SshPublicKeyVerifier¶
Server-side verification of a client publickey userauth signature per RFC 4252 section 7. This proves the client holds the private key for the presented public key; the consumer still decides whether that key is authorized.
Constructors¶
create¶
Returns¶
- SshPublicKeyVerifier val^
Public Functions¶
verify¶
Returns true only when pk.signature is a valid signature over the expected signed data — string(session_id) || byte(SSH_MSG_USERAUTH_REQUEST) || string(username) || string(service) || string("publickey") || bool(true) || string(algorithm) || string(public_key_blob) — proving possession of the private key. Only ssh-ed25519 keys are supported; every other algorithm, and any malformed blob, fails closed.
fun box verify(
session_id: Array[U8 val] val,
username: String val,
service: String val,
pk: SshAuthPublicKeyData val)
: Bool val
Parameters¶
- session_id: Array[U8 val] val
- username: String val
- service: String val
- pk: SshAuthPublicKeyData val
Returns¶
- Bool val
eq¶
Parameters¶
- that: SshPublicKeyVerifier val
Returns¶
- Bool val
ne¶
Parameters¶
- that: SshPublicKeyVerifier val
Returns¶
- Bool val