From dac1d23be3ef31fa78f65b7c4a003aa2a0de2eca Mon Sep 17 00:00:00 2001 From: Alex Anderson Date: Sun, 6 Nov 2022 03:23:59 +0000 Subject: [PATCH] Updated verify.md --- CHANGELOG.md.asc | 7 +++++++ CHANGELOG.md.minisig | 4 ++++ CODE_OF_CONDUCT.md.asc | 7 +++++++ CODE_OF_CONDUCT.md.minisig | 4 ++++ CONTRIBUTING.md.asc | 7 +++++++ CONTRIBUTING.md.minisig | 4 ++++ LICENSE.md.asc | 7 +++++++ LICENSE.md.minisig | 4 ++++ README.md.asc | 7 +++++++ README.md.minisig | 4 ++++ about.md.asc | 7 +++++++ about.md.minisig | 4 ++++ b2sum.txt | 2 +- b2sum.txt.asc | 8 ++++---- b2sum.txt.minisig | 6 +++--- briar.md.asc | 7 +++++++ briar.md.minisig | 4 ++++ chatrooms-rules.md.asc | 7 +++++++ chatrooms-rules.md.minisig | 4 ++++ donations.md.asc | 7 +++++++ donations.md.minisig | 4 ++++ export/b2sum.txt.asc | 8 ++++---- export/b2sum.txt.minisig | 4 ++-- export/sha256sum.txt.asc | 8 ++++---- export/sha256sum.txt.minisig | 4 ++-- guide.md.asc | 7 +++++++ guide.md.minisig | 4 ++++ legacy.md.asc | 7 +++++++ legacy.md.minisig | 4 ++++ links.md.asc | 7 +++++++ links.md.minisig | 4 ++++ make.sh | 7 +++++++ moderncrypto-rules.md.asc | 7 +++++++ moderncrypto-rules.md.minisig | 4 ++++ sha256sum.txt | 2 +- sha256sum.txt.asc | 8 ++++---- sha256sum.txt.minisig | 6 +++--- verify.md | 28 +++++++++++++++++++++------- verify.md.asc | 7 +++++++ verify.md.minisig | 4 ++++ 40 files changed, 210 insertions(+), 35 deletions(-) create mode 100644 CHANGELOG.md.asc create mode 100644 CHANGELOG.md.minisig create mode 100644 CODE_OF_CONDUCT.md.asc create mode 100644 CODE_OF_CONDUCT.md.minisig create mode 100644 CONTRIBUTING.md.asc create mode 100644 CONTRIBUTING.md.minisig create mode 100644 LICENSE.md.asc create mode 100644 LICENSE.md.minisig create mode 100644 README.md.asc create mode 100644 README.md.minisig create mode 100644 about.md.asc create mode 100644 about.md.minisig create mode 100644 briar.md.asc create mode 100644 briar.md.minisig create mode 100644 chatrooms-rules.md.asc create mode 100644 chatrooms-rules.md.minisig create mode 100644 donations.md.asc create mode 100644 donations.md.minisig create mode 100644 guide.md.asc create mode 100644 guide.md.minisig create mode 100644 legacy.md.asc create mode 100644 legacy.md.minisig create mode 100644 links.md.asc create mode 100644 links.md.minisig create mode 100644 moderncrypto-rules.md.asc create mode 100644 moderncrypto-rules.md.minisig create mode 100644 verify.md.asc create mode 100644 verify.md.minisig diff --git a/CHANGELOG.md.asc b/CHANGELOG.md.asc new file mode 100644 index 0000000..3fa73f4 --- /dev/null +++ b/CHANGELOG.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2coPQAKCRAoXmBIoSMh +sh8XAP9zBh1DRAJOMKvWuPiVO8FkdvC/ke5d5xEzicAg55cyCwEA4Co1VrNOf5+h +rJjtGTMKF4fuheKVM4LShMWqC7UJTg4= +=Iqzp +-----END PGP SIGNATURE----- diff --git a/CHANGELOG.md.minisig b/CHANGELOG.md.minisig new file mode 100644 index 0000000..28b23ac --- /dev/null +++ b/CHANGELOG.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/uYQLfVUTQJwY8AJnYU53jjfwMOYSWRRDYp20ztw9LMZgeEiV1E57YSdOSgJD4/MNQegzWy/M/NPsmOZq65c2wQ= +trusted comment: timestamp:1667704899 file:CHANGELOG.md hashed +MTIXSIoV+g5b3Q2Hc9wTon+Gyds2jhIstUAY/hF9uh4LPYbZjoCzyPdjjfPZK/c1WbHYtp6Nk0BFxRj3JsDMDQ== diff --git a/CODE_OF_CONDUCT.md.asc b/CODE_OF_CONDUCT.md.asc new file mode 100644 index 0000000..4584a45 --- /dev/null +++ b/CODE_OF_CONDUCT.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2coSwAKCRAoXmBIoSMh +stSmAP4wmtu/x1kivH0phFcPRTQGg6a+TsRxNfFXJ2GWdITwBgD/Y6nFfPH1pKVn +fuDUvONorlW5n4Fft5PS7I3IbwfzOQI= +=IRPc +-----END PGP SIGNATURE----- diff --git a/CODE_OF_CONDUCT.md.minisig b/CODE_OF_CONDUCT.md.minisig new file mode 100644 index 0000000..b761ad7 --- /dev/null +++ b/CODE_OF_CONDUCT.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/gD5vCC8/YFdUVxQVvGfr4Far0rKgyq8NvpyWOyv7OniMR0H1cROxjbaNwDGKi40AIpnb4DxlLhGLB9vXxAk4Qo= +trusted comment: timestamp:1667704917 file:CODE_OF_CONDUCT.md hashed +Tn97zQ1JTU/1oK9oejZO90Qb7sq2ziqsTMAlQR16rQEDqFdTOz7y8oLcNXixuEv6hXzlKoN7OxCWx3TOW++tCg== diff --git a/CONTRIBUTING.md.asc b/CONTRIBUTING.md.asc new file mode 100644 index 0000000..2b2b90e --- /dev/null +++ b/CONTRIBUTING.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2coVQAKCRAoXmBIoSMh +shjgAQCoL6+rAe+Q1n3ZrQCFBHHrf3iv+6T6jO8uWVymDa5zlgEA6cbWRcDjS8+Y +3fDvMQsSPmlQ6wLuvnpLj6SDXGu7sQ4= +=hTgU +-----END PGP SIGNATURE----- diff --git a/CONTRIBUTING.md.minisig b/CONTRIBUTING.md.minisig new file mode 100644 index 0000000..88377db --- /dev/null +++ b/CONTRIBUTING.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/tV9Fy2nTvAb4k8umjfk+y6Bpi6z4nOEGBCAm1VfwbmjJF5Kpe9aU0bZtncMMN7vZXi+kYrvUuVG18ZECx8pRg4= +trusted comment: timestamp:1667704922 file:CONTRIBUTING.md hashed +fC8Xddh/ug62EVPs/EN8ctIvFxanR28uY51BpUFoIp6sZeYk+AQOg1sGmIzbEyBU6gjJRjtHtjYCyhWxl6TECQ== diff --git a/LICENSE.md.asc b/LICENSE.md.asc new file mode 100644 index 0000000..9d60034 --- /dev/null +++ b/LICENSE.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2coeQAKCRAoXmBIoSMh +st8iAP9jf7mMDI5oL+2HxdyATClNPcZW+7/eyRf8HN0L3rWvdQD8DD9GrckwcZbc +UDdG2cJXR4UWcA2hnJ6rpyZc+M2TlAs= +=qUhV +-----END PGP SIGNATURE----- diff --git a/LICENSE.md.minisig b/LICENSE.md.minisig new file mode 100644 index 0000000..356e020 --- /dev/null +++ b/LICENSE.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/gAzBQtyzCamju84eebs9pmkibZyZu3dRxd3LrTgZgknkRyjTMx8clMYRpHl1l7XCqCROtQU8r+zSXd79xFgFQc= +trusted comment: timestamp:1667704960 file:LICENSE.md hashed +9GFtxVMWAjYdyklwM/MSUbxG2aZQ/bH96Xx3v7Lq2LLCDnGjKWrFGBlNHpTUPahS2/fWh2/5664nXbHf6zwiAg== diff --git a/README.md.asc b/README.md.asc new file mode 100644 index 0000000..99e84c4 --- /dev/null +++ b/README.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2cojQAKCRAoXmBIoSMh +styHAQCU6MfckzeRJq8azEuUOq+rknhXGXD5uJxz73HbHokUWwD+PnsDE9toVWmc +jSODXXV6sBVxjYzaq86dTfzO5EXlnQ4= +=1SmF +-----END PGP SIGNATURE----- diff --git a/README.md.minisig b/README.md.minisig new file mode 100644 index 0000000..e0b918f --- /dev/null +++ b/README.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/uT7Mx6SWYXM7lEt4cBUizxeTsrgaWWQgWM4DBq3U8c8Olq3BaK6g+HQomBNcXYpBHllpi166rSByfSXkRF9uw8= +trusted comment: timestamp:1667704981 file:README.md hashed +m2f7OWcDg0ynsyexG9mLvwXTcD9FnzfU2aYb5Z2DyO+cb+LpEkSG2WosuLzt9ctJ9ZRiYu1V7Arc28ZklttVDQ== diff --git a/about.md.asc b/about.md.asc new file mode 100644 index 0000000..bd2c3c3 --- /dev/null +++ b/about.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2coJwAKCRAoXmBIoSMh +sqcgAP9kEDXWhazYXxW72AJdimbOrfBgXLU1knwqCxyJG+wn8AD/WZO4hOGEToJa +rZE+dNAqQiE+ys9F7/Mf45ngF5S9sQY= +=Jqtw +-----END PGP SIGNATURE----- diff --git a/about.md.minisig b/about.md.minisig new file mode 100644 index 0000000..fd228b6 --- /dev/null +++ b/about.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/mYM018bMrAvKa73WrXFNmL4uyJM+ir6l23bBjkd8RuQbrrcreLL9a8TEpByx+JMjIsklCV+0p0G4w9uCcheIAE= +trusted comment: timestamp:1667704879 file:about.md hashed +EIRNz9Z0ggQGbTbA8nk5HkpTLgsrtGeVsW4vbdOrUUOc4q0wLPsHA/3S6G0zbmZfeC/Qf2WPH9C6nfbpqZueBg== diff --git a/b2sum.txt b/b2sum.txt index e76f42e..5818c58 100644 --- a/b2sum.txt +++ b/b2sum.txt @@ -12,4 +12,4 @@ be4c0b66dbdca9446079753dc3fcf2fb3eec55e8061c23ebcb20242458319a44120397d825b621fe 66ff213a8a0ec7fe0540858153b799343ce35cc0e9f541d3ea241160758096e278496f85260e6a26ede7f7a30744398b3aaf6b7a15265f3cb6ecc91a09771fe0 links.md 32b57ea09d576ce73f74352e9fe1baef19ed6c3808a9e3fa4716ec881f57a579861fa22b95e56dc729048c27e242fbbc15866cb2c36411c9e49173c00c126647 moderncrypto-rules.md c880a19cd5e8659fe88f2dd3835c7a13ced1d894ff0a708b0d0e09b9956bcc2e8a080ff0dfcc4ae31ea504ff1d2962d5f831861caf35014e238ee60acb4c0a2c README.md -ca9bfebbe83f869c1cf469e82767cbe074d1278eb8f16eadaf6b9e48b5665bb8816810b88ad426ed1067bce538deb9f565ff452c50686e50bfb5be1121e21017 verify.md +def1162345ef3bb3bcd577a9a352119df4b545c800b1439a29fc35e02da9d1461965a45e64c650b9b74ff5a276b26d3ca51b2c133808f990d8f3dd60cffc8f4d verify.md diff --git a/b2sum.txt.asc b/b2sum.txt.asc index 279d339..14c83fd 100644 --- a/b2sum.txt.asc +++ b/b2sum.txt.asc @@ -1,7 +1,7 @@ -----BEGIN PGP SIGNATURE----- -iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2cWDQAKCRAoXmBIoSMh -su3UAP9Q7LrZp4vhVjNGo37w5OG9A03q3d8oyy+HFCTUL5rfJwEA1oUzXKwKoRNj -wZ4y7+OteE4sOHHuAt0+M0U1XkfSYwY= -=gUzh +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2coogAKCRAoXmBIoSMh +skgfAQDZCaQGY7kDQ8i3mx80HT8/3lmiJKx0F5BBR3WMLu0FBgEAxSUNmrcPmjYf +KP5MjDQP7NI9Fwi1/PVV9lMFXPEPvwA= +=RYmJ -----END PGP SIGNATURE----- diff --git a/b2sum.txt.minisig b/b2sum.txt.minisig index 928f8b1..651063b 100644 --- a/b2sum.txt.minisig +++ b/b2sum.txt.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RUSn9xivowlq/sEfvXmOjeRlj3YluV2er/xQcUQN/Ixv5cyhfiPfksjhZuMyUO0xZNff6VY78PUB4k8Olt5yyGIYjd75UprrMQg= -trusted comment: timestamp:1667700241 file:b2sum.txt hashed -hgFT9DA4OMU9FjPZITwXsm0dLI24y4utkKE3oROaQf7/V+b4zz6rR7WqXbWpWSg/9CZGElwOi3cJu5V0p67fBQ== +RUSn9xivowlq/nlNcwMLXoaJWxhc4ZunjSpni3mVj6yKtK5HvhIdShX3NHC7EQLclI/cYrz0eufAIGomxqdd/kk/3GDBg4XqIA0= +trusted comment: timestamp:1667704999 file:b2sum.txt hashed +BXBNEZ48yOG4rS6eMOxB+59Y/7uNwR0ZFzFRyrAe9Hl2Yv9FYgONlkyPnuPBKvKUp4PyAGLAlCmLGIqvjLPDDg== diff --git a/briar.md.asc b/briar.md.asc new file mode 100644 index 0000000..2021542 --- /dev/null +++ b/briar.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2coMAAKCRAoXmBIoSMh +snBLAQDC7OGAEEYkYiiBcIe8R+ZxRbLyhaYEZVMXnIiXmrS+SAEAq9btQzKBCGjJ +uegEpVfF1h+sBnBy/yMZMIXVzM/P6Ao= +=rndY +-----END PGP SIGNATURE----- diff --git a/briar.md.minisig b/briar.md.minisig new file mode 100644 index 0000000..46d0bda --- /dev/null +++ b/briar.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/mjhwPVty4ZNYfjn4Gx8rNfbI0b+wd4o32ZIPOV/tWquVnu0QA3tLFvn+UODOdV+MYvFsknKZ37H9BAgqPt0CQc= +trusted comment: timestamp:1667704892 file:briar.md hashed +mRf8Trk5F6eN+2jS0ZpLlEu+C9DUOuTk+GWOvR0AVGIn5Ef3YcGRbeOalLqiGkZutRR7VqmhFlqxL+d1f8QqDQ== diff --git a/chatrooms-rules.md.asc b/chatrooms-rules.md.asc new file mode 100644 index 0000000..c01bdd2 --- /dev/null +++ b/chatrooms-rules.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2coQwAKCRAoXmBIoSMh +sgc4AQClOqzMSTsbkwwfzq49RtuyZ6Otna9XjUB9kP4ouCtLAgD8C6fea/TB7Fip +LEKOXNptGZFKsrrtACfQ9RhXWR9F3AU= +=Ltvr +-----END PGP SIGNATURE----- diff --git a/chatrooms-rules.md.minisig b/chatrooms-rules.md.minisig new file mode 100644 index 0000000..c179f40 --- /dev/null +++ b/chatrooms-rules.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/rSnaMOsbp2MHC3YZeQh4vjs31ikY7gGEkSUNHfwrdw2qr/ebmHBXTVxAYkN22cocTayR08gYCJuGMQceINFUgc= +trusted comment: timestamp:1667704907 file:chatrooms-rules.md hashed +0R1YjxwjJJwj3hYrl5L/1UeruxBLVbmDpbwkc44AxqVYWF+l8Mw3scoLr6J3CNE9yAsvzOZZI1pvx7jUQga2Bg== diff --git a/donations.md.asc b/donations.md.asc new file mode 100644 index 0000000..d44028b --- /dev/null +++ b/donations.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2coWgAKCRAoXmBIoSMh +spOJAPoCzAGUkKcOnFNCo+XkYix1aQZ1lgF96Le+mVnA4q6QaAD9G2bSgxG8x9ab +bTdw9FlpfpoY/hh4kEmFAFkw7+PPWAU= +=c6ZZ +-----END PGP SIGNATURE----- diff --git a/donations.md.minisig b/donations.md.minisig new file mode 100644 index 0000000..c08df9c --- /dev/null +++ b/donations.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/iaRVN+1NJQ49WOmad3gwCThkfSX5CorjrVWkEfrHZo7AgA9xHrT9b+a2ymJMunGbw+PhNa8PCY6XFNS6+M40Ag= +trusted comment: timestamp:1667704928 file:donations.md hashed +LB/SjGOvJlzWVU5Fn3ksVnefJua1QvP3wJytFotSGhoYFQtwMqPBLDrYra7d2wLYysg/biotell/Opa6mJQxAA== diff --git a/export/b2sum.txt.asc b/export/b2sum.txt.asc index 9685a61..b875bdf 100644 --- a/export/b2sum.txt.asc +++ b/export/b2sum.txt.asc @@ -1,7 +1,7 @@ -----BEGIN PGP SIGNATURE----- -iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2cV8wAKCRAoXmBIoSMh -srneAQCuLF9J9ozrZr4iZTpEJ1RNRBbeNuVmNvwTvbrnJmaRrAEAmhN/xsYzK1hS -iIJO9/jQUz6i2MuxKsEjx8FqtnZTZg0= -=Lr8I +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2coGAAKCRAoXmBIoSMh +sj9eAQD9GQZXYW4p5PzdzWtK4cGg62NcJHp3yPv9HYKGMyoiWgD/dMK5RZ0dIuZM +llD54E/5GqM+pGazwYgHEdwdznYKAQQ= +=zbrR -----END PGP SIGNATURE----- diff --git a/export/b2sum.txt.minisig b/export/b2sum.txt.minisig index d650889..96ad9c5 100644 --- a/export/b2sum.txt.minisig +++ b/export/b2sum.txt.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key RUSn9xivowlq/m9u4GCYbaa9GhEomTQimt7c7HvuJZJlN3em2Ydy2DeCKpvpENQ4T5DfNtSe3j5pjnNQda4QNXW/mp4d8Q0eeAM= -trusted comment: timestamp:1667700222 file:b2sum.txt hashed -DdYa/ZqE5Na/s2gqUswFn7K8yGtQLmOXUp0KFP4vw9eKwLVEbD8UB83lVChKJ6gYN6gAjCf6YslNqHmYoEzyDg== +trusted comment: timestamp:1667704861 file:b2sum.txt hashed +PlX+e6IuSy3+QxMUd/uPyCdQGZwrNx4rs42wevdRYji/xAvw0CHUvLPbfdfOO3GBP4zqyo3RzeT3OhWh2WMECQ== diff --git a/export/sha256sum.txt.asc b/export/sha256sum.txt.asc index 7da3a58..2e5419a 100644 --- a/export/sha256sum.txt.asc +++ b/export/sha256sum.txt.asc @@ -1,7 +1,7 @@ -----BEGIN PGP SIGNATURE----- -iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2cV/wAKCRAoXmBIoSMh -sv1gAQCgPJs9nLciA2It46ch6ra8/yADpVHozsXQLUad8M8lcwEAzzrwKK9EpETp -+jxgssIPzxI5dVmvExU7jhe3YrqLcAs= -=eR7m +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2coHgAKCRAoXmBIoSMh +sl/EAQDVRSTPNvDTQASmYSfssZ2hncoJXeLETuoBDrorl9wYgAEAlpTd8PtIaPAv +XrNa91heZbah28JZUskJBbsBP7dUbQk= +=2m8z -----END PGP SIGNATURE----- diff --git a/export/sha256sum.txt.minisig b/export/sha256sum.txt.minisig index 3ca6ce7..037a12f 100644 --- a/export/sha256sum.txt.minisig +++ b/export/sha256sum.txt.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key RUSn9xivowlq/kJ6thrlMUlYMQS85xqWIMR7agiJynTCepUp5sRhyMVdmwl4SBXuQ1EczsCaq6kM7fEy4+ls9+Rux9PvVw8Jogo= -trusted comment: timestamp:1667700231 file:sha256sum.txt hashed -J5AJjGiUfv65sxFP/iQg6CPHjPld5Re90H4XFYZndrc5FwZzrTAMvkG9SjfrnRUYWWHzt0O3Cxv+RKNWIMXkAA== +trusted comment: timestamp:1667704870 file:sha256sum.txt hashed +lD9g0mPmqkIl4wP1Nj0iIt+/6ZNcYhRZhCc8lBulx1GF5c2a9d+/gsdnpYRR68yW3fLq5VaMmugvEvZtyj1/Bw== diff --git a/guide.md.asc b/guide.md.asc new file mode 100644 index 0000000..5a82579 --- /dev/null +++ b/guide.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2coYAAKCRAoXmBIoSMh +snh5AP0SR46XcwqRAlkjGHtll/SwcsssVakYXzwyhT8APe6IaAEAu3uO4mpKOeJX +B/BE95IcV2nESW53vw5iwTgG9sL+ogA= +=7A24 +-----END PGP SIGNATURE----- diff --git a/guide.md.minisig b/guide.md.minisig new file mode 100644 index 0000000..a2cad66 --- /dev/null +++ b/guide.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/indL+YGf8nC2BT5JP7g9hfTy9N4F0aKkhjBORrNEzDxxOGi8HN65SGAvNiQ4VDvbrbBZHmEZYe7Y4PJMzedXAg= +trusted comment: timestamp:1667704936 file:guide.md hashed +z1BBu2GJK+ZupmhmZXIuE4xArYEWn1VZPeDXn3F2bGucck3XFMK5DU3EAdaEojXzri2Q0M78Ho0ENlGCMQdlDg== diff --git a/legacy.md.asc b/legacy.md.asc new file mode 100644 index 0000000..0975689 --- /dev/null +++ b/legacy.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2cocAAKCRAoXmBIoSMh +sjlMAP4nF71s/yAdSCzdgtP6JuoCqiEAIn1xl5dr0UagD6gLdgEA2ewN3siOFhhb +JgdcQDDvP2yxknHzmab4zIs3xkkq4AY= +=aQzr +-----END PGP SIGNATURE----- diff --git a/legacy.md.minisig b/legacy.md.minisig new file mode 100644 index 0000000..a3e428f --- /dev/null +++ b/legacy.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/vAqSGLl3ShK3I0FWnH2G/nSm3okr+6qDd9cUSO5tBGSW0zioY4VOyr8YLGrmATU/SqID4hZSgDMqaOdIefHIAs= +trusted comment: timestamp:1667704953 file:legacy.md hashed +6iCbREC1m+zXpLq/MeBfJTeCAka4U7COdlsWllRtDDFgnXiuVCFWeHaoVejDjIj+fLvv5SdwHGdjFIYQDyyBDw== diff --git a/links.md.asc b/links.md.asc new file mode 100644 index 0000000..57bfc6e --- /dev/null +++ b/links.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2cogAAKCRAoXmBIoSMh +slleAQCv5TXEVaYcl37XYOJjP25f+Mf+wz78Ds9EolbDrb//qgEAx0u7mjeG7Bdq +FVTh4pZwzROKmmDgSHezxd5R9/G17QI= +=tALz +-----END PGP SIGNATURE----- diff --git a/links.md.minisig b/links.md.minisig new file mode 100644 index 0000000..8a0a182 --- /dev/null +++ b/links.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/i1yTrpkZCQHUBO2skbgOOGbrLwHF/ZLQPSXcL3QNY19aAt8KlXjPnoO5aurDjPlE5afJp0hpuJZ0ND3ISj9Jg8= +trusted comment: timestamp:1667704967 file:links.md hashed +RF4v0jdqaR3RxzbXpYWor9uiB6zygG4JlxyIyzu9wSimyH4Cj6K35QxSoyPGecbGiVyUrJjp6SNW1dSLfLK1Bw== diff --git a/make.sh b/make.sh index 0b49a90..78b685d 100755 --- a/make.sh +++ b/make.sh @@ -20,6 +20,13 @@ if [[ "$1" == "" ]]; then yes '' | minisign -S -s /home/user/.minisign/minisign.key -m "$f" done cd ../ + for f in ./*.md; do + echo "Signing: $f" + # verify with GPG + gpg --default-key 83A6CF9EF57AC25B5C7F5D29285E6048A12321B2 --armor --detach-sign --sign "$f" + # verify with `minisign -Vm -P RWQ0WYJ07DUokK8V/6LNJ9bf/O/QM9k4FSlDmzgEeXm7lEpw3ecYjXDM` + yes '' | minisign -S -s /home/user/.minisign/minisign.key -m "$f" + done cp /home/user/KEY_ROTATION.md.42FF35DB9DE7C088AB0FD4A70C216A52F6DF4920.asc ./KEY_ROTATION.md.asc cp /home/user/KEY_ROTATION.md.902835EC74825934.minisig ./KEY_ROTATION.md.minisig sha256sum *.md > sha256sum.txt diff --git a/moderncrypto-rules.md.asc b/moderncrypto-rules.md.asc new file mode 100644 index 0000000..236c0c1 --- /dev/null +++ b/moderncrypto-rules.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2cohwAKCRAoXmBIoSMh +sm6yAP4/pOXgU9CWs+57h9JpzE872nVZ9/pQycwndRKZWtmFogD+IFt50nF5JClN +pqT07LB7IZ8fCtLvjZT6hOidKLE8UAA= +=u6FH +-----END PGP SIGNATURE----- diff --git a/moderncrypto-rules.md.minisig b/moderncrypto-rules.md.minisig new file mode 100644 index 0000000..31c0443 --- /dev/null +++ b/moderncrypto-rules.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/pNx6BCj6u0LY2YRUkVLOPqkc+MKWrBr0MkOHSHYhIXPbk+r/MAnbPmxpAGP20XFAAARa97VpcRkDsDgNf6+Uw0= +trusted comment: timestamp:1667704973 file:moderncrypto-rules.md hashed +Vsl/2SlhlGPjpeNY9mfnj3AyjU5movx5/LGPz5ODgFxHcIifOVlxkgYuSpx24BeBbUlwaBsrV/Xka7IIYbdGAQ== diff --git a/sha256sum.txt b/sha256sum.txt index b8400eb..b734a73 100644 --- a/sha256sum.txt +++ b/sha256sum.txt @@ -12,4 +12,4 @@ ca7931e201056dd44bc77959dc3e4298a1b5c712b6c249f19746d949d2079f49 legacy.md c03fe36dc639f9e6bac75ac11376dfc2ae6af8e863a8debfd53834d662f12d89 links.md 5226426677ba08c70435102a5477db9e7c8e7868a3fde3fc5a551386a0417920 moderncrypto-rules.md 481ee46627340f1aabe2397fd1ac7641a0210289c3647c2dc269c2b4c0b55cea README.md -6ed62587006e9002929bdbde82b7fcad1c86a4a92c07cc583e090880c62e5293 verify.md +8aa555517b7c9995567ec4550fd622e3349f57784071a042b9418254b6232d78 verify.md diff --git a/sha256sum.txt.asc b/sha256sum.txt.asc index 2cf8519..3402706 100644 --- a/sha256sum.txt.asc +++ b/sha256sum.txt.asc @@ -1,7 +1,7 @@ -----BEGIN PGP SIGNATURE----- -iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2cWBwAKCRAoXmBIoSMh -ssb9AP9FdAqmHsThZM0awCTmHvyRSprD39kkMdVRN23WPwdjNAEAk1AJmLjhF3bf -d4Cccneh/wx97Fwf1W7/dlGpbf+G1wk= -=bPyp +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2conQAKCRAoXmBIoSMh +sj1IAP9czihElQF18jkaKuhX37W/X9luSGzZH+21j4pOwMwimAEArAgk6DrBnS2W +fITOVKX/bQUEEaX8BZ2Klwl1pTA/iwE= +=6eTS -----END PGP SIGNATURE----- diff --git a/sha256sum.txt.minisig b/sha256sum.txt.minisig index 1b68fbe..b30438a 100644 --- a/sha256sum.txt.minisig +++ b/sha256sum.txt.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RUSn9xivowlq/pm7ppew4g6cpPbUK3ZdS0dHUlk+/XdmqBauU/6+kPMf+QD3pu7FiE5EMWQRUGZAR1eSaUqI5ohgnuOVl0CbEQ0= -trusted comment: timestamp:1667700237 file:sha256sum.txt hashed -fwrfz4rp29BPYNHm3d21g5cTNAUqFdIULtR8qxoSRHd+FUYx1cPus/zJ/MCHkyLlkA/vAwzomhga5OFHOxiqCw== +RUSn9xivowlq/ijkqocsQf8uHo3EGsGpdRIR+Ngo9Dtg7L7/fJRSr6JbyRsl8PhxIfSGPMYpFy32omlmziuz59jrZDmcBhL4egQ= +trusted comment: timestamp:1667704994 file:sha256sum.txt hashed +3Ubp0fs/tKjcbXvzcubVGW+3GTgOxoLXSUkHV3/erWEByxElonHg2bmF053b5RNTDoRO6JXaIY6hm+I74zL9Cg== diff --git a/verify.md b/verify.md index 3192597..6e2ce02 100644 --- a/verify.md +++ b/verify.md @@ -35,26 +35,40 @@ To verify files with GPG signatures, you should first install gpg on your system - MacOS: Install GPG Tools from - Linux: gpg should be installed by default. If not, use your Linux package manager to install it such as apt (debian) or rpm (red hat). -Import the GPG key from a trusted source of the publisher using the following command from a command prompt or terminal: +Import the master signing key from a trusted source of the publisher using the following command from a command prompt or terminal: -```gpg --auto-key-locate nodefault,wkd --locate-keys 42FF35DB9DE7C088AB0FD4A70C216A52F6DF4920``` +```gpg --auto-key-locate nodefault,wkd --locate-keys 9EA98278639F1CD853E096CBFF94507587A6A9B9``` -In theory this command should fetch the key from the a default pool server. If this doesn't work, you can also download/view it directly from here (in our case): +In theory this command should fetch the key from the a default pool server. If this doesn't work, you can also download/view it directly from here (in our case): -As well as the published key on any keyserver below (search for the fingerprint ```42FF35DB9DE7C088AB0FD4A70C216A52F6DF4920```): +As well as the published key on any keyserver below (search for the fingerprint ```9EA98278639F1CD853E096CBFF94507587A6A9B9```): - - - You should then import it manually by issuing the following command on any OS: -```gpg --import 42FF35DB9DE7C088AB0FD4A70C216A52F6DF4920.asc``` +```gpg --import 9EA98278639F1CD853E096CBFF94507587A6A9B9.asc``` + +The master signing key allows you to verify all other project-related keys. Once you have the master signing key and are confident it's the correct key (nobody has tampered with it), mark the key as trusted by locally signing it: + +```gpg --lsign-key 9EA98278639F1CD853E096CBFF94507587A6A9B9``` + +Alternatively, if you use Kleopatra, it will ask you to certify the key. Certify the key to mark it as trusted. + +Once you have the master key downloaded, imported, and certified, you will obtain a copy of the release key. + +```gpg --auto-key-locate nodefault,wkd --locate-keys 83A6CF9EF57AC25B5C7F5D29285E6048A12321B2``` (to import the release signing key) + + (to download the key yourself) + +If you use GPG directly, you won't need to mark the release signing key as trusted, because it's already signed by the master signing key. If you use Kleopatra, the process to import the release signing key is the same as importing the master signing key. Finally, verify the asc signature file (links above) against the PDF file by issuing the following example command: ```gpg --verify guide.pdf.asc guide.pdf"``` -This should output a result showing it matches and is therefore a good result. +This should output a result showing it matches a signature created by the release signing key, and is therefore a good result. ### How to verify the the authenticity and integrity of the files using Minisign: @@ -96,4 +110,4 @@ And you should see the following entries at **0** for safety, this 0 means there /Launch 0 #This counts the launch actions /EmbeddedFile 0 #This indicates there are embedded files within the PDF /XFA 0 #This indicates the presence of XML Forms within the PDF -``` \ No newline at end of file +``` diff --git a/verify.md.asc b/verify.md.asc new file mode 100644 index 0000000..ff1902a --- /dev/null +++ b/verify.md.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYIAB0WIQSDps+e9XrCW1x/XSkoXmBIoSMhsgUCY2colQAKCRAoXmBIoSMh +su/nAQDANPOkEtqSJfEpTmAGMMIHHIa25WginW5ShRr68TpD5AD8CrnOw6Mtge5m +e7V9+IAFGlvX9NRVGRWjsbadwm1FtQ8= +=9jFK +-----END PGP SIGNATURE----- diff --git a/verify.md.minisig b/verify.md.minisig new file mode 100644 index 0000000..86a46d4 --- /dev/null +++ b/verify.md.minisig @@ -0,0 +1,4 @@ +untrusted comment: signature from minisign secret key +RUSn9xivowlq/hPOhPFZsEKlgPReT55I2dkRuq6NKm7eMw9SXYoS/XUuPNdTtgWrjxCFJOppua877AL+iZp3O3oVZ7ikAPIpWA0= +trusted comment: timestamp:1667704988 file:verify.md hashed +JsCMnMpnlDMbVaw08oNmP486DD/JFQJdTk24aaXvRM1hDD1NDX3izK2BGd16vAx3/pk3A1DBbqlVlXzeFR0NBw==