Synchronous, "pure" signature verification should be possible #3

Activity

1. glasserc commented on Oct 22, 2019

   

   glasserc

   on Oct 22, 2019

   Last edited by glasserc

   ContributorAuthor

   More actions

   Here's a potential API:

   class SignatureVerifier:
       "Pure verifier"
       def __init__(self, cache):
           self.cache = cache
   
       def verify(self, data, signature, cert_chain):
           "cert_chain is bytes, retrieved for an x5u"
           ending_cert = self.cache.get(cert_chain)
           if not ending_cert:
               ending_cert = self.validate_cert_chain(cert_chain)
               self.cache.set(cert_chain, ending_cert)
   
           return self._verify_signature(data, signature, ending_cert)
   
       def _verify_signature(self, data, signature,  cert):
           "Private function. Do not call this from outside this class"
           pass
   
   class X5UVerifier:
       "Network-attached verifier"
       def __init__(self, network_cache, signature_verifier):
           self.network_cache = network_cache
           self.signature_verifier = signature_verifier
   
       async def verify_signature(self, data, signature, x5u):
           pass

   👍React with 👍1Reacted by Mathieu Leplatre