Public dk distribution keys

jonahbeckford · jonahbeckford · commit ef3dc701bab3 · 2025-05-13T13:24:35.000-07:00
diff --git a/etc/signify/README.md b/etc/signify/README.md
@@ -0,0 +1,14 @@
+# signify
+
+## Generating a new key
+
+Please read <https://www.openbsd.org/papers/bsdcan-signify.html> for how to do key rotations.
+The MlFront_Signify library has a detailed guide as well.
+
+Get the `mlfront-signify` executables from <https://gitlab.com/dkml/build-tools/MlFront/-/releases>.
+
+```sh
+VER=2.4 # change the version number during a key rotation
+SIGNIFY=mlfront-signify # you should be able to use OpenBSD signify as well (untested)
+"$SIGNIFY" -G -c "dk $VER: signify -G -p etc/signify/dk-$VER.pub -s build/dk-$VER.sec" -p etc/signify/dk-$VER.pub -s build/dk-$VER.sec
+```
diff --git a/etc/signify/dk-2.3.pub b/etc/signify/dk-2.3.pub
@@ -0,0 +1,2 @@
+untrusted comment: dk 2.3: signify -G -p etc/signify/dk-2.3.pub -s build/dk-2.3.sec
+RWQtC7n3cgPcTB8fJ4KBcRazbo51mAfTCer2QPVG/iEDCyqx1DlDMVcr
diff --git a/etc/signify/dk-2.4.pub b/etc/signify/dk-2.4.pub
@@ -0,0 +1,2 @@
+untrusted comment: dk 2.4: signify -G -p etc/signify/dk-2.4.pub -s build/dk-2.4.sec
+RWRpIF6htUJNYoe6KJppB4sFVCKcUMCTSXMYbf2KSpZW2bkoF1wUZUKj

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+untrusted comment: dk 2.3: signify -G -p etc/signify/dk-2.3.pub -s build/dk-2.3.sec`
	`2`	`+RWQtC7n3cgPcTB8fJ4KBcRazbo51mAfTCer2QPVG/iEDCyqx1DlDMVcr`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+untrusted comment: dk 2.4: signify -G -p etc/signify/dk-2.4.pub -s build/dk-2.4.sec`
	`2`	`+RWRpIF6htUJNYoe6KJppB4sFVCKcUMCTSXMYbf2KSpZW2bkoF1wUZUKj`