Class PkixPublicKey (1.1.0)

PkixPublicKey(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A public key in the PkixPublicKey format (see https://tools.ietf.org/html/rfc5280#section-4.1.2.7 for details). Public keys of this type are typically textually encoded using the PEM format.

Attributes

NameDescription
public_key_pem str
A PEM-encoded public key, as described in https://tools.ietf.org/html/rfc7468#section-13
signature_algorithm google.cloud.binaryauthorization_v1.types.PkixPublicKey.SignatureAlgorithm
The signature algorithm used to verify a message against a signature using this key. These signature algorithm must match the structure and any object identifiers encoded in public_key_pem (i.e. this algorithm must match that of the public key).

Classes

SignatureAlgorithm

SignatureAlgorithm(value)

Represents a signature algorithm and other information necessary to verify signatures with a given public key. This is based primarily on the public key types supported by Tink's PemKeyType, which is in turn based on KMS's supported signing algorithms. See https://cloud.google.com/kms/docs/algorithms. In the future, BinAuthz might support additional public key types independently of Tink and/or KMS.