a-sit-plus / signum

Kotlin Multiplatform Crypto/PKI Library and ASN1 Parser + Encoder
https://a-sit-plus.github.io/signum/
Apache License 2.0
76 stars 6 forks source link

Cose Signature Input #193

Closed nodh closed 1 week ago

nodh commented 1 week ago

Fixes #147

JesusMcCloud commented 1 week ago

Do we want more flexibility (protected, vs. unprotected headers)? I seem to recall that we handle unprotected headers too in VC-K. If I'm right, I think we should offer both variants through shorthands

nodh commented 1 week ago

The unprotected headers are not included in the signature input since they're ... not protected by the signature.