Crypto.WebAuthn.Cose.Internal.Verify

public keys and signature algorithms are represented with three different types:

• CoseSignAlg, which is the signature algorithm used, equivalent to a COSE Algorithm from the COSE registry
• CosePublicKey, which is a combination of a CoseSignAlg along with a public key that can be used with it. This is what the COSE_Key CBOR structure decodes to
• PublicKey, only the public key part of CosePublicKey

The following main operations are supported for these types:

• CosePublicKey can be totally decomposed into a CoseSignAlg with signAlg and a PublicKey with publicKey
• A PublicKey can be created from an X.509 public key with fromX509
• A CoseSignAlg and a PublicKey can be used to verify a signature with verify

Public Key

fromX509 :: PubKey -> Either Text PublicKey

Turns a X.509 certificates PubKey into a PublicKey

Signature verification

verify :: PublicKeyWithSignAlg -> ByteString -> ByteString -> Either Text ()

Verifies an asymmetric signature for a message using a PublicKeyWithSignAlg Returns an error if the signature algorithm doesn't match. Also returns an error if the signature wasn't valid or for other errors.

Hash Conversions to cryptonite types

data SomeHashAlgorithm

Some cryptonite HashAlgorithm type, used as a return value of toCryptHashECDSA

Constructors

forall a.HashAlgorithm a => SomeHashAlgorithm a

toCryptHashECDSA :: CoseHashAlgECDSA -> SomeHashAlgorithm

Returns the cryptonite SomeHashAlgorithm corresponding to this hash algorithm

data SomeHashAlgorithmASN1

Some cryptonite HashAlgorithmASN1 type, used as a return value of toCryptHashRSA

Constructors

forall a.HashAlgorithmASN1 a => SomeHashAlgorithmASN1 a

toCryptHashRSA :: CoseHashAlgRSA -> SomeHashAlgorithmASN1

Returns the cryptonite SomeHashAlgorithmASN1 corresponding to this hash algorithm