diff --git a/sshsig.h b/sshsig.h
index 386c8b5d7..939e3dfe0 100644
--- a/sshsig.h
+++ b/sshsig.h
@@ -92,4 +92,14 @@ struct sshsigopt *sshsigopt_parse(const char *opts,
 /* Free signature options */
 void sshsigopt_free(struct sshsigopt *opts);
 
+/* Get public key from signature */
+int
+sshsig_get_pubkey(struct sshbuf *signature, struct sshkey **pubkey);
+
+/* Find principal in allowed_keys file, given a sshkey. Returns
+ * 0 on success.
+ */
+int sshsig_find_principal(const char *path, const struct sshkey *sign_key,
+    char **principal);
+
 #endif /* SSHSIG_H */