Signing with x509 Key Materials

Signatures are implemented using the Dead Simple Signing Envelope (DSSE) standard.

To sign a container, a set of keys is typically required. A private key is used for signing, while a public key, which is usually distributed, servers to verify the signature.

For the purpose of this lab, let’s create this pair of keys. First, we’ll generate a 2048-bit private key: