How to check value returned by ic-certified-map

Developers Rust
1

ic-certified-map allows to certify whether a given key is present in a map in a Rust canister. So far, so good.

But I have some hardship to understand, how to verify it by ic/rs/crypto/standalone-sig-verifier/src/lib.rs at master · dfinity/ic · GitHub.

  • It is unclear whether to use verify_basic_sig_by_public_key or verify_canister_sig.
  • Which parameter corresponds to which? (certificate is apparently signature; pubic_key is the canister’s public key, isn’t it? If msg is the key in the certified tree, then where is the witness?)

I also opened an issue about this question: Document `ic-certified-map` verification · Issue #667 · dfinity/cdk-rs · GitHub

2

Oh, it seems, I understood: message is witness and signature is certificate. The message itself is verified match the certificate by the backend in addition to pubkey verification by verify_basic_sig_by_public_key or verify_canister_sig. But which of these two functions to use?