From 18c4f042517922a0cc8a4e59174e306d23280401 Mon Sep 17 00:00:00 2001 From: Jesse Shawl Date: Sat, 3 Feb 2024 15:50:02 -0600 Subject: [PATCH] include filename in trusted comment --- lib/minisign/private_key.rb | 4 ++-- spec/minisign/private_key_spec.rb | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/minisign/private_key.rb b/lib/minisign/private_key.rb index bda46f1..26cc58e 100644 --- a/lib/minisign/private_key.rb +++ b/lib/minisign/private_key.rb @@ -45,9 +45,9 @@ def blake2b512(message) OpenSSL::Digest.new('BLAKE2b512').digest(message) end - def sign(message) + def sign(filename, message) signature = ed25519_signing_key.sign(blake2b512(message)) - trusted_comment = "timestamp:#{Time.now.to_i}\tfile:generated.txt\thashed" + trusted_comment = "timestamp:#{Time.now.to_i}\tfile:#{filename}\thashed" global_signature = ed25519_signing_key.sign("#{signature}#{trusted_comment}") [ 'untrusted comment: ', diff --git a/spec/minisign/private_key_spec.rb b/spec/minisign/private_key_spec.rb index 0b7b8b2..fc10354 100644 --- a/spec/minisign/private_key_spec.rb +++ b/spec/minisign/private_key_spec.rb @@ -57,7 +57,7 @@ filename = "#{SecureRandom.uuid}.txt" message = SecureRandom.uuid File.write("test/generated/#{filename}", message) - signature = @private_key.sign(message) + signature = @private_key.sign(filename, message) File.write("test/generated/#{filename}.minisig", signature) @signature = Minisign::Signature.new(signature) @public_key = Minisign::PublicKey.new('RWSmKaOrT6m3TGwjwBovgOmlhSbyBUw3hyhnSOYruHXbJa36xHr8rq2M')