Name		Name	Last commit message	Last commit date
parent directory ..
Misc		Misc
doc		doc
example		example
man		man
testsuite		testsuite
Credential		Credential
HOWTO.add.crypto		HOWTO.add.crypto
LICENSE		LICENSE
Makefile		Makefile
Makefile.in		Makefile.in
Policy		Policy
README		README
README.md		README.md
TODO		TODO
assertion.h		assertion.h
auxil.c		auxil.c
base64.c		base64.c
config.cache		config.cache
config.h		config.h
config.hin		config.hin
config.log		config.log
config.status		config.status
configure		configure
configure.in		configure.in
environment.c		environment.c
getopt.c		getopt.c
getopt.h		getopt.h
header.h		header.h
k.tab.c		k.tab.c
k.tab.h		k.tab.h
keynote		keynote
keynote-keygen.c		keynote-keygen.c
keynote-main.c		keynote-main.c
keynote-sign.c		keynote-sign.c
keynote-sigver.c		keynote-sigver.c
keynote-ver.l		keynote-ver.l
keynote-ver.y		keynote-ver.y
keynote-verify.c		keynote-verify.c
keynote.h		keynote.h
keynote.l		keynote.l
keynote.y		keynote.y
lex.kn.c		lex.kn.c
lex.kv.c		lex.kv.c
libkeynote.a		libkeynote.a
parse_assertion.c		parse_assertion.c
sample-app.c		sample-app.c
signature.c		signature.c
signature.h		signature.h
z.tab.c		z.tab.c
z.tab.h		z.tab.h

README.md

The KeyNote Trust-Management System

You can download the original KeyNote trust management library from here: https://www.cs.columbia.edu/~angelos/keynote.html. To read more about the the system, you can read The KeyNote Trust-Management System, Version 2

New Features

Few changes were performed on the original library. These changes include:

Supporting "SHA256" while performing credential signature
Adding the "Delegate" section on the credential to determine whether the credential can be further delegated or not.
Making the library compatible with the latest version of the OpenSSL library.

How to use the library

The structure of the credential

authorizer: authorizer_public_key 
licensees:  licensee_public_key  
condtions: con1 -> trusted 
signature:

Sign the credential

$ ./keynote  sign  sig-rsa-sha256-hex:  credential authorizer_private_key >> credential

Verify the credential's signature
```
./keynote sigver credential  
```
Testing the KeyNote policy

in case the licensee wants to send a request the authorizer, the authorizer uses that credential, its local policy, assertion file, and the licensee's public key to evaluate that request.
```
./keynote verify -r untrusted ,trusted \
-e assrt.txt \
-l policy \
-k licensee_public_key \
credential
```