AzelusLightvale-ComfyUI-ARG-Toolkit/web/docs/ECVerify.md

Elliptic Curve Signature Verify

Verifies an ECDSA digital signature.

Source library: cryptography

Overview

This node verifies that a signature was legitimately created by the holder of a specific EC private key. It takes the message, the signature, the public key, and the hash algorithm used during signing, and returns whether the signature is valid.

Parameters

• public_key: The EC public key object (KEYOBJ), obtained from another node.
• signature: The signature to verify, as a BYTESLIKE object.
• data: The original message that was signed, as a BYTESLIKE object.
• signature_algorithm: The hash algorithm that was used during signing. Must match the algorithm used by the signer. Options include:
  • SHA224, SHA256, SHA384, SHA512, SHA512_224, SHA512_256
  • BLAKE2b, BLAKE2s
  • SHA3_224, SHA3_256, SHA3_384, SHA3_512
  • SHA1, MD5, SM3
• prehashed: (Optional) A BOOLEAN that, when True, indicates the data is a pre-computed hash.

Outputs

• verification: A BOOLEAN that is True if the signature is valid, and False otherwise.

Additional Considerations

• Always verify signatures using a trusted public key. If an attacker can supply the public key, they can forge signatures.
• The hash algorithm must match what was used during signing. Using a mismatched algorithm will always result in verification failure.
• MD5 and SHA1 are broken and should not be used for new verification that requires security.