search

hendriknielaender / zvm

⚡ Fast and simple zig version manager
MIT License
26 stars 3 forks source link

Use minisign to verify tarball #43

Closed hendriknielaender closed 2 days ago

hendriknielaender commented 5 months ago

Use the official minisign to verify the downloaded zig version.

https://ziglang.org/download/

jinzhongjia commented 5 months ago

for verifing tarball, we can use this lib, https://github.com/jedisct1/zig-minisign/tree/main

hendriknielaender commented 5 months ago

Since the RFCs specs are relatively small, I would prefer if we built it into zvm. We also only need the verification part.

jinzhongjia commented 3 months ago

Is there any specific implementation specification? I checked the upstream repository of minisign and found no specification.

hendriknielaender commented 3 months ago

It's the EdDS-Algorithm that they implemented in minisign. https://ed25519.cr.yp.to/

RFC8032