minisign
creates and verifies signatures
TLDR
Generate key pair
$ minisign -G
Sign file$ minisign -Sm [file]
Verify signature$ minisign -Vm [file] -p [pubkey.pub]
Sign with comment$ minisign -Sm [file] -c "[Signed by me]"
Verify with trusted key$ minisign -Vm [file] -P [public_key_string]
SYNOPSIS
minisign [options]
DESCRIPTION
minisign creates and verifies signatures. It's simpler than GPG with good security.The tool uses Ed25519 signatures. Designed for signing software releases.
PARAMETERS
-G
Generate a new key pair.-S
Sign a file.-V
Verify a signature.-R
Re-create a public key file from an existing secret key.-m FILE
File to sign or verify.-o
With -S, emit a pre-hashed signature (required for files >1 GiB).-H
With -V, require the signature to be a pre-hashed signature.-q
Quiet mode; suppress the "Comment" banner on successful verification.-Q
Pretty-print the public key and the signature comment.-s FILE
Secret key file (default `~/.minisign/minisign.key`).-p FILE
Public key file.-P KEY
Public key supplied on the command line (base64).-x FILE
Signature file path (default `<input>.minisig`).-c COMMENT
Untrusted comment stored in the signature.-t COMMENT
Trusted comment (signed, cannot be tampered with without invalidating the signature).-f
Force: overwrite existing files without prompting.-W
Do not encrypt the newly generated secret key.-v
Show the minisign version and exit.--help
Display help information.
CAVEATS
Not compatible with GPG. Signing only (no encryption). Simple by design.
HISTORY
Minisign was created by Frank Denis as a dead-simple tool for signing files.
SEE ALSO
gpg(1), age(1), ssh-keygen(1)
