Package: golang-github-sigstore-timestamp-authority-dev
Source: golang-github-sigstore-timestamp-authority
Version: 2.1.3-2
Architecture: all
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Original-Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Installed-Size: 507
Depends: golang-github-beevik-ntp-dev, golang-github-digitorus-pkcs7-dev, golang-github-digitorus-timestamp-dev, golang-github-go-chi-chi-dev, golang-github-go-openapi-errors-dev, golang-github-go-openapi-loads-dev, golang-github-go-openapi-runtime-dev (>> 0.32.4~), golang-github-go-openapi-spec-dev, golang-github-go-openapi-strfmt-dev, golang-github-go-openapi-swag-dev, golang-github-google-go-cmp-dev, golang-github-mitchellh-go-homedir-dev, golang-github-mitchellh-mapstructure-dev, golang-github-pkg-errors-dev, golang-github-prometheus-client-golang-dev, golang-github-rs-cors-dev, golang-github-sigstore-sigstore-dev, golang-github-spf13-cobra-dev, golang-github-spf13-pflag-dev, golang-github-spf13-viper-dev, golang-github-tink-crypto-tink-go-awskms-dev, golang-github-tink-crypto-tink-go-dev, golang-github-tink-crypto-tink-go-gcpkms-dev, golang-github-tink-crypto-tink-go-hcvault-dev, golang-github-urfave-negroni-dev, golang-go.uber-zap-dev, golang-golang-x-net-dev, golang-google-cloud-dev, golang-google-protobuf-dev, golang-k8s-sigs-release-utils-dev, golang-k8s-sigs-yaml-dev, golang-uber-goleak-dev
Section: golang
Priority: optional
Multi-Arch: foreign
Homepage: https://github.com/sigstore/timestamp-authority
Description: Sigstore RFC3161 Timestamp Authority (Go library)
 Sigstore Timestamp Authority
 .
 A service for issuing RFC 3161 timestamps
 (https://datatracker.ietf.org/doc/html/rfc3161).
 .
 Timestamps conform to the RFC 3628 policy
 (https://datatracker.ietf.org/doc/html/rfc3628). The timestamp structure
 conforms to the updates in RFC 5816
 (https://datatracker.ietf.org/doc/rfc5816).
 .
 Trusted timestamping
 (https://en.wikipedia.org/wiki/Trusted_timestamping) is a process that
 has been around for some time. It provides a timestamp record of when a
 document was created or modified.
 .
 A timestamp authority creates signed timestamps using public key
 infrastructure. The operator of the timestamp authority must secure the
 signing key material to prevent unauthorized timestamp signing.
 .
 Timestamping within Sigstore
 .
 Timestamps are a critical component of Rekor
 (https://github.com/sigstore/rekor), Sigstore's signature transparency
 log. Timestamps are used to verify short-lived certificates. Currently,
 the timestamp comes from Rekor's own internal clock, which is not
 externally verifiable or immutable. Using signed timestamps issued from
 timestamp authorities mitigates the risk of Rekor's clock being
 manipulated.
