// Copyright (c) HashiCorp, Inc.
// SPDX-License-Identifier: BUSL-1.1

// Package releaseauth helps authenticates archives downloaded from a service
// like releases.hashicorp.com by providing some simple authentication tools:
//
//  1. Matching reported SHA-256 hash against a standard SHA256SUMS file.
//  2. Calculates the SHA-256 checksum of an archive and compares it against a reported hash.
//  3. Ensures the checksums were signed by HashiCorp.
package releaseauth