Skip to content

Support more signing cert signing algorithms in verification #1439

@jku

Description

@jku

sigstore-python chooses to use a specific signing algorithm for signing with the signing certificate: this seems like a fine decision.

Even for verifying the signing certificate signature, sigstore clients are not required to support more than one key type... but it would make sense to support the low hanging fruit in https://github.com/sigstore/architecture-docs/blob/main/algorithm-registry.md (IOW the algorithms supported by cryptography but not yet by sigstore.verify: RSA, EdDSA).

This requires some changes in verifier.py:

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions