From eb4668408ceac440972213053ab0d97f6fa7ae89 Mon Sep 17 00:00:00 2001 From: stefan Date: Mon, 23 Feb 2026 18:53:35 +0100 Subject: SLSA models added Signed-off-by: stefan --- .../101-Multiple-GnuPG-signatures-Trust.puml | 45 ++++++++++++++++++++++ 1 file changed, 45 insertions(+) create mode 100644 PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.puml (limited to 'PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.puml') diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.puml b/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.puml new file mode 100644 index 0000000..737d8a6 --- /dev/null +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.puml @@ -0,0 +1,45 @@ +@startuml + ' keine farben!! +' !theme mimeograph + +skinparam shadowing false + +Title DFD: Multiple GnuPG Signatures for the NetBSD ISO image + +header += Combining Trust from the Web of Trust +Timestamp: %date("yyyy-MM-dd kk:mm Z") +endheader + + + +entity Alice +entity Bob +entity Charly + +database "NetBSD ISO Repository" as ISORepo +database "Public Signature Store" as SigStore + +circle "Download ISO" as P1 +circle "Compute SHA256 Hash" as P2 +circle "Sign ISO Hash\n(Private Key)" as P3 +circle "Publish Signature" as P4 + +Alice --> P1 +P1 --> ISORepo +ISORepo --> P2 +P2 --> P3 +P3 --> P4 +P4 --> SigStore + +Bob --> P1 +Bob --> P2 +Bob --> P3 +Bob --> P4 + +Charly --> P1 +Charly --> P2 +Charly --> P3 +Charly --> P4 + +@enduml -- cgit v1.2.3