3 ms·
I feel like a hash of the contents + some secret bytes could be a convincing signature that only the owners of the secret bytes could author. Alternatively, ha
by conradludgate 4y ago
I feel like a hash of the contents + some secret bytes could be a convincing signature that only the owners of the secret bytes could author.
Alternatively, hash the contents and signed using asymmetric keys. This would allow for non private key owners to validate the integrity
- martinko 4y ago> I feel like a hash of the contents + some secret bytes could be a convincing signature that only the owners of the secret bytes could author. How would you validate the signature?
- noodlesUK 4y agoParent is describing a keyed HMAC scheme. JWTs sometimes use them, but key management is a massive PITA.