Anton Abashkin

icon indicating a website link https://www.linkedin.com/in/antonabashkin icon indicating an email [email protected]

icon location Application / Software Security Professional. Latest contribution - NoSQL injection rules for semgrep static analysis https://shorturl.at/ehoJO

Results 4 comments of Anton Abashkin

What asymmetric algorithm is used to generate keys ?

https://github.com/theupdateframework/notary/blob/master/client/client.go#L418 ECDSA. More specifically, it's probably ecdsa-sha2-nistp256 since that is what the TUF spec specifies.

Which signing methods are supported by Notary? Especially by Docker Hub?

It's currently hardcoded to ECDSA - https://github.com/theupdateframework/notary/blob/master/client/client.go#L418

Which signing methods are supported by Notary? Especially by Docker Hub?

More evidence - https://github.com/theupdateframework/notary/blob/master/cmd/notary/keys.go#L202

Threshold Signing is for root or just lower layer of signning

@justincormack can you tell us which roles threshold signing is currently implemented for? According to https://docs.docker.com/notary/advanced_usage/ "Thresholds other than 1 are not currently supported" for delegation keys. This leaves target,...