signature.hpp

Go to the documentation of this file.

#pragma once

 
#include <pulp/authoring_capsule/status.hpp>
#include <pulp/runtime/result.hpp>
 
#include <cstdint>
#include <span>
#include <string>
#include <vector>
 
namespace pulp::authoring_capsule {
 
struct SignatureEnvelope {
    std::string signer_id;
    std::string algorithm;
    std::vector<std::uint8_t> signature;
    std::string signed_payload_digest;
};

struct VersionFloor {
    std::string product;
    std::string min_version;
};
 
class SignatureVerifier {
public:
    virtual ~SignatureVerifier() = default;

    virtual runtime::Result<void, CapsuleError>
    verify(const SignatureEnvelope& envelope, std::string_view computed_revision_digest) const = 0;

    virtual bool is_revoked(std::string_view signer_id) const = 0;
 
    virtual runtime::Result<void, CapsuleError> check_floor(const VersionFloor& floor) const = 0;
};
 
}  // namespace pulp::authoring_capsule