signed

type CryptoService interface {
	KeyService
}

type ECDSAVerifier struct{}

type Ed25519 struct {
	// contains filtered or unexported fields
}

type Ed25519Verifier struct{}

type ErrExpired struct {
	Role    data.RoleName
	Expired string
}

type ErrInsufficientSignatures struct {
	FoundKeys     int
	NeededKeys    int
	MissingKeyIDs []string
}

type ErrInvalidKeyID struct{}

type ErrInvalidKeyLength struct {
	// contains filtered or unexported fields
}

type ErrInvalidKeyType struct{}

type ErrLowVersion struct {
	Actual  int
	Current int
}

type ErrNoKeys struct {
	KeyIDs []string
}

type ErrRoleThreshold struct {
	Msg string
}

type KeyService interface {
	// Create issues a new key pair and is responsible for loading
	// the private key into the appropriate signing service.
	Create(role data.RoleName, gun data.GUN, algorithm string) (data.PublicKey, error)

	// AddKey adds a private key to the specified role and gun
	AddKey(role data.RoleName, gun data.GUN, key data.PrivateKey) error

	// GetKey retrieves the public key if present, otherwise it returns nil
	GetKey(keyID string) data.PublicKey

	// GetPrivateKey retrieves the private key and role if present and retrievable,
	// otherwise it returns nil and an error
	GetPrivateKey(keyID string) (data.PrivateKey, data.RoleName, error)

	// RemoveKey deletes the specified key, and returns an error only if the key
	// removal fails. If the key doesn't exist, no error should be returned.
	RemoveKey(keyID string) error

	// ListKeys returns a list of key IDs for the role, or an empty list or
	// nil if there are no keys.
	ListKeys(role data.RoleName) []string

	// ListAllKeys returns a map of all available signing key IDs to role, or
	// an empty map or nil if there are no keys.
	ListAllKeys() map[string]data.RoleName
}

type RSAPKCS1v15Verifier struct{}

type RSAPSSVerifier struct{}

type RSAPyCryptoVerifier struct{}

type Verifier interface {
	Verify(key data.PublicKey, sig []byte, msg []byte) error
}