Greetings, debian-security! OpenBSD has recently developed a tool called "signify" for cryptographic signing and verifying. It is extremely lightweight, and produces extremely small signatures. For an idea of how small, note that this is a complete signature:
RWSRtYZ5JArIEj7Q2Q5qTHD1c2JCvWAu7z0s0ARhlA4s/ac3lc1T5PLplmq1x/LTRZxl9J27Re/QVnUkU9wp14vN/+3Wnb2Tyw4= It is currently being used to sign not only the releases of OpenBSD (and its forks, Bitrig and LibertyBSD), but also LibreSSL, OpenBSD's fork of the OpenSSL library created after heartbleed. I've packaged signify for Debian, and I'm currently looking for a sponsor. You can download the package with this command: dget -x http://mentors.debian.net/debian/pool/main/s/signify-openbsd /signify-openbsd_8-1.dsc The mentors summary page is here: http://mentors.debian.net/package/signify-openbsd More information about signify can be obtained from http://www.tedunangst.com/flak/post/signify Yours sincerely, Riley Baird -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org