Module cose 

Functions

extract_key_id

Extract the key ID (verifying key bytes) from a COSE Sign1 envelope without verifying.

sign_fact_claim

Build a COSE Sign1 envelope for a provenance claim about a fact. The payload is CBOR-encoded with fields: id, content_hash, source_uri, timestamp.

sign_payload

Create a COSE Sign1 envelope over arbitrary payload bytes.

verify_and_extract

Verify a COSE Sign1 envelope and return the payload if valid.