mirrors/minisign
1
0
Fork 0
mirror of https://github.com/jedisct1/minisign.git synced 2025-04-03 19:07:41 +03:00
Code Issues Projects Releases Packages Wiki Activity
minisign/README.md
Frank Denis 0137cd75af Add the Javascript implementation
2019-05-09 00:34:20 +02:00

2.4 KiB
Raw Blame History

Minisign

Minisign is a dead simple tool to sign files and verify signatures.

For more information, please refer to the Minisign documentation

Tarballs and pre-compiled binaries can be verified with the following public key:

RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3

Compilation / installation

Dependencies:

Compilation:

$ mkdir build
$ cd build
$ cmake ..
$ make
# make install

Minisign is also available in Homebrew:

$ brew install minisign

Minisign is also available in Scoop on Windows:

$ scoop install minisign

Minisign is also available in chocolatey on Windows:

$ choco install minisign

Additional tools, libraries and implementations

  • minisign-misc is a very nice set of workflows and scripts for macOS to verify and sign files with minisign.
  • minisign-go is a small module in Go to verify Minisign signatures.
  • rust-minisign is a Minisign library written in pure Rust, that can be embedded in other applications.
  • rsign2 is a reimplementation of the command-line tool in Rust.
  • minisign-verify is a small Rust crate to verify Minisign signatures.
  • minisign-net is a .NET library to handle and create Minisign signatures.
  • minisign-py is a pure Python port of Minisign.
  • minisign a Javascript implementation.

Faults injections

Minisign uses the EdDSA signature system, and deterministic signature schemes are fragile against fault attacks. However, conducting these requires physical access or the attacker having access to the same physical host.

More importantly, this requires a significant amount of time, and messages being signed endlessly while the attack is being conducted.

If such a scenario ever happens to be part of your threat model, libsodium should be compiled with the ED25519_NONDETERMINISTIC macro defined. This will add random noise to the computation of EdDSA nonces.