Minisign Python
This is a pure Python implementation of Frank Denis' minisign, following the specifications copied from there.
Currently following version 0.9.
IMPORTANT NOTE: this is currently under heavy development, and it hasn't undergone an external security assessment.
Goals
- Compatible public interface: all commands and options must be 100% compatible and with same results.
- Usage as CLI and as Python module.
- Follow semver.
Secondary goals
- Small amount of dependencies (I would love to keep it just to cryptolibraries).
- If possible, maintain current active Python versions (3.7+).
Milestones
- Define goals and license.
- Create initial project structure.
- Code structure.
- Contribution guidelines.
- Pipeline.
- Achieve basic functionality:
- Create key pair.
- Verify signature.
- Sign.
- Ensure coverage 100%.
- Make first release.
- Add remaining options.
Requirements
- Python 3.7+
- PyNaCl 1.3+
License
Minisign Python is made by HacKan under MPL v2.0. You are free to use, share, modify and share modifications under the terms of that license. Derived works may link back to the canonical repository: https://gitlab.com/hackancuba/minisign-py.
Note that minisign by Frank Denis is licensed under ISC.
Copyright (C) 2020 HacKan (https://hackan.net)
This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0. If a copy of the MPL was not distributed with this
file, You can obtain one at https://mozilla.org/MPL/2.0/.
1 maintainer
Metadata
1 maintainer
Release files for minisign 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| minisign-0.1.0.tar.gz | 8.3 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| minisign-0.1.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 17.1 kB
Release files / minisign-0.1.0.tar.gz
| Download URL | minisign-0.1.0.tar.gz |
|---|---|
| Size | 8.3 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
4e775d249cb9da9f5324cabfa7c02960cfa685cca1e0e88a42877b3327028cdd
|
|
BLAKE2b-256 checksum How to use checksums |
37b71b9baaa3ee5ca7110bfec5d18072b2b4150bc86d27c764231986435639c6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.2.0 pkginfo/1.5.0.1 requests/2.24.0 setuptools/47.1.0 requests-toolbelt/0.9.1 tqdm/4.49.0 CPython/3.8.5
|
Release files / minisign-0.1.0-py3-none-any.whl
| Download URL | minisign-0.1.0-py3-none-any.whl |
|---|---|
| Size | 8.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
9901d98da67f98de11864cdb0b724b2204d86861be520ee1e4871b8672bbf7ff
|
|
BLAKE2b-256 checksum How to use checksums |
51f68f83f581b8837583da66eaa417fef60063a4e29482aa47fefe5a8386e6b5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.2.0 pkginfo/1.5.0.1 requests/2.24.0 setuptools/47.1.0 requests-toolbelt/0.9.1 tqdm/4.49.0 CPython/3.8.5
|
Security for minisign 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
