Skip to content
API referenceGet the evidence signing key

Get the evidence signing key

GET/v1/public/trust/evidence-signing-key

Get the evidence signing key.

The Ed25519 public key that verifies evidence bundles. A reviewer who receives a bundle checks manifest.sig (base64) against the exact bytes of manifest.json with this key, and that key_id matches the one in the manifest; then each file's SHA-256 against the manifest. Fetch the key from here rather than trusting the copy inside the bundle. No credentials needed.

Errors: 404 when no signing key is configured on this deployment.

Authorization

None: this endpoint is public.

Responses

200application/json
  • key_idstring

    The key id, the first 16 hex characters of the SHA-256 of the public key; the same id is in each bundle's manifest.

  • algorithmstring

    The signature algorithm, always Ed25519.

  • public_key_pemstring

    The public key, X.509 SubjectPublicKeyInfo in PEM encoding (what openssl reads).

NVIDIA Inception Program member

VectorAxis is built by GK Labs, a member of NVIDIA Inception.