in server/signedcontainer/verify.go [161:172]
func createPublicKeysetHandle(publicKey []byte, sigAlg signingAlgorithm) (*keyset.Handle, error) {
switch sigAlg {
case ecdsaP256Sha256:
return convert.PemToECDSAP256Sha256WithDEREncodingKeysetHandle(publicKey)
case rsasaaPkcs1v15Sha256:
return convert.PemToRsaSsaPkcs1Sha256KeysetHandle(publicKey)
case rsassaPssSha256:
return convert.PemToRsaSsaPssSha256KeysetHandle(publicKey)
default:
return nil, fmt.Errorf("unsupported signing algorithm: %v", sigAlg)
}
}