FR-IMG-004 — Image Signing

Go to Crucible Image Management Requirements

Crucible SHALL generate a Digital Signature for an identified Image and associate the Digital Signature with that Image.

This requirement derives from:

• Crucible System Requirements Specification, Version 1.1 Draft, Functional Requirements, FR-IMG-004

The Original Requirement states:

Crucible SHALL perform Image Signing by generating a Digital Signature for an identified Image and associating the Digital Signature with that Image.[C1]

FR-IMG-004 removes the introductory phrase perform Image Signing by while preserving the required signing behavior and results.

No other substantive normalization is required.

Image Signing associates an identified Image with a Digital Signature generated for that Image.

The association allows a separate verification process to determine whether the Digital Signature corresponds to the identified Image and the applicable signing identity.

This requirement governs generation and association of the Digital Signature. Separate requirements govern signature verification, Image approval, promotion, publication, transfer, and deployment.

This requirement applies to:

• Crucible
• Image Signing
• Images
• Digital Signatures

Verification confirms that:

1. An identified Image is selected for signing
2. Crucible generates a Digital Signature for the identified Image
3. Crucible associates the generated Digital Signature with the identified Image
4. The associated Digital Signature identifies or references the Image to which it applies

The following pages reference this requirement:

Implemented and Verified

Review and approve FR-IMG-004 as a leaf requirement.

Confirm that the Source Statement reproduces the exact wording of the controlling System Requirements Specification.

Determine whether separate requirements define the signing identity and signing-key requirements.

This requirement page retains the stable requirement identifier FR-IMG-004.

This page is a leaf requirement page and omits a trailing :start from its namespace.

The Statement preserves both required results expressed by the Original Requirement:

• Generation of a Digital Signature for an identified Image
• Association of the generated Digital Signature with that Image

Do not reduce the Statement to association alone because doing so would omit the required generation of the Digital Signature.

Do not add signature verification, Image approval, promotion, publication, transfer, deployment, signing-algorithm, or key-governance obligations unless the controlling requirement changes through an approved requirements process.

To reference this requirement Statement from another wiki page, insert:

{{section>dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-02-image-management:fr-img-004#Statement&noheader&nofooter&noeditbtn}}