- use HKDF for producing keys, nonces - add running hmac of plaintext; sender-sign the hmac as trailer - use header checksum as "salt" for data encryption keys, nonces - generate explicit nonce for wrapping root keys for each recipient (previous impl had brittleness) |
||
---|---|---|
.. | ||
.gitignore | ||
doc.go | ||
encrypt.go | ||
encrypt_test.go | ||
errors.go | ||
keys.go | ||
LICENSE | ||
rand.go | ||
README.md | ||
safefile.go | ||
sign.go | ||
sign_test.go | ||
ssh.go | ||
stream.go | ||
utils_test.go |
sigtool/sign - Ed25519 signature calculation and verification
This is a small library that makes it easier to create and serialize Ed25519 keys, and sign, verify files using those keys. The library uses mmap(2) to read and process very large files.
The companion program sigtool uses this library.
License
GPL v2.0