package

0.0.0-20170609175141-84592ddf8673

Repository: https://github.com/yahoo/coname.git

Documentation: pkg.go.dev

Overview

End-to-End keyserver protocol

The protocol consists of exchanging protobuf3 messages over grpc. The message descriptors are split into three files:

client.proto -- all messages that are required for operation of a lightweight (stateful or stateless) client. Keyserver entries and server signature structures.
config.proto -- the client configuration.
verifier.proto -- everything that a verifier needs to use but a client does not. Pushing signatures, downloading update logs, etc.
replication.proto -- service-provider internal protocol, included here as a part of the reference implementation. Handles high-availability replication and synchronization of updates to the keyserver state.
local.proto -- service-provider internal protocol, included here as a part of the reference implementation. The local structures are user for persisting local state at each replica of the service provider.

# Packages

protoc-gen-coname

No description provided by the author

# Functions

DurationStamp

No description provided by the author

KeyID

KeyID computes the ID of public key.

MustMarshal

MustMarshal takes a marshalable and returns the []byte representation.

NewE2EKSPublicClient

No description provided by the author

NewE2EKSVerificationClient

No description provided by the author

NewPopulatedAuthorizationPolicy

No description provided by the author

NewPopulatedAuthorizationPolicy_Quorum

No description provided by the author

NewPopulatedCertificateAndKeyID

No description provided by the author

NewPopulatedConfig

No description provided by the author

NewPopulatedDuration

No description provided by the author

NewPopulatedEmailProof

No description provided by the author

NewPopulatedEmailProof_DKIMProof

No description provided by the author

NewPopulatedEmailProof_OIDCToken

No description provided by the author

NewPopulatedEmailProof_SAMLResponse

No description provided by the author

NewPopulatedEmailProofByClientCert

No description provided by the author

NewPopulatedEmailProofByDKIM

No description provided by the author

NewPopulatedEmailProofByOIDC

No description provided by the author

NewPopulatedEmailProofBySAML

No description provided by the author

NewPopulatedEncodedAuthorizationPolicy

No description provided by the author

NewPopulatedEncodedEntry

No description provided by the author

NewPopulatedEncodedEpochHead

No description provided by the author

NewPopulatedEncodedProfile

No description provided by the author

NewPopulatedEncodedSignedEntryUpdate

No description provided by the author

NewPopulatedEncodedTimestampedEpochHead

No description provided by the author

NewPopulatedEntry

No description provided by the author

NewPopulatedEpochDelimiter

No description provided by the author

NewPopulatedEpochHead

No description provided by the author

NewPopulatedKeyserverConfig

No description provided by the author

NewPopulatedKeyserverStep

No description provided by the author

NewPopulatedKeyserverStep_EpochDelimiter

No description provided by the author

NewPopulatedKeyserverStep_ReplicaSigned

No description provided by the author

NewPopulatedKeyserverStep_Update

No description provided by the author

NewPopulatedKeyserverStep_VerifierSigned

No description provided by the author

NewPopulatedLookupProof

No description provided by the author

NewPopulatedLookupRequest

No description provided by the author

NewPopulatedNothing

No description provided by the author

NewPopulatedOIDCConfig

No description provided by the author

NewPopulatedProfile

No description provided by the author

NewPopulatedPublicKey

No description provided by the author

NewPopulatedPublicKey_Ed25519

No description provided by the author

NewPopulatedQuorumExpr

No description provided by the author

NewPopulatedRealmConfig

No description provided by the author

NewPopulatedRegistrationPolicy

No description provided by the author

NewPopulatedRegistrationPolicy_EmailProofByClientCert

No description provided by the author

NewPopulatedRegistrationPolicy_EmailProofByDKIM

No description provided by the author

NewPopulatedRegistrationPolicy_EmailProofByOIDC

No description provided by the author

NewPopulatedRegistrationPolicy_EmailProofBySAML

No description provided by the author

NewPopulatedRegistrationPolicy_InsecureSkipEmailProof

No description provided by the author

NewPopulatedReplica

No description provided by the author

NewPopulatedReplicaConfig

No description provided by the author

NewPopulatedReplicaState

No description provided by the author

NewPopulatedSignedEntryUpdate

No description provided by the author

NewPopulatedSignedEpochHead

No description provided by the author

NewPopulatedTimestamp

No description provided by the author

NewPopulatedTimestampedEpochHead

No description provided by the author

NewPopulatedTLSConfig

No description provided by the author

NewPopulatedTreeProof

No description provided by the author

NewPopulatedUpdateRequest

No description provided by the author

NewPopulatedVerifierConfig

No description provided by the author

NewPopulatedVerifierState

No description provided by the author

NewPopulatedVerifierStep

No description provided by the author

NewPopulatedVerifierStep_Epoch

No description provided by the author

NewPopulatedVerifierStep_Update

No description provided by the author

NewPopulatedVerifierStreamRequest

No description provided by the author

RegisterE2EKSPublicServer

No description provided by the author

RegisterE2EKSVerificationServer

No description provided by the author

Time

No description provided by the author

# Constants

CipherSuite_UNSPECIFIED

No description provided by the author

CurveID_UNSPECIFIED

No description provided by the author

NO_CLIENT_CERT

No description provided by the author

P256

No description provided by the author

P384

No description provided by the author

P521

No description provided by the author

REQUEST_CLIENT_CERT

No description provided by the author

REQUIRE_AND_VERIFY_CLIENT_CERT

No description provided by the author

REQUIRE_ANY_CLIENT_CERT

No description provided by the author

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

No description provided by the author

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

No description provided by the author

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

No description provided by the author

TLS_ECDHE_ECDSA_WITH_RC4_128_SHA

No description provided by the author

TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

No description provided by the author

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

No description provided by the author

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

No description provided by the author

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

No description provided by the author

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

No description provided by the author

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

No description provided by the author

TLS_ECDHE_RSA_WITH_RC4_128_SHA

No description provided by the author

TLS_FALLBACK_SCSV

No description provided by the author

TLS_RSA_WITH_3DES_EDE_CBC_SHA

No description provided by the author

TLS_RSA_WITH_AES_128_CBC_SHA

No description provided by the author

TLS_RSA_WITH_AES_128_CBC_SHA256

No description provided by the author

TLS_RSA_WITH_AES_128_GCM_SHA256

No description provided by the author

TLS_RSA_WITH_AES_256_CBC_SHA

No description provided by the author

TLS_RSA_WITH_AES_256_GCM_SHA384

No description provided by the author

TLS_RSA_WITH_RC4_128_SHA

No description provided by the author

TLSVersion_UNSPECIFIED

No description provided by the author

VERIFY_CLIENT_CERT_IF_GIVEN

No description provided by the author

VERSION_SSL30

No description provided by the author

VERSION_TLS10

No description provided by the author

VERSION_TLS11

No description provided by the author

VERSION_TLS12

No description provided by the author

# Variables

CipherSuite_name

No description provided by the author

CipherSuite_value

No description provided by the author

ClientAuthType_name

No description provided by the author

ClientAuthType_value

No description provided by the author

CurveID_name

No description provided by the author

CurveID_value

No description provided by the author

ErrIntOverflowClient

No description provided by the author

ErrIntOverflowConfig

No description provided by the author

ErrIntOverflowDuration

No description provided by the author

ErrIntOverflowKeyserverconfig

No description provided by the author

ErrIntOverflowKeyserverlocal

No description provided by the author

ErrIntOverflowReplication

No description provided by the author

ErrIntOverflowTimestamp

No description provided by the author

ErrIntOverflowTlsconfig

No description provided by the author

ErrIntOverflowVerifier

No description provided by the author

ErrIntOverflowVerifierconfig

No description provided by the author

ErrIntOverflowVerifierlocal

No description provided by the author

ErrInvalidLengthClient

No description provided by the author

ErrInvalidLengthConfig

No description provided by the author

ErrInvalidLengthDuration

No description provided by the author

ErrInvalidLengthKeyserverconfig

No description provided by the author

ErrInvalidLengthKeyserverlocal

No description provided by the author

ErrInvalidLengthReplication

No description provided by the author

ErrInvalidLengthTimestamp

No description provided by the author

ErrInvalidLengthTlsconfig

No description provided by the author

ErrInvalidLengthVerifier

No description provided by the author

ErrInvalidLengthVerifierconfig

No description provided by the author

ErrInvalidLengthVerifierlocal

No description provided by the author

TLSVersion_name

No description provided by the author

TLSVersion_value

No description provided by the author

# Structs

AuthorizationPolicy

AuthorizationPolicy is used to check whether some signatures make up sufficient authorization to back an action.

AuthorizationPolicy_Quorum

No description provided by the author

CertificateAndKeyID

No description provided by the author

Config

No description provided by the author

Duration

A Duration represents a signed, fixed-length span of time represented as a count of seconds and fractions of seconds at nanosecond resolution.

EmailProof

EmailProof provides a proof of ownership of the email address.

EmailProof_DKIMProof

No description provided by the author

EmailProof_OIDCToken

No description provided by the author

EmailProof_SAMLResponse

No description provided by the author

EmailProofByClientCert

EmailProofByClientCert accepts a certificate signed by an authority trusted with handling registration as sufficient confirmation of ownership of an email address.

EmailProofByDKIM

No description provided by the author

EmailProofByOIDC

EmailProofByOIDC accepts an ID token fetched from an OpenID Connect provider and validates it as specified in the configuration.

EmailProofBySAML

EmailProofBySAML accepts the SAMLResponse signed by SAML2.0 Identity Provider as a sufficient confirmation of ownership of an email address.

EncodedAuthorizationPolicy

No description provided by the author

EncodedEntry

No description provided by the author

EncodedEpochHead

No description provided by the author

EncodedProfile

No description provided by the author

EncodedSignedEntryUpdate

No description provided by the author

EncodedTimestampedEpochHead

No description provided by the author

Entry

Entry is the value type in the authenticated mapping data structure.

EpochDelimiter

No description provided by the author

EpochHead

No description provided by the author

KeyserverConfig

KeyserverConfig describes the keyserver-wide configuration.

KeyserverStep

KeyserverStep denotes the input to a single step of the keyserver state machine.

KeyserverStep_EpochDelimiter

No description provided by the author

KeyserverStep_ReplicaSigned

No description provided by the author

KeyserverStep_Update

No description provided by the author

KeyserverStep_VerifierSigned

No description provided by the author

LookupProof

LookupProof encapsulates end-to-end cryptographc evidence that assuming *at least one* of the ratifiers has been correctly following the rules of the keyserver protocol then profile contains the latest public keys and metadata uploaded by user_id before the time specified in ratifications[0].

LookupRequest

No description provided by the author

Nothing

No description provided by the author

OIDCConfig

OIDCConfig contains the OpenID Connect client configuration which is used to validate the token received from the keyserver client.

Profile

A user's profile, containing public keys and other information.

PublicKey

PublicKey wraps a public key of a cryptographically secure signature scheme and verification metadata.

PublicKey_Ed25519

No description provided by the author

QuorumExpr

QuorumExpr represents a function with type set<uint64> -> bool.

RealmConfig

No description provided by the author

RegistrationPolicy

RegistrationPolicy specifies the list of policies the keyserver may support, to confirm the ownership of an email address.

RegistrationPolicy_EmailProofByClientCert

No description provided by the author

RegistrationPolicy_EmailProofByDKIM

No description provided by the author

RegistrationPolicy_EmailProofByOIDC

No description provided by the author

RegistrationPolicy_EmailProofBySAML

No description provided by the author

RegistrationPolicy_InsecureSkipEmailProof

No description provided by the author

Replica

No description provided by the author

ReplicaConfig

ReplicaConfig contains the local configuration of a single replica of a keyserver.

ReplicaState

ReplicaState contains the persistent internal state of a single replica.

SignedEntryUpdate

SignedEntryUpdate is the minimal self-contained structure to justify changing the value of an entry.

SignedEpochHead

SignedEpochHead messages are used by auditors and the service provider to vouch that the SummaryHash represents the correct unique global state at the end of epoch.

Timestamp

A Timestamp represents a point in time independent of any time zone or calendar, represented as seconds and fractions of seconds at nanosecond resolution in UTC Epoch time.

TimestampedEpochHead

No description provided by the author

TLSConfig

TLSConfig structure is used to configure a TLS client or server.

TreeProof

A Proof provides an authentication path through the Merkle Tree that proves that an item is or is not present in the tree.

UpdateRequest

UpdateRequest specifies an update and the quorum required for considering the update successful.

VerifierConfig

No description provided by the author

VerifierState

Verifier contains the persistent internal state of a verifier.