theupdateframework / go-tuf

Go implementation of The Update Framework (TUF)
https://theupdateframework.com
Apache License 2.0
625 stars 105 forks source link

fix: Update the ecdsa key type to the latest spec (1.0.32). #508

Closed kommendorkapten closed 1 year ago

kommendorkapten commented 1 year ago

The old ecdsa key type is kept to be able to consume older metadata files.

Release Notes:

The go-tuf package now understands the ecdsa key type as specified by The Updateframework specification v1.0.32.

Types of changes:

Description of the changes being introduced by the pull request: TUF spec v1.0.32 does not specify the ecdsa-sha2-nistp256 key type anymore. Instead the key type is ecdsa. See this PR for more details. This fix adds ecdsa as a known key type, and the default to use when returning the "public data" for a key. The old format (ecdsa-sha2-nistp256) is still recognized as a valid key type.

Please verify and check that the pull request fulfills the following requirements: