Red Hat thiab Google, ua ke nrog Purdue University, tau tsim Sigstore qhov project, tsom rau kev tsim cov cuab yeej thiab cov kev pabcuam rau kev txheeb xyuas software siv cov kos npe digital thiab tuav cov ntaub ntawv pej xeem kom paub tseeb tias qhov tseeb (pob tshab log). Qhov project yuav raug tsim nyob rau hauv kev txhawb nqa ntawm lub koom haum non-profit Linux Foundation.
Cov phiaj xwm npaj yuav txhim kho kev ruaj ntseg ntawm software faib raws thiab tiv thaiv kev tawm tsam los hloov cov khoom siv software thiab kev vam khom (supply chain). Ib qho ntawm cov teeb meem kev ruaj ntseg tseem ceeb hauv qhov qhib software yog qhov nyuaj ntawm kev txheeb xyuas qhov chaw ntawm qhov kev pab cuam thiab txheeb xyuas cov txheej txheem tsim. Piv txwv li, feem ntau cov haujlwm siv hashes los xyuas qhov tseeb ntawm kev tso tawm, tab sis feem ntau cov ntaub ntawv tsim nyog rau kev lees paub yog khaws cia rau hauv cov txheej txheem tsis muaj kev tiv thaiv thiab hauv cov chaw khaws ntaub ntawv sib koom, vim tias cov neeg tawm tsam tuaj yeem cuam tshuam cov ntaub ntawv tsim nyog rau kev txheeb xyuas thiab qhia txog kev hloov pauv tsis zoo. tsis muaj kev ua xyem xyav.
Tsuas yog ib feem me me ntawm cov phiaj xwm siv cov ntawv kos npe digital thaum faib tawm vim muaj teeb meem hauv kev tswj cov yuam sij, faib cov yuam sij rau pej xeem, thiab tshem tawm cov yuam sij cuam tshuam. Txhawm rau txhawm rau txheeb xyuas kom muaj txiaj ntsig, nws tseem yuav tsum tau npaj cov txheej txheem txhim khu kev qha thiab ruaj ntseg rau kev faib cov yuam sij rau pej xeem thiab cov tshev nyiaj. Txawm tias muaj kev kos npe digital, ntau tus neeg siv tsis quav ntsej txog kev lees paub vim tias lawv yuav tsum siv sijhawm los kawm cov txheej txheem pov thawj thiab nkag siab qhov tseem ceeb twg yog qhov muaj kev ntseeg siab.
Sigstore yog touted raws li qhov sib npaug ntawm Let's Encrypt rau code, muab daim ntawv pov thawj rau digitally kos npe code thiab cov cuab yeej rau kev txheeb xyuas qhov tseeb. Nrog Sigstore, cov neeg tsim khoom tuaj yeem kos npe rau daim ntawv thov cuam tshuam txog cov khoom qub xws li tso cov ntaub ntawv, ntim cov duab, tshwm sim, thiab ua tiav. Ib qho tshwj xeeb ntawm Sigstore yog tias cov khoom siv rau kev kos npe tau cuam tshuam rau hauv cov ntaub ntawv pov thawj pej xeem uas tuaj yeem siv los txheeb xyuas thiab txheeb xyuas.
Hloov cov yuam sij tas mus li, Sigstore siv cov yuam sij luv luv, uas yog tsim los ntawm cov ntaub ntawv pov thawj lees paub los ntawm OpenID Connect cov chaw muab kev pabcuam (thaum lub sijhawm tsim cov yuam sij rau kos npe digital, tus tsim tawm qhia nws tus kheej los ntawm OpenID tus neeg muab kev pabcuam txuas rau email). Qhov tseeb ntawm cov yuam sij raug txheeb xyuas los ntawm kev siv lub hauv paus hauv paus, uas ua rau nws muaj peev xwm txheeb xyuas tau tias tus neeg sau kos npe yog raws nraim qhov nws lees paub thiab kos npe tau tsim los ntawm tib tus neeg koom nrog uas yog lub luag haujlwm rau kev tshaj tawm yav dhau los.
Sigstore muab ob qho kev pabcuam npaj txhij uas koj tuaj yeem siv tau, thiab cov cuab yeej siv uas tso cai rau koj siv cov kev pabcuam zoo sib xws ntawm koj tus kheej cov khoom siv. Cov kev pabcuam pub dawb rau txhua tus neeg tsim khoom thiab cov chaw muab software, thiab tau muab tso rau ntawm lub platform nruab nrab - Linux Foundation. Tag nrho cov khoom ntawm cov kev pabcuam yog qhib qhov chaw, sau rau hauv Go thiab faib raws li Apache 2.0 daim ntawv tso cai.
Ntawm cov khoom tsim tawm peb tuaj yeem nco ntsoov:
- Rekor yog qhov kev siv cav rau khaws cov ntaub ntawv kos npe digitally cuam tshuam txog cov ntaub ntawv hais txog cov haujlwm. Txhawm rau kom muaj kev ncaj ncees thiab tiv thaiv cov ntaub ntawv kev noj nyiaj txiag tom qab qhov tseeb, cov qauv ntoo zoo li "Merkle Tree" yog siv, uas txhua ceg txheeb xyuas tag nrho cov ceg hauv qab thiab cov nodes, ua tsaug rau kev sib koom ua ke (zoo li tsob ntoo) hashing. Muaj qhov kawg hash, tus neeg siv tuaj yeem txheeb xyuas qhov tseeb ntawm tag nrho cov keeb kwm ntawm kev ua haujlwm, nrog rau qhov tseeb ntawm lub xeev yav dhau los ntawm cov ntaub ntawv (cov pov thawj hauv paus hash ntawm lub xeev tshiab ntawm cov ntaub ntawv suav nrog suav nrog lub xeev yav dhau los. ). Txhawm rau txheeb xyuas thiab ntxiv cov ntaub ntawv tshiab, Restful API tau muab, nrog rau kev sib tham cli.
- Fulcio (SigStore WebPKI) yog ib txoj hauv kev tsim cov ntawv pov thawj (Root-CAs) uas muab cov ntawv pov thawj luv luv raws li email authenticated ntawm OpenID Connect. Lub neej ntawm daim ntawv pov thawj yog 20 feeb, thaum lub sijhawm tus tsim tawm yuav tsum muaj sijhawm los tsim cov ntawv kos npe digital (yog tias daim ntawv pov thawj tom qab poob rau hauv tes ntawm tus neeg tawm tsam, nws yuav tas sijhawm).
- Π‘osign (Container Kos npe) yog ib qho cuab yeej los tsim cov npe kos npe rau cov thawv ntim khoom, txheeb xyuas cov npe kos npe thiab muab cov thawv kos npe rau hauv cov chaw cia khoom sib xws nrog OCI (Open Container Initiative).
Tau qhov twg los: opennet.ru