Skip to main content

Module ers

Module ers 

Source
Expand description

RFC 4998 Evidence Record Syntax (ERS) for long-term archival.

Implements Evidence Records that protect artifacts over decades as hash algorithms weaken. Periodic re-timestamping with stronger algorithms maintains verifiability.

Confium extends standard ERS with periodic re-quorum: every N years, the current quorum re-signs and re-encrypts archives under current algorithm suites.

See TODO.roadmap/37-long-term-archival.md for full spec.

Structs§

ArchiveTimeStampSequence
A sequence of archive timestamps covering a time period.
ErsVerificationResult
Outcome of verify_evidence_record.
EvidenceRecord
An Evidence Record (RFC 4998).
SequenceCheck
Per-sequence outcome of verify_evidence_record.
TimeStamp
An RFC 3161 timestamp token.
Tsa
A trusted Time Stamping Authority identity.

Enums§

ErsError
Errors during ERS operations.
HashAlgorithm
Hash algorithm identifier.

Functions§

build_initial_evidence_record
Build an initial Evidence Record for an artifact.
renew_evidence_record
Renew an existing Evidence Record by adding a new timestamp sequence with a stronger hash algorithm.
renewal_count
Count renewal rounds applied so far.
verify_evidence_record
Verify an Evidence Record end-to-end against the artifact it protects and the set of trusted TSAs.