Verify an Ed25519 signature over a payload. Args: public_key_bytes: Raw 32-byte Ed25519 public key. payload: The signed payload string. signature_b64url: Base64url-encoded Ed25519 signature. Returns: True if signature is valid, False otherwise.
(
public_key_bytes: bytes,
payload: str,
signature_b64url: str,
)
| 124 | |
| 125 | |
| 126 | def verify_signature( |
| 127 | public_key_bytes: bytes, |
| 128 | payload: str, |
| 129 | signature_b64url: str, |
| 130 | ) -> bool: |
| 131 | """ |
| 132 | Verify an Ed25519 signature over a payload. |
| 133 | |
| 134 | Args: |
| 135 | public_key_bytes: Raw 32-byte Ed25519 public key. |
| 136 | payload: The signed payload string. |
| 137 | signature_b64url: Base64url-encoded Ed25519 signature. |
| 138 | |
| 139 | Returns: |
| 140 | True if signature is valid, False otherwise. |
| 141 | """ |
| 142 | try: |
| 143 | signature_bytes = base64.urlsafe_b64decode(signature_b64url + "==") |
| 144 | public_key = ed25519.Ed25519PublicKey.from_public_bytes(public_key_bytes) |
| 145 | public_key.verify(signature_bytes, payload.encode("utf-8")) |
| 146 | return True |
| 147 | except Exception: |
| 148 | return False |
| 149 | |
| 150 | |
| 151 | def verify_ca_signature( |
no test coverage detected