...
The whole authenticating workflow show as following:.png?version=1&modificationDate=1484875347000&cacheVersion=1&api=v2)
1. OPNFV generates the key pairs for each release
2. dovetail uses this key to build a binary signature tool
3. dovetail generates a digest for both dovetail tool and report, then combine two digests into one, then sign the final digest
4. dovetail saves the report to a report file
5. upload report and signature to review
6. extract digest from signature
7. validate the integrity of dovetail tool and report
.png?version=1&modificationDate=1484879859000&cacheVersion=1&api=v2)