minisign

What's Changed

• add makefile and update go.mod to Go1.21 by @aead in https://github.com/aead/minisign/pull/28
• add support for passwordless private keys by @aead in https://github.com/aead/minisign/pull/29
• improve docs and implementation of Signature, PrivateKey by @aead in https://github.com/aead/minisign/pull/30
• add -C flag for changing private key password by @aead in https://github.com/aead/minisign/pull/31
• adjust private key tests by @aead in https://github.com/aead/minisign/pull/32
• update version to v0.3.0 by @aead in https://github.com/aead/minisign/pull/33

Full Changelog: https://github.com/aead/minisign/compare/v0.2.1...v0.3.0

What's Changed

• add govulncheck to CI and improve CI actions by @aead in https://github.com/aead/minisign/pull/18
• fix govulncheck CI action by @aead in https://github.com/aead/minisign/pull/19
• Add trailing newline on signature output by @charles-dyfis-net in https://github.com/aead/minisign/pull/23
• update Go version and dependencies by @aead in https://github.com/aead/minisign/pull/25

New Contributors

• @charles-dyfis-net made their first contribution in https://github.com/aead/minisign/pull/23

Full Changelog: https://github.com/aead/minisign/compare/v0.2.0...v0.2.1

• Computing signatures over hashed messages (previously -H flag) are now the default
• Signature verification now fails for signatures over non-hashed messages when -H is specified
• The Private key password can now be read from STDIN

This release fixes a bug that causes signature verification to fail when the trusted comment contains one/multiple carriage return characters at the end.

Fixed

• #7

This release fixes a bug when generating key pairs or signing a file with a custom signature file (instead of <file>.minisig).
If the key pair or signature should have been written to a file in a directory that does not exist the key generation / signing used to fail.
minisign just didn't create any non-existing directory.

Now, minisign creates any non-existing directory when generating a key pair or signing a file with a custom signature file.

Initial Release

This is the initial release of the minisign package.

It is a Go port of the original C implementation and contains a CLI tool - compatible to the C implementation - and a Go package that provides an API to sign files resp. verify minisign signatures and deal with public and secret keys.