Consider adding signify support
As discussed on Mastodon, I am opening an issue here for consideration. Given the chance and guidance I do want to implement support for this myself. I'd be happy to contribute. I also intend to look for ways on how to use voa in Exherbo Linux for package artifact signing.
What I have:
1. https://crates.io/crates/signify-rs Identical to reference implementation.
2. Portable, passes tests on FreeBSD; NetBSD, Linux, and Windows. WASM support is planned.
3. On Linux/Android the `-k keyid` extension for -G(generate) and -S(sign) adds _keyrings_(7) support. This improves passphrase management.
4. No unsafe code, no arithmetic side effects, and a handful more forbid macros.
5. Well tested, includes OpenBSD's own regression tests for signify(1), unit tests, integration tests, property-based tests and fuzzing support with AFL++
6. Output and exit code is stable and compatible with OpenBSD. Apt to use in scripts.
7. https://crates.io/crates/libsignify-rs Library interface with a clean, idiomatic Builder-based API
8. All functionality available via library interface, the binary is a thin wrapper.
9. No proc macros in dependencies, static-linking friendly.
10. Licensed ISC, same as the reference implementation.
issue