Trishank Karthik Kuppusamy
Trishank Karthik Kuppusamy
The Golang crypto/rsa package [allows](https://pkg.go.dev/crypto/rsa#pkg-constants) for using at least two possible [salt lengths](https://crypto.stackexchange.com/questions/1217/rsa-pss-salt-size) (auto and hash for want better terminology) when creating/verifying RSA PSS signatures. However, these options are currently...
TODO from #77: - [ ] Trigger notifications only for gpg signing, not also verification, in git. - [ ] The notification boxes need an X close button. - [...
It would be excellent to add support for [Apple Secure Enclave](https://developer.apple.com/documentation/security/certificate_key_and_trust_services/keys/storing_keys_in_the_secure_enclave) instead of Yubikey if developers so desire. Combined with TouchID, this would be an excellent, native way to support...
Signed-off-by: Trishank Karthik Kuppusamy **Fixes issue #**: N/A **Description of the changes being introduced by the pull request**: Update Docker images on release or push to master. **Please verify and...
**Description of issue or feature request**: If an integrator accidentally passes uppercase keyids in the public keys given for a step, the reference implementation does not realize that they should...
**Description of issue or feature request**: The in-toto CLI tools should be more aware of the context of the git repositories they record. **Current behavior**: Presently, when `in-toto-run` is run...
**Description of issue or feature request**: CLI tools like `in-toto-run` should honor `.gitignore`, and not record files matching these patterns as materials. **Current behavior**: CLI tools do not honor `.gitignore`...
**Description of issue or feature request**: It would be nice to have a _separate_ package on PyPI called `in-toto-dev` that is basically automatic packages of commits to master. These packages...