)]}'
{
  "commit": "605edab4323bfdf06a0d8ac68b4b18e9e0df249b",
  "tree": "43e491fb69ea477b470cf0e1b6b70431cdac6b80",
  "parents": [
    "a410e2daa716f879ede62862a0351cad3606d11b"
  ],
  "author": {
    "name": "Filippo Valsorda",
    "email": "hi@filippo.io",
    "time": "Wed Nov 17 16:38:00 2021 -0500"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Wed Mar 30 20:53:32 2022 +0000"
  },
  "message": "sumdb/note: relax prescriptiveness of key hash format\n\nThe key hash is too short to serve a cryptographic purpose: it is\ntrivial for example to generate two names that given the same private\nkey end up with the same key hash. That means the only thing the key\nhash does is help pull up the right Verifier, similarly to the X.509\nSubject Key ID/Authority Key ID. That\u0027s ok.\n\nIt\u0027s also the case that the Open and Verifier APIs don\u0027t enforce a key\nhash scheme, so each Signer/Verifier implementation is free to implement\nits own. There is already in the ecosystem an ECDSA based implementation\nthat uses the hash of the SPKI for the key hash (which notably does not\ninclude the name).\n\nWe could either try to enforce that every implementation use an\nequivalent or specified key hash algorithm, or relax the prescriptiveness.\nI think that the latter is the right choice given that as mentioned\nabove we don\u0027t need (or can get) extra properties out of it.\n\nChange-Id: I9730cef862604aa8608d68f7f204f5dddfb4a39b\nReviewed-on: https://go-review.googlesource.com/c/mod/+/364856\nRun-TryBot: Filippo Valsorda \u003cfilippo@golang.org\u003e\nAuto-Submit: Filippo Valsorda \u003cfilippo@golang.org\u003e\nTrust: Filippo Valsorda \u003cfilippo@golang.org\u003e\nReviewed-by: Russ Cox \u003crsc@golang.org\u003e\nTryBot-Result: Gopher Robot \u003cgobot@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "ebfbe34cfcbbb2ad2ba1ec24de66ecc5f616a15a",
      "old_mode": 33188,
      "old_path": "sumdb/note/note.go",
      "new_id": "4a00501c000001e6e256b52e0ae86ef763822f7d",
      "new_mode": 33188,
      "new_path": "sumdb/note/note.go"
    }
  ]
}