package conex

  1. Overview
  2. Docs

Establish trust in community repositories

Conex is a library to verify and attest package release integrity and authenticity through the use of cryptographic signatures.

Each author cryptographically signs a list of resources (own public key, package releases) they vouch for. The repository is a map where resource digests are the key, and the set of warrantors the value. Verification of the signature is done via verify.

Given a logs and a verify implementation, this modules provides functionality to verify identities and packages. All functions require IO explicitly.

0.9.2 - homepage

module Make (L : Conex_utils.LOGS) (C : Conex_crypto.VERIFY) : sig ... end
OCaml

Innovation. Community. Security.