minisign

README

go-minisign

A Golang library to verify Minisign signatures.

Initial implementation of commandline.

$ go run ./cmd/minisign -V -m README.md -P RWR74LoSzk/Uxftn6cmYbe4Jq2uJMs/C9EYu1QGcYQG8YG3iA4vwdOjm
CHECK README.md
true <nil>

Documentation

Index

• Constants
• type PublicKey
  • func DecodePublicKey(in string) (PublicKey, error)
  • func NewPublicKey(publicKeyStr string) (PublicKey, error)
  • func NewPublicKeyFromFile(file string) (PublicKey, error)
  • func (publicKey *PublicKey) Verify(bin []byte, signature Signature) (bool, error)
  • func (publicKey *PublicKey) VerifyFromFile(file string, signature Signature) (bool, error)
• type Signature
  • func DecodeSignature(in string) (Signature, error)
  • func NewSignatureFromFile(file string) (Signature, error)

Constants

const CHKAlg = "B2"

const CommentMaxBytes = 1024

const CommentPrefix = "untrusted comment: "

const DefaultComment = "signature from minisign secret key"

const KDFAlg = "Sc"

const KeyNumBytes = 8

const PasswordMaxBytes = 1024

const SecretKeyDefaultComment = "minisign encrypted secret key"

const SigAlg = "Ed"

const SigAlgHashed = "ED"

const SigDefaultConfigDir = "~/.minisign"

const SigDefaultConfigDirEnvVar = "MINISIGN_CONFIG_DIR"

const SigDefaultPKFile = "minisign.pub"

const SigDefaultSKFile = "minisign.key"

const SigSuffix = ".minisig"

const TrustedCommentMaxBytes = 8192

const TrustedCommentPrefix = "trusted comment: "

const VersionString = "minisign 0.9"

Types

type PublicKey

type PublicKey struct {
	SignatureAlgorithm [2]byte
	KeyId              [8]byte
	PublicKey          [32]byte
}

func DecodePublicKey

func DecodePublicKey(in string) (PublicKey, error)

func NewPublicKey

func NewPublicKey(publicKeyStr string) (PublicKey, error)

func NewPublicKeyFromFile

func NewPublicKeyFromFile(file string) (PublicKey, error)

func (*PublicKey) Verify

func (publicKey *PublicKey) Verify(bin []byte, signature Signature) (bool, error)

func (*PublicKey) VerifyFromFile

func (publicKey *PublicKey) VerifyFromFile(file string, signature Signature) (bool, error)

type Signature

type Signature struct {
	UntrustedComment   string
	SignatureAlgorithm [2]byte
	KeyId              [8]byte
	Signature          [64]byte
	TrustedComment     string
	GlobalSignature    [64]byte
}

func DecodeSignature

func DecodeSignature(in string) (Signature, error)

func NewSignatureFromFile

func NewSignatureFromFile(file string) (Signature, error)