NewReadCloserFromObjects is mainly used for testing and mocks that return a Reader, or ReadCloser.

NewSignature returns a signature given some bytes and a private key.

ReadAll is a helper method that.

Sign an object given a private key, updates the object's metadata in place.

SignDeep an object and all nested objects we own or have no owner WARNING: THIS _WILL_ CHANGE, DO NOT USE! TODO: not sure which nested objects this should sign.

Unmarshal an object into a tagged struct.

Verify object TODO should this verify nested objects as well?.

AlgorithmObjectHash is the only supported signing algorithm right now.

Policy effects.

Policy Evaluation results.

ErrAlgorithNotImplemented is returned when the algorithm specified has not been implemented.

ErrInvalidObjectType is returned when the signature being verified is not an encoded object of type "signature".

Policy actions.

Policy types.

nolint: revive.