WorldPackageSignature

public static class WorldPackageSignature

Namespace NodeWorld.SDK.Shared.

The signature of a world's package: manifest.sig holds the creator's RSA-SHA256 (PKCS#1) signature of the exact bytes of manifest.json, which lists every file of the package with its size and SHA-256. Checked against the public key the manifest itself carries: it says who published the world, it does not make the world safe.

Constants#

FileName#

public const string FileName = "manifest.sig"

Name of the signature file, next to manifest.json.

Prefix#

public const string Prefix = "rsa-sha256-pkcs1:"

What the signature file starts with, before the base64 signature.

Methods#

Verify#

public static bool Verify(byte[] data, string signature, string publicKey)

True when signature is the signature of data by the RSA key publicKey (SubjectPublicKeyInfo in base64).