cose_sign1_verify
shallowio.github.bowenerchen/cipherhub · Verify this server
[cose_sign1] 验证 COSE_Sign1 签名（RFC 9052 §4.4 Sig_structure 重构验签）。 【算法】按 protected 头 alg 声明分派：-7/-35/-36（ES，裸 r||s → DER） 与 -8（Ed25519）。 【参数】 - cose_sign1_in_hex：COSE_Sign1 消息（≤128KB，hex） - ecc_public_key_in_pem：验签公钥 PEM。留空时从 payload 的 certificate 字段提取公钥（复刻 KMS 验 Nitro attestation 文档方式） - external_aad_in_hex：与签名时一致的外部 AAD（可选） 【输出】verified（bool）、reason、key_source（provided_pem 或 payload_certificate）、protected_header、payload_in_hex、payload_json、 payload_certificate_in_pem、sig_structure_in_hex、structure_tree。 【注意】verified=false 是成功响应（附 reason）；仅消息无法解析为 4 元素 COSE_Sign1 数组才返回错误码。
1 trials · measured 34 days ago
cose_sign1_verify scores 100.0/100 on Vouch's measured behaviour index, from 1 real invocation trials against io.github.bowenerchen/cipherhub, measured 16 Sept 2026 under methodology v0.2.0. Every measured component scored 100.
Component breakdown
| Component | Weight | Value |
|---|---|---|
| Reliability | 35% | not applicable |
| Schema integrity | 25% | 100.0 |
| Failure behaviour | 15% | not applicable |
| Latency | 15% | not applicable |
| Concurrency | 10% | not applicable |
Tool details
- Transport
- remote
- Credential class
- self-provisionable
- Category
- Finance & compliance
- Input schema
- not declared
- Output schema
- not declared
- Side-effect classification
- unclassified
Score history
| Day | Score | Tier | Methodology |
|---|---|---|---|
| 2026-09-16 | 100.0 | shallow | v0.2.0 |
Probe evidence
| Probe | Outcomes |
|---|---|
| schema_integrity | pass: 1 |
Raw request/response logs are not archived yet — the outcome counts above are drawn directly from every recorded trial.
Embed this score
Available for every tool, scored or not — not a verification perk. Always links back to this page.
[](https://vouch.tools/tools/7bea8936-30c7-4f77-be0a-0d0ba3a72e01)