cursive

What it is and what it does

Cursive is a library that extracts and centralizes OpenStack-specific digital signature validation logic previously scattered across OpenStack projects. It wraps cryptography and Oslo libraries to provide signature verification tailored to OpenStack's security model and certificate handling practices.

The package is intended for OpenStack operators, integrators, and developers who need to verify signatures on OpenStack artifacts, configurations, or communications. It requires Python 3.11+ and depends on the Oslo middleware suite (serialization, utilities, internationalization, logging) plus castellan for key management. The project is actively maintained and has no known vulnerabilities.

Use it for:

• Verify digital signatures on OpenStack configuration files or deployment artifacts in CI/CD pipelines.
• Validate cryptographic signatures on OpenStack API responses or messages in custom integrations.
• Centralize signature validation logic across multiple OpenStack-based services or tools.
• Implement security controls for OpenStack cloud environments requiring signature attestation.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Cursive validates digital signatures using OpenStack-specific logic, providing cryptographic verification capabilities for OpenStack projects and integrations.

Yes, if you are building or operating OpenStack infrastructure and need standardized signature validation. The library is actively maintained, has low install friction, carries a permissive license, and integrates cleanly with the Oslo ecosystem. Not relevant for non-OpenStack projects.

Install

cursive on PyPI

pip install cursive

uv add cursive

poetry add cursive

Installing cursive

Before you install

Low friction: pure Python wheel with no compiled dependencies. Active maintenance with a release 8 days ago. Depends on established OpenStack libraries (oslo.* suite) and cryptography, all well-maintained.

License in practice

Apache-2.0 permissive license allows commercial and private use with minimal restrictions; suitable for most deployment contexts.

Quickstart

pip install cursive

from cursive import signature_utils
# Use signature_utils to validate OpenStack-specific signatures

Requires Python 3.11 or later; designed for OpenStack environments.

Verify before relying

• What specific OpenStack signature formats or standards does cursive validate (e.g., certificate chains, key types)?
• Does cursive provide command-line tools or only a Python API?
• What is the scope of 'additional capabilities' mentioned as future work?

Package facts

Evidence: cursive-0.3.0-py3-none-any.whl

Tags

More Cryptography packages