public final class Signature extends GeneratedMessageV3 implements SignatureOrBuilder
Verifiers (e.g. Kritis implementations) MUST verify signatures
with respect to the trust anchors defined in policy (e.g. a Kritis policy).
Typically this means that the verifier has been configured with a map from
public_key_id to public key material (and any required parameters, e.g.
signing algorithm).
In particular, verification implementations MUST NOT treat the signature
public_key_id as anything more than a key lookup hint. The public_key_id
DOES NOT validate or authenticate a public key; it only provides a mechanism
for quickly selecting a public key ALREADY CONFIGURED on the verifier through
a trusted channel. Verification implementations MUST reject signatures in any
of the following circumstances:
- The
public_key_id is not recognized by the verifier.
- The public key that
public_key_id refers to does not verify the
signature with respect to the payload.
The signature contents SHOULD NOT be "attached" (where the payload is
included with the serialized signature bytes). Verifiers MUST ignore any
"attached" payload and only verify signatures with respect to explicitly
provided payload (e.g. a payload field on the proto message that holds
this Signature, or the canonical serialization of the proto message that
holds this signature).
Protobuf type grafeas.v1.Signature
Static Fields
PUBLIC_KEY_ID_FIELD_NUMBER
public static final int PUBLIC_KEY_ID_FIELD_NUMBER
Field Value
SIGNATURE_FIELD_NUMBER
public static final int SIGNATURE_FIELD_NUMBER
Field Value
Static Methods
getDefaultInstance()
public static Signature getDefaultInstance()
Returns
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()
Returns
newBuilder()
public static Signature.Builder newBuilder()
Returns
newBuilder(Signature prototype)
public static Signature.Builder newBuilder(Signature prototype)
Parameter
Returns
public static Signature parseDelimitedFrom(InputStream input)
Parameter
Returns
Exceptions
public static Signature parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(byte[] data)
public static Signature parseFrom(byte[] data)
Parameter
| Name | Description |
| data | byte[]
|
Returns
Exceptions
parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
public static Signature parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(ByteString data)
public static Signature parseFrom(ByteString data)
Parameter
Returns
Exceptions
parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static Signature parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
public static Signature parseFrom(CodedInputStream input)
Parameter
Returns
Exceptions
public static Signature parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
public static Signature parseFrom(InputStream input)
Parameter
Returns
Exceptions
public static Signature parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(ByteBuffer data)
public static Signature parseFrom(ByteBuffer data)
Parameter
Returns
Exceptions
parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
public static Signature parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parser()
public static Parser<Signature> parser()
Returns
Methods
equals(Object obj)
public boolean equals(Object obj)
Parameter
Returns
Overrides
getDefaultInstanceForType()
public Signature getDefaultInstanceForType()
Returns
getParserForType()
public Parser<Signature> getParserForType()
Returns
Overrides
getPublicKeyId()
public String getPublicKeyId()
The identifier for the public key that verifies this signature.
- The
public_key_id is required.
- The
public_key_id SHOULD be an RFC3986 conformant URI.
- When possible, the
public_key_id SHOULD be an immutable reference,
such as a cryptographic digest.
Examples of valid public_key_ids:
OpenPGP V4 public key fingerprint:
- "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA"
See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more
details on this scheme.
RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER
serialization):
- "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU"
- "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
string public_key_id = 2;
| Type | Description |
| String | The publicKeyId.
|
getPublicKeyIdBytes()
public ByteString getPublicKeyIdBytes()
The identifier for the public key that verifies this signature.
- The
public_key_id is required.
- The
public_key_id SHOULD be an RFC3986 conformant URI.
- When possible, the
public_key_id SHOULD be an immutable reference,
such as a cryptographic digest.
Examples of valid public_key_ids:
OpenPGP V4 public key fingerprint:
- "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA"
See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more
details on this scheme.
RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER
serialization):
- "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU"
- "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
string public_key_id = 2;
| Type | Description |
| ByteString | The bytes for publicKeyId.
|
getSerializedSize()
public int getSerializedSize()
Returns
Overrides
getSignature()
public ByteString getSignature()
The content of the signature, an opaque bytestring.
The payload that this signature verifies MUST be unambiguously provided
with the Signature during verification. A wrapper message might provide
the payload explicitly. Alternatively, a message might have a canonical
serialization that can always be unambiguously computed to derive the
payload.
bytes signature = 1;
getUnknownFields()
public final UnknownFieldSet getUnknownFields()
Returns
Overrides
hashCode()
Returns
Overrides
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Returns
Overrides
isInitialized()
public final boolean isInitialized()
Returns
Overrides
newBuilderForType()
public Signature.Builder newBuilderForType()
Returns
newBuilderForType(GeneratedMessageV3.BuilderParent parent)
protected Signature.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
Parameter
Returns
Overrides
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
Parameter
Returns
Overrides
toBuilder()
public Signature.Builder toBuilder()
Returns
writeTo(CodedOutputStream output)
public void writeTo(CodedOutputStream output)
Parameter
Overrides
Exceptions
