policy_signing_key.proto 990 B

1234567891011121314151617181920212223242526
  1. // Copyright 2014 The Chromium Authors. All rights reserved.
  2. // Use of this source code is governed by a BSD-style license that can be
  3. // found in the LICENSE file.
  4. syntax = "proto2";
  5. option optimize_for = LITE_RUNTIME;
  6. package enterprise_management;
  7. // Contains a signing key and its signature.
  8. message PolicySigningKey {
  9. // The key used to verify policy blobs sent down from the server.
  10. optional bytes signing_key = 1;
  11. // The signature for this signing key (verified using a hard-coded key
  12. // stored in the Chrome binary). This is essentially a certificate (key
  13. // signed with another well-known key that establishes a trust root).
  14. optional bytes signing_key_signature = 2;
  15. // This is the hard-coded verification key used to generate/verify the
  16. // signing_key_signature. We track this in the cache data so we know which
  17. // verification key to use when validating the cached policy (important when
  18. // doing key rotation).
  19. optional bytes verification_key = 3;
  20. }