key object definition is missing keyid_hash_algorithms

[jku]

spec says that all keys have the format

  { "keytype" : KEYTYPE,
    "scheme" : SCHEME,
    "keyval" : KEYVAL
  }

this matches the specific key format descriptions and later the examples.

The implementation at the moment looks like this however:

  { "keyid_hash_algorithms" : [ HASH_ALGORITHM, ... ] 
    "keytype" : KEYTYPE,
    "scheme" : SCHEME,
    "keyval" : KEYVAL
  }

where HASH_ALGORITHM is e.g. "sha256","sha512"

[lukpueh]

Thanks for submitting the issue, @jku! This discrepancy is being discussed in detail in theupdateframework/python-tuf#848.

Please also take a look at TAP 12 (draft), which proposes a new way of dealing with keyids.

[joshuagl]

I'm closing this issue as keyid_hash_algorithms is explicitly not part of the spec.