Consider adding signify support
As discussed on Mastodon, I am opening an issue here for consideration. Given the chance and guidance I do want to implement support for this myself. I'd be happy to contribute. I also intend to look for ways on how to use voa in Exherbo Linux for package artifact signing.
What I have:
- https://crates.io/crates/signify-rs Identical to reference implementation.
- Portable, passes tests on FreeBSD; NetBSD, Linux, and Windows. WASM support is planned.
- On Linux/Android the
-k keyidextension for -G(generate) and -S(sign) adds keyrings(7) support. This improves passphrase management. - No unsafe code, no arithmetic side effects, and a handful more forbid macros.
- Well tested, includes OpenBSD's own regression tests for signify(1), unit tests, integration tests, property-based tests and fuzzing support with AFL++
- Output and exit code is stable and compatible with OpenBSD. Apt to use in scripts.
- https://crates.io/crates/libsignify-rs Library interface with a clean, idiomatic Builder-based API
- All functionality available via library interface, the binary is a thin wrapper.
- No proc macros in dependencies, static-linking friendly.
- Licensed ISC, same as the reference implementation.