Skip to content
Building cryptographic agility into Sigstore
blog.trailofbits.com | blog | #supply-chain | #open-source | #cryptography | #post-quantum | #cryptographic-agility | #trail-of-bits | #sigstore | #code-signing | #software-signing
Summary
Trail of Bits and Sigstore added cryptographic agility to software signing: a centralized algorithm registry, configurable restrictions in Rekor/Fulcio, Cosign support, and post-quantum LMS/ML-DSA.
- Published
- Collected