Tampered Manifest Detection

See how Ed25519 verification catches a manifest modified after signing. Two entities interact: an attacker sends and a verifier detects.

Tampering Actor

Sends a modified manifest to simulate tampering after signing.

SITE

Signature Verifier

Detects tampering by canonicalizing payload and verifying the Ed25519 signature.

CONSUMER
Subject: A manifest modified after signing. The signature no longer matches the data.
7 steps