signing-spec

Simple, foolproof standard for signing arbitrary data.

Why not JOSE/JWS/JWT? JSON-specific, too complicated, too easy to mess up.
Why not PASETO? JSON-specific, too opinionated.

What is it?

Signature protocol
Data structure for storing the message and signatures
(pending #9) Suggested crypto primitives

Out of scope (for now at least):

Key management / PKI

Who uses it?

in-toto (pending ITE-5)
TUF (pending)