@mattrglobal/cose
Advanced tools
This repository is home to an incomplete implementation of RFC 8152 written in Typescript.
This project uses a Git submodule from the repository at github.com/cose-wg/Examples.git. That repository contains test cases. So you will need to pull them down for tests to run. To activate the submodule, run the following:
git submodule init
git submodule update
The following algorithms are supported for COSE_Sign1
| Signing Algorithm | Description |
|---|---|
| ES256 | Elliptic Curve Digital Signature Algorithm using the P-256/brainpoolP256r1 curve with SHA-256 |
| ES384 | Elliptic Curve Digital Signature Algorithm using the P-384/brainpoolP384r1 curve with SHA-384 |
| ES512 | Elliptic Curve Digital Signature Algorithm using the P-512/brainpoolP512r1 curve with SHA-512 |
| EdDSA | Elliptic Curve Digital Signature Algorithm using the Ed25519/Ed448 curve with SHA-512 |
| PS256 | RSA Probabilistic Signature Scheme (RSASSA-PSS) with SHA-256 |
| PS384 | RSA Probabilistic Signature Scheme (RSASSA-PSS) with SHA-384 |
| PS512 | RSA Probabilistic Signature Scheme (RSASSA-PSS) with SHA-512 |
See here for licence information
FAQs
An implementation of RFC8152
We found that @mattrglobal/cose demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.
Security News
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.