-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathverify.toml
More file actions
124 lines (107 loc) · 6.74 KB
/
Copy pathverify.toml
File metadata and controls
124 lines (107 loc) · 6.74 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
# crypto-verify: trust anchors and expected hashes for Galdralag-firmware.
# After editing, refresh the detached signature:
# gpg --armor --detach-sign --output verify.toml.asc verify.toml
# OpenPGP v4 fingerprint of the maintainer key that must sign verify.toml (40 hex digits, no spaces).
maintainer_fingerprint = "55FDF48EB398011D5C35E3CE4F21DEAD0DE9024E"
# TOML vector bundles: SHA-256 and Shamir (crypto-verify primitive runners only).
# Root vectors align with NIST short-msg samples and vault Shamir reference tests.
primitive_vectors = [
"vectors/sha256.toml",
"vectors/shamir.toml",
]
[wycheproof]
# Pin to a google/wycheproof or C2SP/wycheproof commit when you want GitHub verified-commit checks (--network).
upstream_commit = ""
# Must match keys/wycheproof.asc (used with upstream_commit and --network).
signing_key_fingerprint = "55FDF48EB398011D5C35E3CE4F21DEAD0DE9024E"
# SHA-256 of JSON under crates/vault/tests/ (Wycheproof-style corpora, RFC, NIST CAVP, block ciphers).
# BSI TR-03111 JSON is listed under [[bsi]] only.
[wycheproof.files]
"crates/vault/tests/blake3_vectors.json" = "ba40cd69e4a4a0b080e880fa1753ad1f3accb7137ea5cf9c71ac38e50a75f3cc"
"crates/vault/tests/data/ecdh_brainpoolP384r1_test.json" = "f32542f287664e337e1cc516e879de201ac023b6759a0d0637a4b687e96fd04f"
"crates/vault/tests/data/ecdsa_brainpoolP384r1_sha384_test.json" = "5192a7f9e992238f99c5017bbe84205b5f8b9c3b8e12ca2cff41d4e8e6bdedd5"
"crates/vault/tests/data/shamir_vectors.json" = "9f4f937bf95c510e265c6650aadb63b2c147a3244e53082d9b987a511c9e54e5"
"crates/vault/tests/data/wycheproof/aes_gcm_test.json" = "985e5ecc172e181eaf49e89508b9470dcf478002eb7e8559c707eb42dc97dfe7"
"crates/vault/tests/data/wycheproof/ecdh_brainpoolP256r1_test.json" = "8502c0259d85813d93cba5a664245b2d5ad1cdd3480a77337f3b377b8d63ccf4"
"crates/vault/tests/data/wycheproof/ecdsa_brainpoolP256r1_sha256_test.json" = "b78c3c33e6752694483841803d73c0455c74bb8e91085b77ff5943be424f5e06"
"crates/vault/tests/data/wycheproof/ed25519_test.json" = "70471c053c711731f2195ef4875b60ea7f5d6793939d99058ac12da810cb8e00"
"crates/vault/tests/data/wycheproof/hkdf_sha256_test.json" = "bb2b462a38b251cb52a2aede706d6d4b62b26864f4e80c95497507ddb07c5f1e"
"crates/vault/tests/data/wycheproof/hkdf_sha512_test.json" = "bb9a21f4e86041caf5d7792b030349f8ff289087f195b2fbc0fc0afc39deca6f"
"crates/vault/tests/data/wycheproof/hmac_sha256_test.json" = "2d201cfa61d1bf95e6f5d07d96634b4a348b31e8eaa277ad7c8d09677b7a743f"
"crates/vault/tests/data/wycheproof/hmac_sha512_test.json" = "b6c90477bdb4a6fc8ee3d1f7b2c0b69a8dfffab34718abaa6cabd71cc2ba1207"
"crates/vault/tests/data/wycheproof/rsa_oaep_2048_sha256_mgf1sha256_test.json" = "83dce701e3d8640ac56e6d7bf37a5a8f9bd6a336e1e932a1e9bfe4ba9c5ea3a9"
"crates/vault/tests/data/wycheproof/rsa_oaep_3072_sha256_mgf1sha256_test.json" = "c8122302f522bfd539650c71c4aa966bd1f89acb50c6f4c190030fdb9b2684a4"
"crates/vault/tests/data/wycheproof/rsa_oaep_4096_sha256_mgf1sha256_test.json" = "e0eb85bcd6d66a85941ee3d98e44f7d1ffb0cf870ba6550e1ed3bec4174c60a9"
"crates/vault/tests/data/wycheproof/rsa_pkcs1_2048_test.json" = "28466c4390f1f8943754a990ba36397ebbac628117d91b57f87e1ba200b932f3"
"crates/vault/tests/data/wycheproof/rsa_pss_2048_sha256_mgf1_32_test.json" = "7f6efafc160f4816b96cbf1c12188a31051d7e3f001e27505d9edb5f2a0e325c"
"crates/vault/tests/data/wycheproof/rsa_pss_4096_sha512_mgf1_64_test.json" = "c93ceaa56a190c9fd4707441c5c6a75839f108202d88aec891697f9623042547"
"crates/vault/tests/data/wycheproof/rsa_signature_2048_sha256_test.json" = "94a917b01ff50fb874cfc05bf29b4af44868d944a6558201cf18380da93fb393"
"crates/vault/tests/data/wycheproof/x25519_test.json" = "35c3f5231cf25cc640b524d403461deee9e49441d5d915a3a25b2c8ff5adbe7d"
"crates/vault/tests/data/wycheproof_chacha20_poly1305_test.json" = "f7f9a4c9707b219f6afd9aba0bbf6a470bfdab95f93c6d00bd55264e48afdda5"
"crates/vault/tests/nist_cavp_vectors/hmac_sha256_short.json" = "5a8818e5e7d0eb1e5cfa1732693870ce1400d4bbe271ca79c051d06cd77f6658"
"crates/vault/tests/nist_cavp_vectors/sha256_short_msg.json" = "946d2c886f46252837ffbe67532911feff682f982fa0c83e039413c577a2f174"
"crates/vault/tests/nist_cavp_vectors/sha3_256_short.json" = "e913c3bd658c8628d738548c617a0f1ac9bfa3736ff9efacde66a3de72c7e1e4"
"crates/vault/tests/rfc_vectors/rfc2104_hmac.json" = "7b298854a105f3b2e3bf61728a2e601d93d9185383ae06ae5d19a8ff25ac62be"
"crates/vault/tests/rfc_vectors/rfc5639_brainpool_p256.json" = "24a5f560ab7cb271ca46114b5102a584346b755027650129a100fefd4bcbe33c"
"crates/vault/tests/rfc_vectors/rfc5869_hkdf_sha256.json" = "4eff3590a8b5c062fb76dd6192e0d8070ebda974c7f3c7d74bd0f8486d554571"
"crates/vault/tests/rfc_vectors/rfc7748_x25519.json" = "5237e8e500961ab2578f8420eeaddbca2407da6db19cdbef4f8775a13dae79f0"
"crates/vault/tests/rfc_vectors/rfc8018_pbkdf2.json" = "2d795391787bafd3a6777bdcdb1f1fe290a09285ea3aacf8f31e4a9c3148f686"
"crates/vault/tests/rfc_vectors/rfc8032_ed25519.json" = "dc95675e9c9cfaa803959d21e29f592ba6da438e240d79b66614e5702dd512f7"
"crates/vault/tests/rfc_vectors/rfc8439_chacha.json" = "98b9ff589a6e5bb67d4492887c19f8947f35ab16d255b9784027246d558d948f"
"crates/vault/tests/serpent_vectors.json" = "cf35d15c4c26aa5bad417142d6317ed89653465c60a5dd2066d22cb4c2eba7ec"
"crates/vault/tests/twofish_vectors.json" = "99e38a53a5d71c9296cf5881ba71f8f98579a366a575c88853c351c1752c70e3"
# BSI TR-03111 Brainpool JSON (vault/tests/bsi_brainpool.rs).
[[bsi]]
url = ""
local_path = "crates/vault/tests/bsi_vectors/tr03111_brainpool256r1.json"
expected_sha256 = "b464e5f3a5b03995b9d42ad78512228d82265b57dc798daa7f3395b94f81399a"
[[bsi]]
url = ""
local_path = "crates/vault/tests/bsi_vectors/tr03111_brainpool384r1.json"
expected_sha256 = "61c595632818740b04432bf1aa070235b6be7f64ae3690a17beeb4c280612bc7"
# Release signing keys (OpenPGP fingerprints) for upstreams that sign tags; fill when you import keys under keys/.
# crypto-verify currently records these for policy; tag verification is not implemented yet.
[[signed_crates]]
name = "aes-gcm"
version = "0.10.3"
signing_key_fingerprint = ""
[[signed_crates]]
name = "chacha20poly1305"
version = "0.10.1"
signing_key_fingerprint = ""
[[signed_crates]]
name = "curve25519-dalek"
version = "4.1.3"
signing_key_fingerprint = ""
[[signed_crates]]
name = "ed25519-dalek"
version = "2.2.0"
signing_key_fingerprint = ""
[[signed_crates]]
name = "hkdf"
version = "0.12.4"
signing_key_fingerprint = ""
[[signed_crates]]
name = "hmac"
version = "0.12.1"
signing_key_fingerprint = ""
[[signed_crates]]
name = "ring"
version = "0.17.14"
signing_key_fingerprint = ""
[[signed_crates]]
name = "serde"
version = "1.0.228"
signing_key_fingerprint = ""
[[signed_crates]]
name = "sequoia-openpgp"
version = "1.22.0"
signing_key_fingerprint = ""
[[signed_crates]]
name = "sha2"
version = "0.10.9"
signing_key_fingerprint = ""
[[signed_crates]]
name = "x25519-dalek"
version = "2.0.1"
signing_key_fingerprint = ""