v0.3.0

What's Changed

• add makefile and update go.mod to Go1.21 by @aead in #28
• add support for passwordless private keys by @aead in #29
• improve docs and implementation of Signature, PrivateKey by @aead in #30
• add -C flag for changing private key password by @aead in #31
• adjust private key tests by @aead in #32
• update version to v0.3.0 by @aead in #33

Full Changelog: v0.2.1...v0.3.0

v0.2.1

What's Changed

• add govulncheck to CI and improve CI actions by @aead in #18
• fix govulncheck CI action by @aead in #19
• Add trailing newline on signature output by @charles-dyfis-net in #23
• update Go version and dependencies by @aead in #25

New Contributors

• @charles-dyfis-net made their first contribution in #23

Full Changelog: v0.2.0...v0.2.1

v0.2.0

• Computing signatures over hashed messages (previously -H flag) are now the default
• Signature verification now fails for signatures over non-hashed messages when -H is specified
• The Private key password can now be read from STDIN

Trim carriage-return characters at the end of comments

This release fixes a bug that causes signature verification to fail when the trusted comment contains one/multiple carriage return characters at the end.

Fixed

• #7

Create directories if they don't exist

This release fixes a bug when generating key pairs or signing a file with a custom signature file (instead of <file>.minisig).
If the key pair or signature should have been written to a file in a directory that does not exist the key generation / signing used to fail.
minisign just didn't create any non-existing directory.

Now, minisign creates any non-existing directory when generating a key pair or signing a file with a custom signature file.

Initial release. There might be some rough edges...

Initial Release

This is the initial release of the minisign package.

It is a Go port of the original C implementation and contains a CLI tool - compatible to the C implementation - and a Go package that provides an API to sign files resp. verify minisign signatures and deal with public and secret keys.