include filename in trusted comment

jshawl · Feb 3, 2024 · 18c4f04 · 18c4f04
1 parent 269873d
commit 18c4f04
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/lib/minisign/private_key.rb b/lib/minisign/private_key.rb
@@ -45,9 +45,9 @@ def blake2b512(message)
       OpenSSL::Digest.new('BLAKE2b512').digest(message)
     end
 
-    def sign(message)
+    def sign(filename, message)
       signature = ed25519_signing_key.sign(blake2b512(message))
-      trusted_comment = "timestamp:#{Time.now.to_i}\tfile:generated.txt\thashed"
+      trusted_comment = "timestamp:#{Time.now.to_i}\tfile:#{filename}\thashed"
       global_signature = ed25519_signing_key.sign("#{signature}#{trusted_comment}")
       [
         'untrusted comment: <arbitrary text>',

diff --git a/spec/minisign/private_key_spec.rb b/spec/minisign/private_key_spec.rb
@@ -57,7 +57,7 @@
       filename = "#{SecureRandom.uuid}.txt"
       message = SecureRandom.uuid
       File.write("test/generated/#{filename}", message)
-      signature = @private_key.sign(message)
+      signature = @private_key.sign(filename, message)
       File.write("test/generated/#{filename}.minisig", signature)
       @signature = Minisign::Signature.new(signature)
       @public_key = Minisign::PublicKey.new('RWSmKaOrT6m3TGwjwBovgOmlhSbyBUw3hyhnSOYruHXbJa36xHr8rq2M')