BoundedAuthorityProtocol.RoleAttestation.V1.RoleAttestation (Bounded Authority Protocol v1.0.0)

Copy Markdown View Source

One producer-side role attestation: an attestor key binding a subject key to a role.

Fields

  • attestor_key_id - the attestor key identifier, written to the header kid: 1 to kid_bytes (128) bytes of ASCII letters, digits, -, ., _ or ~.
  • jti - the attestation identifier: non-empty StringOrURI of at most identifier_bytes (512) UTF-8 bytes; the audit and revocation-reference handle.
  • key_id - the subject key identifier: 1 to kid_bytes (128) bytes of ASCII letters, digits, -, ., _ or ~.
  • public_key - the subject's raw 32-byte Ed25519 public key; it must pass BoundedAuthorityProtocol.Ed25519.acceptable_public_key?/1.
  • role - exactly "issuer" or "holder".
  • nbf - the start of the acceptance window, integer Unix time in seconds.
  • exp - the exclusive end of the window, integer Unix time in seconds; it must be after nbf.

Summary

Types

t()

Producer input for one role attestation.

Types

t()

@type t() :: %BoundedAuthorityProtocol.RoleAttestation.V1.RoleAttestation{
  attestor_key_id: binary(),
  exp: integer(),
  jti: binary(),
  key_id: binary(),
  nbf: integer(),
  public_key: binary(),
  role: binary()
}

Producer input for one role attestation.