@ghub/gctl-crypto
v0.3.2
Published
Signing and verification for GControl: JWS EdDSA leases, dual-signature (Ed25519 + RSA-4096) licences and bundles, armoured licence codec, envelope encryption and audit hash chains.
Readme
@ghub/gctl-crypto
Signing and verification for GControl: lease and licence signatures, key statements and custody, sealed support bundles, and the escrow envelope a lockdown key travels in.
Verification never trusts a key because a document named it. Everything resolves through a key statement chain rooted in material the verifier already held, so a compromised issuer cannot introduce a key that then vouches for itself.
import { verifyAppLease } from "@ghub/gctl-crypto";
const result = await verifyAppLease(jws, { keys, expectInstance: instanceUuid });Part of GControl, a self-hosted broker for G-Apps. This package is published on its own because it is consumed outside that repository; it is not a general-purpose library and its releases follow GControl's.
Licence
Elastic License 2.0. Source-available: you may read, self-host and modify it for your own
organisation. You may not offer it as a service, and you may not circumvent the
licence-key functionality. See the LICENSE file in this package.
Copyright (c) 2026 Gelhaus Solutions (Enno Gelhaus). Built and maintained by Gelhaus Solutions.