http://open-source-security-software.net/project/minisign/releases.atomRecent releases for minisign2024-11-15T04:33:10.248057+00:00python-feedgenminisign 0.3minisign 0.32015-06-11T06:36:49+00:002015-06-11T06:36:49+00:00minisign 0.4minisign 0.42015-07-12T14:30:36+00:00New switch: `-Q`, to display only the trusted comment (after verification)
2015-07-12T14:30:36+00:00minisign 0.5minisign 0.52015-11-09T17:51:46+00:00The return code is now `1` on verification/password error, and `2` for system errors.
Bug fix: `-p` and `-V` could not be used together. It has been fixed.
New option: `-o`, that can be combined with `-V` in order to send the content of the signed file to `stdout` after successful verification.
2015-11-09T17:51:46+00:00minisign 0.6minisign 0.62015-11-11T10:53:59+00:00Support for pre-hashing (HashEdDSA) was added.
The `-H` command-line switch, in addition to `-S`, enables HashEdDSA signatures instead of the default, pure EdDSA signatures.
HashEdDSA signatures:
- Require very little memory to be generated and verified, even with huge files
- Are faster to generate and verify than pure EdDSA signatures
- Require Minisign >= 0.6. In particular, they are not compatible with OpenBSD `signify` tool.
- Would not remain secure against (improbable) collisions in the Blake2b-512 hash function.
PureEdDSA signatures (default):
- Require as much memory as the size of the file to sign
- Cannot be used with files whose size is over 1 Gb
- Are compatible with all Minisign versions, as well as OpenBSD `signify`.
- Would remain secure against (improbable) collisions in the Blake2b-512 hash function.
2015-11-11T10:53:59+00:00minisign 0.7minisign 0.72016-07-31T23:23:22+00:00- The default location of the secret key was changed to `~/.minisign/minisign.key`.
- Generating a new set of keys (`-G`) doesn't replace an existing key pair any more; the additional `-f` switch is required in order to force this operation.
- Improved error messages and Windows compatibility.
- A man page was added.
2016-07-31T23:23:22+00:00minisign 0.8minisign 0.82018-02-03T10:08:48+00:00- Multiple files can now be signed at once.
- Support for HaikuOS was added.
- The command-line switch to use custom file names when generating key pairs didn't work properly; this has been fixed.
2018-02-03T10:08:48+00:00minisign 0.9minisign 0.92020-06-06T20:35:04+00:00- New option: `-R` to recover the public key from a secret key.
- `minisign` can now be compiled to WebAssembly.
- Error messages have been improved.
- Key derivation is now possible on devices with limited memory.
- Compilation on OpenWRT is now possible using `cmake`.
- A Docker image is now available.
- 64-bit Windows binaries have been added, and macOS binaries are notarized.2020-06-06T20:35:04+00:00minisign 0.10minisign 0.102021-10-09T13:12:07+00:00- Minisign can be compiled with Zig instead of cmake+make+a C toolchain
- Minimal `VERIFY_ONLY` versions can be built again
- Prehashing is now enabled by default, regardless of the input size. Support for non-prehashed signatures will eventually be removed
- Legacy signatures can be rejected with the addition of the `-H` flag
- Precompiled binaries for Win64, Linux and WebAssembly are now available.2021-10-09T13:12:07+00:00minisign 0.11minisign 0.112023-01-16T21:48:11+00:00- For non-interactive usage (CI/CD, etc), encryption of private keys can be disabled with the `-W` switch.
- A new command, `-C` was added to change passwords, or remove them (when combined with `-W`).2023-01-16T21:48:11+00:00