#activity-pub #http #signatures #http-client #signature #client-server

sigh

HTTP signature generation and verification for ActivityPub, using OpenSSL

4 stable releases

new 1.0.3 Nov 20, 2024
1.0.2 Dec 21, 2023
1.0.1 Dec 14, 2022

#1038 in Cryptography

MIT license

26KB
523 lines

sigh!

This crate supplies everything for dealing with HTTP signatures in ActivityPub:

  • Keypair generation
  • Signing
  • Verification

See the documentation for usage examples.

The OpenSSL crate is used for cryptographic algorithms. The http crate is used as a common denominator interface for many HTTP client and server implementations.

Beware that you must also take care of Digest: headers, using eg. http-digest-headers.

Supported algorithms

Algorithm Implemented Used by...
hs2019 (Ed25519-SHA512)
rsa-sha1
rsa-sha256 Mastodon
hmac-sha256
ecdsa-sha256

Dependencies

~3.5–4.5MB
~94K SLoC