#activity-pub #http #signatures #signature

sigh

HTTP signature generation and verification for ActivityPub, using OpenSSL

3 stable releases

1.0.2 Dec 21, 2023
1.0.1 Dec 14, 2022

#874 in Cryptography

Download history 30/week @ 2024-03-07 86/week @ 2024-03-14 35/week @ 2024-03-28 14/week @ 2024-04-04 6/week @ 2024-05-16 19/week @ 2024-05-23 25/week @ 2024-05-30 20/week @ 2024-06-06 11/week @ 2024-06-13 3/week @ 2024-06-20

61 downloads per month

MIT license

26KB
521 lines

sigh!

This crate supplies everything for dealing with HTTP signatures in ActivityPub:

  • Keypair generation
  • Signing
  • Verification

See the documentation for usage examples.

The OpenSSL crate is used for cryptographic algorithms. The http crate is used as a common denominator interface for many HTTP client and server implementations.

Beware that you must also take care of Digest: headers, using eg. http-digest-headers.

Supported algorithms

Algorithm Implemented Used by...
hs2019 (Ed25519-SHA512)
rsa-sha1
rsa-sha256 Mastodon
hmac-sha256
ecdsa-sha256

Dependencies

~4.5MB
~93K SLoC