#activity-pub #http #signatures #http-client #signature #client-server

sigh

HTTP signature generation and verification for ActivityPub, using OpenSSL

4 stable releases

1.0.3 Nov 20, 2024
1.0.2 Dec 21, 2023
1.0.1 Dec 14, 2022

#412 in Cryptography

Download history 1/week @ 2024-08-17 3/week @ 2024-08-24 15/week @ 2024-08-31 8/week @ 2024-09-07 8/week @ 2024-09-14 18/week @ 2024-09-21 55/week @ 2024-09-28 9/week @ 2024-10-05 8/week @ 2024-10-12 121/week @ 2024-11-16 34/week @ 2024-11-23 18/week @ 2024-11-30

174 downloads per month

MIT license

26KB
523 lines

sigh!

This crate supplies everything for dealing with HTTP signatures in ActivityPub:

  • Keypair generation
  • Signing
  • Verification

See the documentation for usage examples.

The OpenSSL crate is used for cryptographic algorithms. The http crate is used as a common denominator interface for many HTTP client and server implementations.

Beware that you must also take care of Digest: headers, using eg. http-digest-headers.

Supported algorithms

Algorithm Implemented Used by...
hs2019 (Ed25519-SHA512)
rsa-sha1
rsa-sha256 Mastodon
hmac-sha256
ecdsa-sha256

Dependencies

~3.5–4.5MB
~95K SLoC