48 lines
1.8 KiB
Go
48 lines
1.8 KiB
Go
package signed
|
|
|
|
import "github.com/theupdateframework/notary/tuf/data"
|
|
|
|
// KeyService provides management of keys locally. It will never
|
|
// accept or provide private keys. Communication between the KeyService
|
|
// and a SigningService happen behind the Create function.
|
|
type KeyService interface {
|
|
// Create issues a new key pair and is responsible for loading
|
|
// the private key into the appropriate signing service.
|
|
Create(role data.RoleName, gun data.GUN, algorithm string) (data.PublicKey, error)
|
|
|
|
// AddKey adds a private key to the specified role and gun
|
|
AddKey(role data.RoleName, gun data.GUN, key data.PrivateKey) error
|
|
|
|
// GetKey retrieves the public key if present, otherwise it returns nil
|
|
GetKey(keyID string) data.PublicKey
|
|
|
|
// GetPrivateKey retrieves the private key and role if present and retrievable,
|
|
// otherwise it returns nil and an error
|
|
GetPrivateKey(keyID string) (data.PrivateKey, data.RoleName, error)
|
|
|
|
// RemoveKey deletes the specified key, and returns an error only if the key
|
|
// removal fails. If the key doesn't exist, no error should be returned.
|
|
RemoveKey(keyID string) error
|
|
|
|
// ListKeys returns a list of key IDs for the role, or an empty list or
|
|
// nil if there are no keys.
|
|
ListKeys(role data.RoleName) []string
|
|
|
|
// ListAllKeys returns a map of all available signing key IDs to role, or
|
|
// an empty map or nil if there are no keys.
|
|
ListAllKeys() map[string]data.RoleName
|
|
}
|
|
|
|
// CryptoService is deprecated and all instances of its use should be
|
|
// replaced with KeyService
|
|
type CryptoService interface {
|
|
KeyService
|
|
}
|
|
|
|
// Verifier defines an interface for verfying signatures. An implementer
|
|
// of this interface should verify signatures for one and only one
|
|
// signing scheme.
|
|
type Verifier interface {
|
|
Verify(key data.PublicKey, sig []byte, msg []byte) error
|
|
}
|