TestimoX

API Reference

Class

BenchmarkRequirementsTrust

Namespace TestimoX.Benchmarks.Requirements
Assembly TestimoX
Modifiers static

Signs and verifies company benchmark requirements manifests.

Inheritance

  • Object
  • BenchmarkRequirementsTrust

Methods

public static String NormalizeThumbprint(String thumbprint) #
Returns: String

Normalizes a certificate thumbprint for deterministic comparisons.

Parameters

thumbprint System.String requiredposition: 0
public static Void RequireAuthorizedPublisher(BenchmarkRequirementsTrustPolicy policy, String artifactName = "Company requirements") #
Returns: Void

Rejects trust policies that would authorize every certificate accepted by the Windows trust store. Company requirements and deferred write plans must be pinned to an explicitly authorized publisher.

Parameters

policy TestimoX.Benchmarks.Requirements.BenchmarkRequirementsTrustPolicy requiredposition: 0
artifactName System.String = "Company requirements" optionalposition: 1
public static BenchmarkDigitalSignature Sign(BenchmarkRequirementsManifest manifest, X509Certificate2 certificate) #
Returns: BenchmarkDigitalSignature

Signs a canonical manifest with the private RSA key of an X.509 certificate.

Parameters

manifest TestimoX.Benchmarks.Requirements.BenchmarkRequirementsManifest requiredposition: 0
certificate System.Security.Cryptography.X509Certificates.X509Certificate2 requiredposition: 1
public static BenchmarkDigitalSignature SignBytes(Byte[] content, X509Certificate2 certificate, Nullable<DateTimeOffset> signedAt = null) #
Returns: BenchmarkDigitalSignature

Creates an X.509-backed RSA signature over exact caller-supplied bytes.

Parameters

content System.Byte[] requiredposition: 0
certificate System.Security.Cryptography.X509Certificates.X509Certificate2 requiredposition: 1
signedAt System.Nullable{System.DateTimeOffset} = null optionalposition: 2
public static X509Certificate2 Verify(BenchmarkRequirementsManifest manifest, BenchmarkRequirementsTrustPolicy policy) #
Returns: X509Certificate2

Verifies the signature, certificate validity, publisher pin, and optional Windows trust chain.

Parameters

manifest TestimoX.Benchmarks.Requirements.BenchmarkRequirementsManifest requiredposition: 0
policy TestimoX.Benchmarks.Requirements.BenchmarkRequirementsTrustPolicy requiredposition: 1
public static X509Certificate2 VerifyBytes(Byte[] content, BenchmarkDigitalSignature signature, BenchmarkRequirementsTrustPolicy policy) #
Returns: X509Certificate2

Verifies a detached signature over exact caller-supplied bytes using the configured trust policy.

Parameters

content System.Byte[] requiredposition: 0
signature TestimoX.Benchmarks.Requirements.BenchmarkDigitalSignature requiredposition: 1
policy TestimoX.Benchmarks.Requirements.BenchmarkRequirementsTrustPolicy requiredposition: 2