminator, disc)
|
||||
}
|
||||
|
||||
return decodeFunc(r, vers, signAlg)
|
||||
return decodeFunc(r, vers, disc)
|
||||
}
|
||||
|
||||
func (rs Registry) decodeVersAndSignAlg(r *bytes.Reader) (Version, SignAlgorithm, error) {
|
||||
func (rs Registry) decodeVersAnddisc(r *bytes.Reader) (Version, Discriminator, error) {
|
||||
vers, err := binary.ReadUvarint(r)
|
||||
if err != nil {
|
||||
return Version(vers), 0, err
|
||||
@@ -87,14 +90,14 @@ func (rs Registry) decodeVersAndSignAlg(r *bytes.Reader) (Version, SignAlgorithm
|
||||
}
|
||||
|
||||
if vers >= 64 {
|
||||
return 0, SignAlgorithm(vers), nil
|
||||
return 0, Discriminator(vers), nil
|
||||
}
|
||||
|
||||
signAlg, err := binary.ReadUvarint(r)
|
||||
disc, err := binary.ReadUvarint(r)
|
||||
|
||||
return Version(vers), SignAlgorithm(signAlg), err
|
||||
return Version(vers), Discriminator(disc), err
|
||||
}
|
||||
|
||||
func notYetImplementedVarsigDecoder(_ *bytes.Reader, vers Version, signAlg SignAlgorithm) (Varsig, error) {
|
||||
return nil, fmt.Errorf("%w: Version: %d, SignAlgorithm: %x", ErrNotYetImplemented, vers, signAlg)
|
||||
func notYetImplementedVarsigDecoder(_ *bytes.Reader, vers Version, disc Discriminator) (Varsig, error) {
|
||||
return nil, fmt.Errorf("%w: Version: %d, Discriminator: %x", ErrNotYetImplemented, vers, disc)
|
||||
}
|
||||
|
||||
@@ -8,7 +8,7 @@ import (
|
||||
"github.com/stretchr/testify/assert"
|
||||
"github.com/stretchr/testify/require"
|
||||
|
||||
"github.com/selesy/go-varsig"
|
||||
"github.com/ucan-wg/go-varsig"
|
||||
)
|
||||
|
||||
func TestRegistry_Decode(t *testing.T) {
|
||||
@@ -25,7 +25,7 @@ func TestRegistry_Decode(t *testing.T) {
|
||||
vs, err := reg.DecodeStream(bytes.NewReader(data))
|
||||
require.NoError(t, err)
|
||||
assert.Equal(t, varsig.Version0, vs.Version())
|
||||
assert.Equal(t, testSignAlgorithm1, vs.SignatureAlgorithm())
|
||||
assert.Equal(t, testDiscriminator1, vs.Discriminator())
|
||||
})
|
||||
|
||||
t.Run("passes - v1", func(t *testing.T) {
|
||||
@@ -39,21 +39,21 @@ func TestRegistry_Decode(t *testing.T) {
|
||||
vs, err := reg.DecodeStream(bytes.NewReader(data))
|
||||
require.NoError(t, err)
|
||||
assert.Equal(t, varsig.Version1, vs.Version())
|
||||
assert.Equal(t, testSignAlgorithm1, vs.SignatureAlgorithm())
|
||||
assert.Equal(t, testDiscriminator1, vs.Discriminator())
|
||||
})
|
||||
}
|
||||
|
||||
const (
|
||||
testSignAlgorithm0 varsig.SignAlgorithm = 0x1000
|
||||
testSignAlgorithm1 varsig.SignAlgorithm = 0x1001
|
||||
testDiscriminator0 varsig.Discriminator = 0x1000
|
||||
testDiscriminator1 varsig.Discriminator = 0x1001
|
||||
)
|
||||
|
||||
func testRegistry(t *testing.T) varsig.Registry {
|
||||
t.Helper()
|
||||
|
||||
reg := varsig.NewRegistry()
|
||||
reg.Register(testSignAlgorithm0, testDecodeFunc(t))
|
||||
reg.Register(testSignAlgorithm1, testDecodeFunc(t))
|
||||
reg.Register(testDiscriminator0, testDecodeFunc(t))
|
||||
reg.Register(testDiscriminator1, testDecodeFunc(t))
|
||||
|
||||
return reg
|
||||
}
|
||||
@@ -61,10 +61,10 @@ func testRegistry(t *testing.T) varsig.Registry {
|
||||
func testDecodeFunc(t *testing.T) varsig.DecodeFunc {
|
||||
t.Helper()
|
||||
|
||||
return func(r *bytes.Reader, vers varsig.Version, signAlg varsig.SignAlgorithm) (varsig.Varsig, error) {
|
||||
return func(r *bytes.Reader, vers varsig.Version, disc varsig.Discriminator) (varsig.Varsig, error) {
|
||||
v := &testVarsig{
|
||||
vers: vers,
|
||||
signAlg: signAlg,
|
||||
vers: vers,
|
||||
disc: disc,
|
||||
}
|
||||
|
||||
return v, nil
|
||||
@@ -74,18 +74,18 @@ func testDecodeFunc(t *testing.T) varsig.DecodeFunc {
|
||||
var _ varsig.Varsig = (*testVarsig)(nil)
|
||||
|
||||
type testVarsig struct {
|
||||
vers varsig.Version
|
||||
signAlg varsig.SignAlgorithm
|
||||
payEnc varsig.PayloadEncoding
|
||||
sig []byte
|
||||
vers varsig.Version
|
||||
disc varsig.Discriminator
|
||||
payEnc varsig.PayloadEncoding
|
||||
sig []byte
|
||||
}
|
||||
|
||||
func (v *testVarsig) Version() varsig.Version {
|
||||
return v.vers
|
||||
}
|
||||
|
||||
func (v *testVarsig) SignatureAlgorithm() varsig.SignAlgorithm {
|
||||
return v.signAlg
|
||||
func (v *testVarsig) Discriminator() varsig.Discriminator {
|
||||
return v.disc
|
||||
}
|
||||
|
||||
func (v *testVarsig) PayloadEncoding() varsig.PayloadEncoding {
|
||||
|
||||
23
rsa.go
23
rsa.go
@@ -7,12 +7,13 @@ import (
|
||||
"github.com/multiformats/go-multicodec"
|
||||
)
|
||||
|
||||
const SignAlgorithmRSA = SignAlgorithm(multicodec.RsaPub)
|
||||
// DiscriminatorRSA is the multicodec.Code specifying an RSA signature.
|
||||
const DiscriminatorRSA = Discriminator(multicodec.RsaPub)
|
||||
|
||||
var _ Varsig = (*RSAVarsig)(nil)
|
||||
|
||||
// RSAVarsig is a varsig that encodes the parameters required to describe
|
||||
// and RSA signature.
|
||||
// an RSA signature.
|
||||
type RSAVarsig struct {
|
||||
varsig[RSAVarsig]
|
||||
hashAlg HashAlgorithm
|
||||
@@ -20,7 +21,7 @@ type RSAVarsig struct {
|
||||
}
|
||||
|
||||
// NewRSAVarsig creates and validates an RSA varsig with the provided
|
||||
// parameters.
|
||||
// hash algorithm, key length and payload encoding.
|
||||
func NewRSAVarsig(hashAlgorithm HashAlgorithm, keyLength uint64, payloadEncoding PayloadEncoding, opts ...Option) (*RSAVarsig, error) {
|
||||
options := newOptions(opts...)
|
||||
|
||||
@@ -36,10 +37,10 @@ func NewRSAVarsig(hashAlgorithm HashAlgorithm, keyLength uint64, payloadEncoding
|
||||
|
||||
v := &RSAVarsig{
|
||||
varsig: varsig[RSAVarsig]{
|
||||
vers: vers,
|
||||
signAlg: SignAlgorithmRSA,
|
||||
payEnc: payloadEncoding,
|
||||
sig: sig,
|
||||
vers: vers,
|
||||
disc: DiscriminatorRSA,
|
||||
payEnc: payloadEncoding,
|
||||
sig: sig,
|
||||
},
|
||||
hashAlg: hashAlgorithm,
|
||||
sigLen: keyLength,
|
||||
@@ -48,7 +49,7 @@ func NewRSAVarsig(hashAlgorithm HashAlgorithm, keyLength uint64, payloadEncoding
|
||||
return v.validateSig(v, v.sigLen)
|
||||
}
|
||||
|
||||
// Encode returns the encoded byte formation of the RSAVarsig.
|
||||
// Encode returns the encoded byte format of the RSAVarsig.
|
||||
func (v RSAVarsig) Encode() []byte {
|
||||
buf := v.encode()
|
||||
buf = binary.AppendUvarint(buf, uint64(v.hashAlg))
|
||||
@@ -70,7 +71,7 @@ func (v *RSAVarsig) KeyLength() uint64 {
|
||||
return v.sigLen
|
||||
}
|
||||
|
||||
func decodeRSA(r *bytes.Reader, vers Version, signAlg SignAlgorithm) (Varsig, error) {
|
||||
func decodeRSA(r *bytes.Reader, vers Version, disc Discriminator) (Varsig, error) {
|
||||
hashAlg, err := DecodeHashAlgorithm(r)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
@@ -83,8 +84,8 @@ func decodeRSA(r *bytes.Reader, vers Version, signAlg SignAlgorithm) (Varsig, er
|
||||
|
||||
vs := &RSAVarsig{
|
||||
varsig: varsig[RSAVarsig]{
|
||||
vers: vers,
|
||||
signAlg: signAlg,
|
||||
vers: vers,
|
||||
disc: disc,
|
||||
},
|
||||
hashAlg: HashAlgorithm(hashAlg),
|
||||
sigLen: sigLen,
|
||||
|
||||
@@ -7,7 +7,7 @@ import (
|
||||
"github.com/stretchr/testify/assert"
|
||||
"github.com/stretchr/testify/require"
|
||||
|
||||
"github.com/selesy/go-varsig"
|
||||
"github.com/ucan-wg/go-varsig"
|
||||
)
|
||||
|
||||
func TestRSAVarsig(t *testing.T) {
|
||||
@@ -30,7 +30,7 @@ func TestRSAVarsig(t *testing.T) {
|
||||
require.True(t, ok)
|
||||
|
||||
assert.Equal(t, varsig.Version1, rsaVs.Version())
|
||||
assert.Equal(t, varsig.SignAlgorithmRSA, rsaVs.SignatureAlgorithm())
|
||||
assert.Equal(t, varsig.DiscriminatorRSA, rsaVs.Discriminator())
|
||||
assert.Equal(t, varsig.HashAlgorithmSHA256, rsaVs.HashAlgorithm())
|
||||
assert.Equal(t, varsig.PayloadEncodingDAGCBOR, rsaVs.PayloadEncoding())
|
||||
assert.Equal(t, uint64(keyLen), rsaVs.KeyLength())
|
||||
@@ -73,7 +73,7 @@ func TestUCANExample(t *testing.T) {
|
||||
require.True(t, ok)
|
||||
|
||||
assert.Equal(t, varsig.Version0, rsaVs.Version())
|
||||
assert.Equal(t, varsig.SignAlgorithmRSA, rsaVs.SignatureAlgorithm())
|
||||
assert.Equal(t, varsig.DiscriminatorRSA, rsaVs.Discriminator())
|
||||
assert.Equal(t, varsig.HashAlgorithmSHA256, rsaVs.HashAlgorithm())
|
||||
assert.Equal(t, varsig.PayloadEncodingDAGCBOR, rsaVs.PayloadEncoding())
|
||||
assert.Equal(t, uint64(keyLen), rsaVs.KeyLength())
|
||||
|
||||
38
varsig.go
38
varsig.go
@@ -1,21 +1,20 @@
|
||||
// Package varsig implements v0.1.0 of the [Varsig specification].
|
||||
// Package varsig implements v1.0.0 of the [Varsig specification] with
|
||||
// limited support for varsig < v1. This is primarily in support of the
|
||||
// UCAN v1.0.0 specification and will be deprecated in the future.
|
||||
//
|
||||
// # Algorithm naming
|
||||
// # Common algorithm naming
|
||||
//
|
||||
// While there is no strict need for compatibility with JWA/JWT/JWE/JWS,
|
||||
// all attempts are made to keep the algorithm names here consistent with
|
||||
// the table provided in [section 3.1] of RFC7518 titled "JSON Web Algorithms.
|
||||
// In cases where there is no equivalent name for an algorithm, a best-
|
||||
// effort attempt at creating a name in the spirit of that specification is
|
||||
// made.
|
||||
// list made available at the [IANA Registry] titled "JSON Web Signature
|
||||
// and Encryption Algorithms" (JOSE.)
|
||||
//
|
||||
// It should also be noted that algorithm in this context might in fact be
|
||||
// a pseudonym - for cryptographical signing algorithms that require the
|
||||
// signed data to be hashed first, these names commonly refer to the
|
||||
// combination of that signing algorithm and the hash algorithm.
|
||||
//
|
||||
// [section 3.1]: https://datatracker.ietf.org/doc/html/rfc7518#section-3.1
|
||||
//
|
||||
// [IANA Registry]]: https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms
|
||||
// [Varsig Specification]: https://github.com/ChainAgnostic/varsig
|
||||
package varsig
|
||||
|
||||
@@ -23,19 +22,14 @@ import (
|
||||
"bytes"
|
||||
"encoding/binary"
|
||||
"io"
|
||||
|
||||
"github.com/multiformats/go-multicodec"
|
||||
)
|
||||
|
||||
// Prefix is the multicodec.Code for the varsig's varuint prefix byte.
|
||||
const Prefix = uint64(multicodec.Varsig)
|
||||
|
||||
// Varsig represents types that describe how a signature was generated
|
||||
// and thus how to interpret the signature and verify the signed data.
|
||||
type Varsig interface {
|
||||
// accessors for fields that are common to all varsig
|
||||
Version() Version
|
||||
SignatureAlgorithm() SignAlgorithm
|
||||
Discriminator() Discriminator
|
||||
PayloadEncoding() PayloadEncoding
|
||||
Signature() []byte
|
||||
|
||||
@@ -56,10 +50,10 @@ func DecodeStream(r *bytes.Reader) (Varsig, error) {
|
||||
}
|
||||
|
||||
type varsig[T Varsig] struct {
|
||||
vers Version
|
||||
signAlg SignAlgorithm
|
||||
payEnc PayloadEncoding
|
||||
sig []byte
|
||||
vers Version
|
||||
disc Discriminator
|
||||
payEnc PayloadEncoding
|
||||
sig []byte
|
||||
}
|
||||
|
||||
// Version returns the varsig's version field.
|
||||
@@ -67,10 +61,10 @@ func (v varsig[_]) Version() Version {
|
||||
return v.vers
|
||||
}
|
||||
|
||||
// SignatureAlgorithm returns the algorithm used to produce corresponding
|
||||
// Discriminator returns the algorithm used to produce corresponding
|
||||
// signature.
|
||||
func (v varsig[_]) SignatureAlgorithm() SignAlgorithm {
|
||||
return v.signAlg
|
||||
func (v varsig[_]) Discriminator() Discriminator {
|
||||
return v.disc
|
||||
}
|
||||
|
||||
// PayloadEncoding returns the codec that was used to encode the signed
|
||||
@@ -95,7 +89,7 @@ func (v *varsig[_]) encode() []byte {
|
||||
buf = binary.AppendUvarint(buf, uint64(Version1))
|
||||
}
|
||||
|
||||
buf = binary.AppendUvarint(buf, uint64(v.signAlg))
|
||||
buf = binary.AppendUvarint(buf, uint64(v.disc))
|
||||
|
||||
return buf
|
||||
}
|
||||
|
||||
@@ -9,7 +9,7 @@ import (
|
||||
"github.com/stretchr/testify/assert"
|
||||
"github.com/stretchr/testify/require"
|
||||
|
||||
"github.com/selesy/go-varsig"
|
||||
"github.com/ucan-wg/go-varsig"
|
||||
)
|
||||
|
||||
func TestDecode(t *testing.T) {
|
||||
@@ -66,7 +66,7 @@ func TestDecode(t *testing.T) {
|
||||
require.NoError(t, err)
|
||||
|
||||
vs, err := varsig.Decode(data)
|
||||
require.ErrorIs(t, err, varsig.ErrUnknownSignAlgorithm)
|
||||
require.ErrorIs(t, err, varsig.ErrUnknownDiscriminator)
|
||||
assert.Nil(t, vs)
|
||||
})
|
||||
|
||||
@@ -77,7 +77,7 @@ func TestDecode(t *testing.T) {
|
||||
require.NoError(t, err)
|
||||
|
||||
vs, err := varsig.Decode(data)
|
||||
require.ErrorIs(t, err, varsig.ErrUnknownSignAlgorithm)
|
||||
require.ErrorIs(t, err, varsig.ErrUnknownDiscriminator)
|
||||
assert.Nil(t, vs)
|
||||
})
|
||||
|
||||
@@ -180,7 +180,7 @@ func roundTrip[T varsig.Varsig](t *testing.T, in T, expEncHex string) T {
|
||||
}
|
||||
|
||||
assert.Equal(t, in.Version(), out.Version())
|
||||
assert.Equal(t, in.SignatureAlgorithm(), out.SignatureAlgorithm())
|
||||
assert.Equal(t, in.Discriminator(), out.Discriminator())
|
||||
assert.Equal(t, in.PayloadEncoding(), out.PayloadEncoding())
|
||||
assert.Equal(t, in.Signature(), out.Signature())
|
||||
|
||||
|
||||
Reference in New Issue
Block a user