Our great sponsors
-
curveprotect
Mirror of the curveprotect software. The original source is only distributed over HTTP. SHA256 checksums verified by downloading from multiple networks.
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
There is an older tool of the same nature that appends signature to the file and that can be used with tar/gz pipelines - https://github.com/apankrat/sign
Seems like everyone is writing something like this now. I wrote my own C library for this during $WORK a long long time ago, but it never ended up being used for its intended purpose though (not for technical reasons) so I haven't touched it in a long while: https://github.com/well-typed/libedsign
The design was directly taken from signify from OpenBSD, though with my own tweaks and API choices (signify is just a program); anyone who wants to implement anything like this would do well to study it or copy it directly. This seems to basically have all the same good stuff available, including (IMO) the important ability to encrypt/re-encrypt your private signing key which is easily forgotten in very basic tools. Some extra bonuses like having fingerprints on the keys is also nice too.