Skip to content

Conversation

@monoidk
Copy link

@monoidk monoidk commented Aug 6, 2025

Both signify and minisign have a concept of untrusted comment, which if signing by default seems to point to the pubkey. If available, the option for untrusted comment only ever seems to be -c.

Only minisign seems to have a concept of a trusted comment and the option for a trusted comment is -t

This commit makes the trusted comment optional
(defaults to off, previously defaulted to time.asctime()). This removes the unneeded signing and prompt round for those who do not need or use the trusted comment section.

This commit also brings the trezor-signify command line closer to the minisign and signify tools, which unfortunately seems to be a breaking change, but the previous state seemed to be more messy.

This fixes #502

monoidk added 2 commits August 6, 2025 20:54
Both signify and minisign have a concept of untrusted comment,
which if signing by default seems to point to the pubkey.
If available, the option for untrusted comment only ever seems to be -c.

Only minisign seems to have a concept of a trusted comment
and the option for a trusted comment is -t

This commit makes the trusted comment optional
(defaults to off, previously defaulted to time.asctime()).
This removes the unneeded signing and prompt round for those
who do not need or use the trusted comment section.

This commit also brings the `trezor-signify` command line closer
to the minisign and signify tools, which unfortunately seems to be
a breaking change, but the previous state seemed to be more messy.
Signify tool (but not minisign) supports embedding message
after the signature (-e).
Add the option to embed the message as well.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

signify - allow single-round signing (without trusted comment)

1 participant