minisign 0.0.3

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: ab99f429385b0f4e6588f199322c1d3b4f0e74fc3653d44d9b7e3be64a16c1a4
+  data.tar.gz: 87d81af21c0f8dfe4cd90846f921014dcc7383ea7a09ee5811ff22102fc3a8ba
+SHA512:
+  metadata.gz: d2009870037a601e9417f2ea753486aa5a9b1dcca7effb7293924649978320992969c28113056953e95afeb854f05f25b1738e3dd5af203346a66b325d013884
+  data.tar.gz: 771fa8348725c66211b95eff9e3790c0a57dfa8bcd67fafeaebe2276982a8704e69763f3a62d273192ee813449b44e72ebe22ff424ad7efd28df6c2d0a7e2366

data/lib/minisign.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+require 'ed25519'
+require 'base64'
+require 'openssl'
+
+module Minisign
+  # Parse a .minisig file's contents
+  class Signature
+    attr_reader :signature, :comment, :comment_signature
+
+    def initialize(str)
+      lines = str.split("\n")
+      @signature = Base64.decode64(lines[1])[10..]
+      @comment = lines[2].split('trusted comment: ')[1]
+      @comment_signature = Base64.decode64(lines[3])
+    end
+  end
+
+  # Parse ed25519 verify key from minisign public key
+  class PublicKey
+    def initialize(str)
+      @public_key = Base64.strict_decode64(str)[10..]
+      @verify_key = Ed25519::VerifyKey.new(@public_key)
+    end
+
+    def verify(sig, message)
+      blake = OpenSSL::Digest.new('BLAKE2b512')
+      @verify_key.verify(sig.signature, blake.digest(message))
+      begin
+        @verify_key.verify(sig.comment_signature, sig.signature + sig.comment)
+      rescue Ed25519::VerifyError
+        raise 'Comment signature verification failed'
+      end
+      "Signature and comment signature verified\nTrusted comment: #{sig.comment}"
+    end
+  end
+end

metadata

@@ -0,0 +1,57 @@
+--- !ruby/object:Gem::Specification
+name: minisign
+version: !ruby/object:Gem::Version
+  version: 0.0.3
+platform: ruby
+authors:
+- Jesse Shawl
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2022-05-30 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: ed25519
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+description: Verify minisign signatures
+email: jesse@jesse.sh
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/minisign.rb
+homepage: https://rubygems.org/gems/minisign
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.6.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.0.3.1
+signing_key: 
+specification_version: 4
+summary: Minisign, in Ruby!
+test_files: []