Harden reusable keychain API
This commit is contained in:
parent
4013c868aa
commit
b6ffcde54c
6 changed files with 410 additions and 33 deletions
|
|
@ -456,7 +456,8 @@ The keychain follows a sigchain model documented in
|
|||
signed by an admin key from the previously accepted reduced view. This is the
|
||||
geth analogue of verifying `git-skm` allowed-signers changes from a prior
|
||||
trusted state. The reusable mechanics live in the `geth-keychain` crate,
|
||||
including allowed-signers projection, replay verification, and an appendable
|
||||
including application-specific signature profiles, allowed-signers projection,
|
||||
replay verification through a caller-provided verifier trait, and an appendable
|
||||
JSONL sigchain file format suitable for static hosting with HTTP caching/range
|
||||
requests.
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue