Add Sigsum support to tkey-verification#32

Merged

mchack-work merged 135 commits intomainfrom

Oct 15, 2025

Commits on Sep 12, 2025

Re-arrange to internal packages

mchack-work
authored and
agren
committed
Add VerifyProofDigest() for verifiying the raw hash

mchack-work
authored and
agren
committed
Add initial tests for verification

mchack-work
authored and
agren
committed
Update signing procedure diagram use Sigsum
agren
committed
doc: Revise README

mchack-work
authored and
agren
committed
doc: Revise README

mchack-work
authored and
agren
committed
vendorkey: Prepare to be initialized from different sources

mchack-work
authored and
agren
committed
Add simple test to verify vendor signatures

mchack-work
authored and
agren
committed
Add missing arg to fmt.Errorf()

mchack-work
authored and
agren
committed
Add test to verify message with proof, not just raw hash

mchack-work
authored and
agren
committed
Lose debug print

mchack-work
authored and
agren
committed
Clean up verify()

mchack-work
authored and
agren
committed
Update tkeyclient and its deps

mchack-work
authored and
agren
committed
verify: Introduce --sigsum to demand a Sigsum proof

mchack-work
authored and
agren
committed
docs: Revise README

mchack-work
authored and
agren
committed
log-submit: Switch to using the new verification package
agren
committed
serve-signer: Create submission request file instead of verification file
agren
committed
remotesign: Use new tk.Challenge method
agren
committed
Test Submission JSON encoding/decoding
agren
committed
Assume latest Bellatrix firmware when detecting a default TKey
agren
committed
verify: Verify sigsum proof using default TKey pubkey for now
agren
committed
Add missing err message
agren
committed
Test sigsum log submission
agren
committed
Add state to fake sigsum server
agren
committed
submit: Move submission, verification and policy test strings to files
agren
committed
submit: Extract file processing loop from main()
agren
committed
submit: Remove proof debug print
agren
committed
submit: Add parameterized test
agren
committed
submit: Move submission files once processed
agren
committed
submit: Abort if verification directory is not empty
agren
committed
submit: Name test directories for easier debugging
agren
committed
submit: Abort if processed submissions directory is not empty
agren
committed
submit: Move test parameters to named struct for readability
agren
committed
submit: Make sure all submission files can be opened before logging anything
agren
committed
submit: Move all test samples to the same directory
agren
committed
submit: Break out test sample copying code
agren
committed
submit: Add tkey-sigsum-submit to Makefile
agren
committed
Move doc string to correct function

mchack-work
authored and
agren
committed
Introduce SigsumLog type and methods

mchack-work
authored and
agren
committed
submit: Move repetitive test assertions into helper functions
agren
committed
submit: Mark assertions as test helpers to get useful line numbers on failures
agren
committed
submit: Document test
agren
committed
doc: Add tkey-sigsum-submit to Testing chapter
agren
committed
doc: Document submit request file
agren
committed
doc: Replace inline example files with links to test files
agren
committed
doc: Clarify what data is sent to the monitor
agren
committed
Move Sigsum static data to internal/data

mchack-work
authored and
agren
committed
Move firmwares.go to package internal/firmware

mchack-work
authored and
agren
committed
Refactor remoteSign()

mchack-work
authored and
agren
committed
Add SPDX to verification

mchack-work
authored and
agren
committed
Break out tkey-verify as its own program

mchack-work
authored and
agren
committed
Move embedded vendor pubkey to internal/data

mchack-work
authored and
agren
committed
doc: Update location of embedded device apps

mchack-work
authored and
agren
committed
Change types for appbin hashes

mchack-work
authored and
agren
committed
firmwares: Store embedded firmware data as simple lines instead

mchack-work
authored and
agren
committed
submit: Use embedded policy from internal/data

mchack-work
authored and
agren
committed
Add test Sigsum submit key

mchack-work
authored and
agren
committed
Teach show-pubkey how to print the pubkey in SSH format

mchack-work
authored and
agren
committed
submit: Update help text

mchack-work
authored and
agren
committed
Add man page for tkey-sigsum-submit

mchack-work
authored and
agren
committed
doc: Update tkey-verify man page

mchack-work
authored and
agren
committed
doc: Update man page for tkey-verification

mchack-work
authored and
agren
committed
submit: Add spdx to .go files
agren
committed
spdx: Change types for appbin hashes - util.go
agren
committed
submit: Add testdata to REUSE.toml
agren
committed
spdx: Add man page for tkey-sigsum-submit
agren
committed
spdx: Re-arrange to internal packages - Move bins to internal/appbins
agren
committed
spdx: doc/tkey-verify.*
agren
committed
spdx: internal/ssh/README.md
agren
committed
spdx: Remove stray verifications folder
agren
committed
Remove spdx-ensure since its functionality is covered by REUSE.toml
agren
committed
gitignore: tkey-verify
agren
committed
gitignore: tkey-sigsum-submit
agren
committed
Fix out-of-sync comments in firmware_test:TestWrongFirmware
agren
committed
verify: Fill in vendorkeys & Sigsum config early

agren
and
mchack-work
committed
Move separate buildMessage implementations to util
agren
committed
Tidy tkey-verify.scd
agren
committed
Add --version to tkey-verify & tkey-sigsum-submit

mchack-work
authored and
agren
committed
Update golangci-lint config to new config format

mchack-work
authored and
agren
committed
ci: Update to new golangci-lint
mchack-work
committed
ci: Remove SPDX check
mchack-work
committed
Follow initialism and acronym style rules
agren
committed
Follow perfsprint linting rules
agren
committed
Follow errorlint linting rules
agren
committed
Remove unused functions
agren
committed
Fix typos
agren
committed
Check error
agren
committed
Follow revive indent-error-flow linting rule
agren
committed
Use bytes.Equal instead of bytes.Compare unless necessary
agren
committed
Create files with 0600 mode instead of 0644
agren
committed
Remove todo
agren
committed
Silence gosec false positives
agren
committed
Disable testpackage linter
agren
committed
Follow wrapcheck linting rules
agren
committed

Commits on Sep 15, 2025

Commits on Sep 23, 2025

Commits on Sep 24, 2025

Commits on Oct 14, 2025

doc: Revise design document
mchack-work
committed