Add 'ecdsa' to the list of supported key types

Signed-off-by: Velichka Atanasova <avelichka@vmware.com>

Author: avelichka

tuf/api/metadata.py

@@ -415,7 +415,7 @@ class Key:
             the metadata it is used in. This implementation does not verify
             that keyid is the hash of a specific representation of the key.
         keytype: A string denoting a public key signature system,
-            such as "rsa", "ed25519", and "ecdsa-sha2-nistp256".
+            such as "rsa", "ed25519", "ecdsa" and "ecdsa-sha2-nistp256".
         scheme: A string denoting a corresponding signature scheme. For example:
             "rsassa-pss-sha256", "ed25519", and "ecdsa-sha2-nistp256".
         keyval: A dictionary containing the public portion of the key.

tuf/client/updater.py

@@ -952,7 +952,7 @@ def _import_delegations(self, parent_role):
 
     # Iterate the keys of the delegated roles of 'parent_role' and load them.
     for keyid, keyinfo in keys_info.items():
-      if keyinfo['keytype'] in ['rsa', 'ed25519', 'ecdsa-sha2-nistp256']:
+      if keyinfo['keytype'] in ['rsa', 'ed25519', 'ecdsa', 'ecdsa-sha2-nistp256']:
 
         # We specify the keyid to ensure that it's the correct keyid
         # for the key.

tuf/keydb.py

@@ -45,7 +45,7 @@
 from tuf import formats
 
 # List of strings representing the key types supported by TUF.
-_SUPPORTED_KEY_TYPES = ['rsa', 'ed25519', 'ecdsa-sha2-nistp256']
+_SUPPORTED_KEY_TYPES = ['rsa', 'ed25519', 'ecdsa', 'ecdsa-sha2-nistp256']
 
 # See 'log.py' to learn how logging is handled in TUF.
 logger = logging.getLogger(__name__)

tuf/repository_lib.py

@@ -75,7 +75,7 @@
 TIMESTAMP_EXPIRES_WARN_SECONDS = 86400
 
 # Supported key types.
-SUPPORTED_KEY_TYPES = ['rsa', 'ed25519', 'ecdsa-sha2-nistp256']
+SUPPORTED_KEY_TYPES = ['rsa', 'ed25519', 'ecdsa', 'ecdsa-sha2-nistp256']
 
 # The algorithm used by the repository to generate the path hash prefixes
 # of hashed bin delegations.  Please see delegate_hashed_bins()

tuf/scripts/repo.py

@@ -183,7 +183,7 @@
 # The supported keytype strings (as they appear in metadata) are listed here
 # because they won't necessarily match the key types supported by
 # securesystemslib.
-SUPPORTED_KEY_TYPES = ('ed25519', 'ecdsa-sha2-nistp256', 'rsa')
+SUPPORTED_KEY_TYPES = ('rsa', 'ed25519', 'ecdsa', 'ecdsa-sha2-nistp256')
 
 # pylint: disable=protected-access
 # ... to allow use of sslib _generate_and_write_*_keypair convenience methods