Skip to content

feat(core): domain-separated Ed25519 signing for receipts and exports - #16

Merged
GoDeskio merged 1 commit into
mainfrom
feat/ed25519-signing
Nov 5, 2026
Merged

GoDeskio merged 1 commit into
mainfrom
feat/ed25519-signing

Conversation

@GoDeskio

Copy link
Copy Markdown
Owner

Backlog #16.

  • src/sign.rs: generate, sign and verify_strict using ed25519-dalek 2 (BSD-3).
  • Every signature is bound to a context label, so a receipt signature can't be replayed as an export signature.
  • Tests cover context, message, signature and key tampering, plus determinism.

cargo test and clippy are clean.

@socket-security

socket-security Bot commented Oct 31, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedcargo/​ed25519-dalek@​2.2.010010093100100

View full report

@GoDeskio
GoDeskio force-pushed the feat/ed25519-signing branch from bafd16a to 201acef Compare November 5, 2026 10:31
@GoDeskio
GoDeskio force-pushed the feat/ed25519-signing branch from d15101f to 7c831ea Compare November 5, 2026 10:41
@GoDeskio
GoDeskio merged commit dcb8cdd into main Nov 5, 2026
6 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant