minizign for Mac

zig-minisign

A Zig implementation of Minisign.

minizign supports signature verification, signing, and key generation.

Compilation

Requires the current master version of Zig.

Compile with:

for a size-optimized version, or

for a speed-optimized version.

If you only need the minizign module as a dependency, pass -Dno-cli (or .@"no-cli" = true in b.dependency()) to skip the command-line tool. The clap dependency is lazy, so it won't be fetched in that case.

Usage

Examples

Key Generation

Generate a new key pair:

This will prompt for a password to encrypt the secret key. Leave empty for an unencrypted key.

Signing

Sign a file:

This creates file.txt.minisig. You can specify a custom output path with -o.

Sign multiple files at once:

Recreate Public Key

If you lose your public key file, you can recreate it from the secret key:

Change Password

Change the password on an existing secret key:

This prompts for the current password (if encrypted), then asks for a new password with confirmation. Leave the new password empty to remove encryption.

Verification

Verify public-resolvers.md using public-resolvers.md.minisig and the public key file minisign.pub:

Verify public-resolvers.md by directly providing the public key on the command-line:

SSH-encoded public keys

minizign can encode public keys in SSH format, so that they can be uploaded to GitHub:

GitHub makes public SSH keys available at https://github.com/.keys.

SSH-encoded keys can be loaded by minizign the same way as native keys, with -p . They will be automatically recognized as such.

Features

minizign supports prehashing (which can be forced if you know this is how the signature was created), has zero dependencies and can be cross-compiled to anything that Zig can cross-compile to, including WebAssembly.