@modoki/engine / index / verifyReleaseSignature

Function: verifyReleaseSignature()

verifyReleaseSignature(release, publicKeyBase64url): boolean

base64url-decodes the release's Ed25519 signature and verifies it against signingPayload's canonical serialization. Never throws — a malformed signature/key is simply "not verified", matching engine/scripts/ota/signing.mjs's Node-side verifyRelease contract exactly (both must treat garbage input the same way, since they check the same signatures).

Parameters

release

OtaRelease

publicKeyBase64url

string

Returns

boolean