Key Facts
- Category
- Security & Validation
- Input Types
- file, textarea
- Output Type
- json
- Sample Coverage
- 4
- API Ready
- Yes
Overview
The AGEX Signature Verifier allows you to quickly validate the Ed25519 signature attached to an AGEX bundle. By uploading your bundle file, you can confirm its authenticity using either the embedded public key or a custom base64-encoded public key for strict trust verification, all without needing a passphrase or decrypting the file contents.
When to Use
- •When you need to confirm that an AGEX bundle has not been tampered with and originates from a trusted sender.
- •When you want to verify the cryptographic signature of a bundle without decrypting its payload or entering a passphrase.
- •When you need to enforce explicit trust control by validating an AGEX bundle against a specific, externally provided Ed25519 public key.
How It Works
- •Upload the AGEX bundle file (up to 100MB) that contains the signature you want to verify.
- •Optionally, paste a base64-encoded Ed25519 public key into the signer public key field to enforce verification against a specific identity.
- •Click the verify button to run the cryptographic check on the bundle's Ed25519 signature.
- •Review the generated JSON output to confirm if the signature is present and successfully verified.
Use Cases
Examples
1. Verify Bundle Integrity with Embedded Key
DevOps Engineer- Background
- A DevOps engineer received a signed AGEX configuration bundle and wants to ensure the file was not corrupted during transit.
- Problem
- Confirming the bundle's internal signature is valid without having the sender's public key on hand.
- How to Use
- Upload the AGEX bundle file to the tool, leave the Signer Public Key field blank, and run the verification.
- Example Config
-
Signer Public Key field left blank. - Outcome
- The tool returns a JSON result showing that the signature is present and verified using the embedded key.
2. Enforce Trust with a Specific Public Key
Security Auditor- Background
- An auditor needs to verify that a received AGEX bundle was signed specifically by the organization's official release key, not just any embedded key.
- Problem
- Verifying the bundle signature against a known, trusted external public key.
- How to Use
- Upload the AGEX bundle file and paste the organization's base64-encoded Ed25519 public key into the Signer Public Key field.
- Example Config
-
Signer Public Key: BASE64_PUBLIC_KEY - Outcome
- The tool validates the signature against the provided key and outputs a JSON confirmation indicating a successful match.
Try with Samples
json, fileRelated Hubs
FAQ
Does this tool decrypt the contents of the AGEX bundle?
No, this tool only verifies the cryptographic Ed25519 signature and does not decrypt the payload or require a decryption passphrase.
What happens if I leave the Signer Public Key field blank?
The tool will automatically attempt to verify the signature using the public key embedded within the AGEX bundle itself.
What format should the external public key be in?
The external signer public key must be provided as a base64-encoded Ed25519 public key.
What file size limit applies to the AGEX bundle?
You can upload AGEX bundle files up to 100MB in size for signature verification.
How do I know if the signature verification succeeded?
The output JSON will display a 'signatureVerification' status of 'verified' if the signature is valid.