Skip to content

Remove cose.Verify1 and update cose.Sign1#67

Merged
yogeshbdeshpande merged 4 commits intoveraison:mainfrom
qmuntal:cos_sign1-oneshot
May 20, 2022
Merged

Remove cose.Verify1 and update cose.Sign1#67
yogeshbdeshpande merged 4 commits intoveraison:mainfrom
qmuntal:cos_sign1-oneshot

Conversation

@qmuntal
Copy link
Copy Markdown
Member

@qmuntal qmuntal commented May 16, 2022

This PR implements what has been discussed at #64:

  • Remove cose.Verify1. It is not clear which use case does it cover, as one normally wants to have the decoded payload, not only verify a message, but this function only does the later.
  • Update cose.Sign1 to also perform the encoding of the message and return the encoded bytes instead of a Sign1Message struct.

Closes #64

Signed-off-by: qmuntal qmuntaldiaz@microsoft.com

Signed-off-by: qmuntal <qmuntaldiaz@microsoft.com>
Copy link
Copy Markdown
Contributor

@thomas-fossati thomas-fossati left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

Co-authored-by: Shiwei Zhang <shizh@microsoft.com>
Signed-off-by: qmuntal <qmuntaldiaz@microsoft.com>
@qmuntal qmuntal force-pushed the cos_sign1-oneshot branch from e8754a7 to 02a1b14 Compare May 18, 2022 21:53
Signed-off-by: qmuntal <qmuntaldiaz@microsoft.com>
@qmuntal qmuntal requested a review from shizhMSFT May 18, 2022 21:54
Signed-off-by: qmuntal <qmuntaldiaz@microsoft.com>
@qmuntal qmuntal requested a review from shizhMSFT May 19, 2022 09:25
Copy link
Copy Markdown
Contributor

@yogeshbdeshpande yogeshbdeshpande left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Copy link
Copy Markdown
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@yogeshbdeshpande yogeshbdeshpande merged commit cb68acd into veraison:main May 20, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Make Sign1 and Verify1 difficult to misuse

4 participants