search

t-d-k / LibreCrypt

LibreCrypt: Transparent on-the-fly disk encryption for Windows. LUKS compatible.
https://LibreCrypt.tdksoft.co.uk
734 stars 71 forks source link

PGP, MD5 and SHA-1 signatures hardly findable... #45

Open Projekt-43 opened 8 years ago

Projekt-43 commented 8 years ago

Hi, I could not find (in the repo and librecrypt.eu) any signature for release files as mentioned in the Documentation.

I finally managed to import the PGP key from a key server with the Key-ID from the release page : gpg --keyserver pool.sks-keyservers.net --recv-keys AD44979A and verify the release files using GPG.

But it could be good to give the keys/files (.asc, .md5...) here instead. =)

Thanks.

t-d-k commented 8 years ago

There are .sig files on the release page: https://github.com/t-d-k/LibreCrypt/releases If you have GpgEX installed, you should be able to put the signature in the same folder as the exe, right-click on it and choose GPGEx Options -> Verify.
I'm not sure there's any point having md5 hashes, because anyone who could change the exe could change the hash.