corpus.blog
41,554 blogs · 4,819,422 posts Claim your blog
Record · corpus.blog/posts/01a0b5ca-2149-71cb-97e0-2e36d893f9ab

Is Sigstore susceptible to psychic signatures? Sources say: sounds suspect

Chainguard Blog · published 22 April 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at chainguard.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
14
Words captured
1,149

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
CVE-2022-21449: Psychic Signatures in Java Read at the source ↗
neilmadden.blog
https://github.com/sigstore/sigstore-java
github.com
https://www.sigstore.dev/
sigstore.dev
https://openssf.org/community/sigstore/
openssf.org
https://github.com/sigstore/cosign
github.com
https://openid.net/connect/
openid.net
https://github.com/sigstore/rekor
github.com
https://transparency.dev/
transparency.dev
https://en.wikipedia.org/wiki/Digital_signature
en.wikipedia.org
https://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithm
en.wikipedia.org
https://en.wikipedia.org/wiki/Elliptic-curve_cryptography
en.wikipedia.org
https://github.com/chainguard-dev/is-sigstore-psychic
github.com
https://letsencrypt.org/docs/a-warm-welcome-to-asn1-and-der/
letsencrypt.org
https://sigstore.slack.com/join/shared_invite/zt-mhs55zh0-XmY3bcfWn4XEyMqUUutbUQ
sigstore.slack.com
Elsewhere on chainguard.dev (1)