Enhancing Cryptographic Flexibility in Sigstore

In today’s fast-paced digital world, software protections must evolve as swiftly as technology does. While applications continue to function for decades, the cryptography guarding them doesn’t enjoy the same longevity. Take SHA-1 and weak RSA keys, for example—they’re becoming obsolete. Plus, quantum computing looms as a threat to existing elliptic curve cryptography.

Sigstore, an open-source tool for signing software, focused initially on security by choosing stability over flexibility. By using ECDSA with P-256 and SHA-256, it avoided tricky security issues. However, as Sigstore grew, this lack of flexibility started showing operational limitations.

In recent years, Trail of Bits teamed up with the Sigstore community to revamp its cryptographic approach. A pivotal move was creating a centralized algorithm registry via Protobuf, forming a clear reference for algorithms. Furthermore, Rekor and Fulcio now feature customizable algorithm constraints while Cosign empowers users with algorithm choices when crafting ephemeral keys. Go versions for future-proof algorithms like LMS and ML-DSA are proof of the architecture’s forward-thinking adaptability.

Current State of Sigstore’s Cryptography

Sigstore predominantly utilizes ECDSA with P-256 curves and SHA-256 to avoid risks tied to cryptographic agility. This setup helped streamline operations, yet demands a more versatile framework now. Different user groups have varying needs:

• Compliance-focused organizations seek NIST-approved algorithms.
• Open-source managers may prefer minimal cryptographic engagement, relying on secure defaults.
• Security-conscious enterprises might wish to deploy solely post-quantum algorithms.

Given software’s prolonged relevance, current signatures need enduring verifiability and flexibility to adjust to evolving standards. A comprehensive design is underway to weave controlled cryptographic agility into Sigstore, preserving security.

Addressing Flexibility Dangers

The perils of cryptographic flexibility aren’t new. Vulnerabilities like the JWT alg: none issue allowed unwanted interference. Similarly, JWT faced an attack through algorithm confusion. Problems like these show why arbitrary cryptographic decision-making can be risky.

Introducing Controlled Flexibility

Instead of allowing random algorithm pairings, Sigstore performs predefined suites of compatible cryptographic elements. For instance, PKIX_ECDSA_P256_SHA_256 merges the signing algorithm and necessary hash function, preventing harmful mismatches. Users select from a few suites via out-of-band decisions, steering clear of in-band signaling risks.

Implementation Steps

Enhancing Sigstore’s cryptographic flexibility included multiple phases:

• Phase 1: Establishing a centralized algorithm registry in Protobuf as the definitive algorithm source for all Sigstore functions.
• Phase 2: Updating Rekor and Fulcio with a flag to declare approved algorithms, supporting customized restrictions like Ed25519-only deployments.
• Phase 3: Allowing Cosign to support various signing algorithms by removing strict SHA-256 reliance, thus letting users opt for preferred signing protocols during key generation.

Proving Flexibility Works

To demonstrate this versatile architecture, we’ve equipped Rekor and the Sigstore Go library with HashEdDSA (Ed25519ph) and Go implementations for post-quantum algorithms like LMS and ML-DSA.

Practical Application of Cryptographic Flexibility

A practical use case is running a private Rekor instance configured to only accept ECDSA P-521 with SHA-512 and RSA-4096 with SHA-256. This example highlights both the algorithm constraints and newfound capabilities.

Qsentinel Call to Action Block: Curious about how cryptographic updates can protect your software in a quantum future? Explore more with Sigstore’s community and discover the cutting-edge enhancements ready to safeguard your applications.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.