#activity-pub #http #signatures #signature

sigh

HTTP signature generation and verification for ActivityPub, using OpenSSL

3 stable releases

1.0.2 Dec 21, 2023
1.0.1 Dec 14, 2022

#4 in #activitypub

Download history 4/week @ 2023-12-18 18/week @ 2024-02-19 23/week @ 2024-02-26 116/week @ 2024-03-11 49/week @ 2024-04-01

165 downloads per month

MIT license

26KB
521 lines

sigh!

This crate supplies everything for dealing with HTTP signatures in ActivityPub:

  • Keypair generation
  • Signing
  • Verification

See the documentation for usage examples.

The OpenSSL crate is used for cryptographic algorithms. The http crate is used as a common denominator interface for many HTTP client and server implementations.

Beware that you must also take care of Digest: headers, using eg. http-digest-headers.

Supported algorithms

Algorithm Implemented Used by...
hs2019 (Ed25519-SHA512)
rsa-sha1
rsa-sha256 Mastodon
hmac-sha256
ecdsa-sha256

Dependencies

~4.5MB
~91K SLoC