secure-systems-lab / dsse

A specification for signing methods and formats used by Secure Systems Lab projects.

https://dsse.dev

secure-systems-lab/dsse Issues

Extending DSSE Signatures
Updated 3 months ago22
What should be listed as parameters for signature in the protocol?
Updated 3 months ago
Reducing overhead for payload encoding
Updated 9 months ago15
Document rationale for DSSE vs COSE etc.
Updated 9 months ago4
DSSE Extension for Timestamping and PKI Support
Updated a year ago
DSSE Maintainers
Updated a year ago4
Process to enhance DSSE
Updated a year ago2
Add field for certificate chains, or explain alternative solution
Updated a year ago26
Design: Where to put timestamps in envelope?
Updated a year ago23
reconsider threshold (aka multi-sig) verification
Updated a year ago7
Feature: generate DSSE language clients from the protobuf
Updated 2 years ago4
Have you considered signing a hash digest of the payload instead of the payload itself?
Closed 2 years ago3
Specify revised public key metadata formats
Updated 2 years ago2
"DSSE Multi-signature Verification" protocol lacks detail about threshold verification
Closed 2 years ago3
Specify DSSE Signature encoding in the Protocol or as a Parameter
Updated 2 years ago6
Document the sigstore/sigstore client libraries?
Closed 3 years ago3
Add envelope version
Updated 3 years ago8
How to verify an envelope properly?
Closed 3 years ago5
Clarify design philosphy
Updated 3 years ago
Extending DSSE to accept optional signature specific metadata
Updated 3 years ago26
Envelope headers
Closed 3 years ago6
What comes before v1.0?
Closed 3 years ago12
Use a simpler PAE
Closed 3 years ago11
Choose a more specific name than "signing-spec"
Closed 3 years ago12
Create a reference implementation and test vectors
Closed 3 years ago4
Communicating signing algorithm and parameters
Closed 3 years ago10
Add data structure and convention associating multiple messages with an artifact
Closed 3 years ago4
Wrong signature in example?
Closed 3 years ago1
Relax URI requirement on payloadType?
Closed 3 years ago5
Define spec in protobuf
Closed 3 years ago
Re-think use of "Backwards Compatibility" and replace with something more appropriate
Closed 3 years ago4
What is secure-systems-lab/signing-spec?
Closed 3 years ago20
Backwards compatible `payloadType` should be an exact match
Closed 4 years ago3
Specify the other fields of `signature`
Closed 4 years ago1
Clarify encoding of payload type in PAE
Closed 4 years ago1