add comment

Signed-off-by: Asra Ali <asraa@google.com>
theupdateframework · Sep 7, 2022 · 1736e3c · 1736e3c
1 parent 2db153d
commit 1736e3c
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/pkg/keys/ecdsa.go b/pkg/keys/ecdsa.go
@@ -17,7 +17,10 @@ import (
 )
 
 func init() {
-	VerifierMap.Store(data.KeyTypeECDSA_SHA2_P256, NewEcdsaVerifier)
+	// Note: we use LoadOrStore here to prevent accidentally overriding the
+	// an explicit deprecated ECDSA verifier.
+	// TODO: When deprecated ECDSA is removed, this can switch back to Store.
+	VerifierMap.LoadOrStore(data.KeyTypeECDSA_SHA2_P256, NewEcdsaVerifier)
 	SignerMap.Store(data.KeyTypeECDSA_SHA2_P256, newEcdsaSigner)
 }