Bug#773861: Signify - OpenBSD's cryptographic signing tool
Greetings, debian-security!
OpenBSD has recently developed a tool called "signify" for cryptographic
signing and verifying. It is extremely lightweight, and produces
extremely small signatures. For an idea of how small, note that this is
a complete signature:
RWSRtYZ5JArIEj7Q2Q5qTHD1c2JCvWAu7z0s0ARhlA4s/ac3lc1T5PLplmq1x/LTRZxl9J27Re/QVnUkU9wp14vN/+3Wnb2Tyw4=
It is currently being used to sign not only the releases of OpenBSD (and
its forks, Bitrig and LibertyBSD), but also LibreSSL, OpenBSD's fork of
the OpenSSL library created after heartbleed.
I've packaged signify for Debian, and I'm currently looking for a
sponsor. You can download the package with this command:
dget -x http://mentors.debian.net/debian/pool/main/s/signify-openbsd
/signify-openbsd_8-1.dsc
The mentors summary page is here:
http://mentors.debian.net/package/signify-openbsd
More information about signify can be obtained from
http://www.tedunangst.com/flak/post/signify
Yours sincerely,
Riley Baird
Reply to: