JackDoan 6c6bf5e486 cert: Check an ML-KEM-1024 public key with the FIPS 203 modulus check alone, without expanding it 6 дней назад
..
p256 f8587956ba add sshd.sandbox_dir config option (#1622) 6 месяцев назад
Makefile 08ac65362e Cert interface (#1212) 2 лет назад
README.md d97ed57a19 V2 certificate format (#1216) 1 год назад
asn1.go d97ed57a19 V2 certificate format (#1216) 1 год назад
ca_pool.go 656164b259 cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM 6 дней назад
ca_pool_test.go a82a8dc547 don't panic on bad ed25519 key lengths (#1601) 5 месяцев назад
cert.go 1a8fb8d67e cert: Add version 3 certificates, a v2 certificate extended with ML-KEM-1024 or ML-DSA-87 keys and an ML-DSA-87 CA signature 6 дней назад
cert_v1.go a82a8dc547 don't panic on bad ed25519 key lengths (#1601) 5 месяцев назад
cert_v1.pb.go 08ac65362e Cert interface (#1212) 2 лет назад
cert_v1.proto 08ac65362e Cert interface (#1212) 2 лет назад
cert_v1_test.go 2f71d6b22d Ensure pubkey coherency when rehydrating a handshake cert (#1566) 9 месяцев назад
cert_v2.asn1 d97ed57a19 V2 certificate format (#1216) 1 год назад
cert_v2.go a82a8dc547 don't panic on bad ed25519 key lengths (#1601) 5 месяцев назад
cert_v2_test.go 2f71d6b22d Ensure pubkey coherency when rehydrating a handshake cert (#1566) 9 месяцев назад
cert_v3.go 656164b259 cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM 6 дней назад
cert_v3_test.go 656164b259 cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM 6 дней назад
crypto.go 656164b259 cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM 6 дней назад
crypto_test.go e5f60fa54f chore: fix some typos in comments (#1582) 9 месяцев назад
errors.go 656164b259 cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM 6 дней назад
helper_test.go 656164b259 cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM 6 дней назад
pem.go 656164b259 cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM 6 дней назад
pem_test.go 6aa3363d85 Add explicit unmarshaller for signing and key agreement public keys (#1777) 3 месяцев назад
pq_suite.go 6c6bf5e486 cert: Check an ML-KEM-1024 public key with the FIPS 203 modulus check alone, without expanding it 5 дней назад
pq_suite_test.go 6c6bf5e486 cert: Check an ML-KEM-1024 public key with the FIPS 203 modulus check alone, without expanding it 5 дней назад
sign.go 656164b259 cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM 6 дней назад
sign_test.go 0dc8a28d1f apply `go fix` for Go 1.26 (#1867) 1 месяц назад

README.md

cert

This is a library for interacting with nebula style certificates and authorities.

There are now 2 versions of nebula certificates:

v1

This version is deprecated.

A protobuf definition of the certificate format is included at cert_v1.proto

To compile the definition you will need protoc installed.

To compile for go with the same version of protobuf specified in go.mod:

make proto

v2

This is the latest version which uses asn.1 DER encoding. It can support ipv4 and ipv6 and tolerate future certificate changes better than v1.

cert_v2.asn1 defines the wire format and can be used to compile marshalers.