yubisigner v0.1.1 released

58 views
Skip to first unread message

Stefan Claas

unread,
Mar 10, 2026, 5:05:51 PM (3 days ago) Mar 10
to golang-nuts
Dear go-nuts community,

I have released yubisigner, which is a modern replacement for
GnuPG and signify-openbsd detached signatures, which is more
versatile and does not allow faking headers by third parties, like
the Comment: header in GnuPG or the untrusted-signature: header
in signify-openbsd.

I would appreciated if you take a look at yubisigner and if you like
yubisigner, as much as I do, to leave feedback. 

Please note: the Windows and Linux binary, under Releases, is
signed with yubisigner v0.1.1 and the two .sig files are additionally
time stamped with opentimestamps.org.

https://github.com/Ch1ffr3punk/yubisigner

Hope you like!

Best regards
Stefan

Stefan Claas

unread,
5:24 PM (2 hours ago) 5:24 PM
to golang-nuts
yubisigner v0.1.2 released. It has now two additional buttons.
CMT (Create Merkle Tree) and VMT (Verify Merkle Tree), which
is useful if you like to generate a merkle-tree.txt file of your
source code folder, prior uploading, so that third parties can not
manipulate your uploaded source code. It is highly recommended
to sign merkle-tree.txt with yubisigner too and additionally time stamp
the .sig file with opentimestamps.org.
Reply all
Reply to author
Forward
0 new messages