Module corim_signature 

Support for patching CoRIM (Concise Reference Integrity Manifest) headers into an existing IGVM file.

CoRIM headers allow embedding signed endorsement for the IGVM file that can be verified by the attestation service.

Module structure

• envelope – operations on signed CoRIM envelopes (split a bundled envelope into document + detached signature; cryptographically verify a detached signature using the issuer cert from its x5chain / x5bag header).
• patch – verify a CoRIM signature against the document already embedded in an IGVM file, then patch (or replace) the corresponding CorimSignature header.

Re-exports

pub use envelope::detach_payload;

Modules

envelope 🔒

Operations on signed CoRIM envelopes (#6.18(COSE_Sign1) carrying a tagged-unsigned-corim-map payload).

Functions

patch

Verify a CoRIM signature against the document already embedded in an IGVM file, then patch the corresponding CorimSignature header.