tree 491998cf8ed01d094110ce29a45ac6f8c4752d2e
parent 441a611715c43c6995b119d674f72869af829601
author Christopher Collins <ccollins@apache.org> 1561507560 -0700
committer ccollins476ad <ccollins476ad@gmail.com> 1561574377 -0700

Support verification of encrypted images

An image's hash cannot be verified while the image is encrypted.  To
verify the hash of such an image, the image must be decrypted first
(without clearing the encrypted flag in the header).  This complicates
the API, as the caller now needs to pass in a set of encryption keys.

The fix is to split the image.Verify() function into several pieces:
    * VerifyStructure()
    * VerifyHash()
    * VerifySigs()
    * VerifyManifest()