minisign is a dead simple tool to sign files and verify signatures.
$ minisign -G
Please enter a password to protect the secret key.
Enter Password:
Enter Password (one more time):
Deriving a key from the password in order to encrypt the secret key... done
The secret key was saved as ~/.minisign/minisign.key - Keep it secret!
The public key was saved as minisign.pub - That one can be public.
Files signed using this key pair can be verified with the following command:
minisign -Vm <file> -P RWSYKA736yqh+JrZ7cRDdWgck/WKtwW9ATBFmk8pQ1lHeUKXtV6uJ7Fu
$ minisign -Sm message.txt
Enter password:
Deriving a key from the password in order to decrypt the secret key... done
$ minisign -Vm message.txt
Signature and comment signature verified
Trusted comment: timestamp:1614718943 filename:message.txt
This is a Go implementation of the original C implementation by Frank Denis.
Usage:
minisign -G [-p <pubKey>] [-s <secKey>]
minisign -S [-x <signature>] [-s <secKey>] [-c <comment>] [-t <comment>] -m <file>...
minisign -V [-H] [-x <signature>] [-p <pubKey> | -P <pubKey>] [-o] [-q | -Q ] -m <file>
minisign -R [-s <secKey>] [-p <pubKey>]
Options:
-G Generate a new public/secret key pair.
-S Sign files with a secret key.
-V Verify files with a public key.
-m <file> The file to sign or verify.
-o Combined with -V, output the file after verification.
-H Combined with -V, require a signature over a pre-hashed file.
-p <pubKey> Public key file (default: ./minisign.pub)
-P <pubKey> Public key as base64 string
-s <secKey> Secret key file (default: $HOME/.minisign/minisign.key)
-x <signature> Signature file (default: <file>.minisig)
-c <comment> Add a one-line untrusted comment.
-t <comment> Add a one-line trusted comment.
-q Quiet mode. Suppress output.
-Q Pretty quiet mode. Combined with -V, only print the trusted comment.
-R Re-create a public key file from a secret key.
-f Combined with -G or -R, overwrite any existing public/secret key pair.
-v Print version information.
On windows, linux and macOS, you can use the pre-built binaries:
| OS | ARCH | Latest Release |
|---|---|---|
| Linux | amd64 | minisign-linux-amd64.tar.gz |
| Linux | arm64 | minisign-linux-arm64.tar.gz |
| MacOS | arm64 | minisign-darwin-arm64.tar.gz |
| MacOS | amd64 | minisign-darwin-amd64.tar.gz |
| Windows | amd64 | minisign-windows-amd64.zip |
If your system has Go1.16+, you can build from source:
git clone https://aead.dev/minisign && cd minisign
go build -o . aead.dev/minisign/cmd/minisign
import "aead.dev/minisign" The following example generates a minisign public/private key pair, signs a message and verifies the message signature.
package main
import (
"crypto/rand"
"log"
"aead.dev/minisign"
)
func main() {
var message = []byte("Hello World!")
public, private, err := minisign.GenerateKey(rand.Reader)
if err != nil {
log.Fatalln(err)
}
signature := minisign.Sign(private, message)
if !minisign.Verify(public, message, signature) {
log.Fatalln("signature verification failed")
}
log.Println(string(message))
}For more examples visit the package documentation.