Comments (2)
I'd have been great if a) we could've used Tink and b) Tink had a storage format for these kinds of keys. But it's not like that would be in distributions either. https://crypto.stackexchange.com/questions/61777/distinguishing-x25519-public-keys-from-random also does not help us much here. ;-)
I guess I'd personally prefer the PEM encoding, which presumably should not be hard given that we already require OpenSSL?
from glome.
Having an external PEM file might be easier for key rotation. Also we can use standard openssl tools like:
$ openssl genpkey -algorithm X25519 | openssl pkey -pubout
-----BEGIN PUBLIC KEY-----
MCowBQYDK2VuAyEArBAds6wHyUNsJymjrI9TYC02njCx8nR/NOPB9JHQClU=
-----END PUBLIC KEY-----
$ openssl genpkey -algorithm X25519 | openssl pkey -pubout | openssl asn1parse
0:d=0 hl=2 l= 42 cons: SEQUENCE
2:d=1 hl=2 l= 5 cons: SEQUENCE
4:d=2 hl=2 l= 3 prim: OBJECT :X25519
9:d=1 hl=2 l= 33 prim: BIT STRING
from glome.
Related Issues (20)
- glome-login config file cannot be 'special' HOT 1
- glome-login leaving an extra newline in the input buffer before returning? HOT 2
- CLI should handle tags as base64 instead of hex
- Support more fleet-wide settings in the config file HOT 5
- GLOME Login assumes that challenge is an URL HOT 1
- More user-friendly landing README HOT 1
- PAM module arguments naming is inconsistent with the config HOT 2
- OpenSSL's HMAC API is deprecated in 3.x
- Build fails on NixOS
- Github Actions not triggering on PR HOT 1
- Implement RFD001 (GLOME Login v2)
- Implement support for v2 in Go and Python (keeping v1 support to grant users a transition period).
- Switch CLI, C library and binary to v2, dropping v1 support HOT 1
- Document the new protocol.
- Drop v1 support in Go and Python. HOT 1
- Improve documentation of `glome.h`
- Add Go GLOME config file parsing
- golang ParseURLResponse function does not handle URLs correctly HOT 1
- MVP: Login PAM module plus signing CLI HOT 7
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from glome.