Changes between Version 6 and Version 7 of KeySetup

Timestamp:

Feb 6, 2008, 8:23:00 AM (17 years ago)

Author:

davea

Comment:

--

KeySetup

@@ -1 @@
-= The encryption utility =
+= File signing utilities =
+
+Use '''sign_executable''' to sign executable files:
+
+{{{
+sign_executable file_to_sign private_key_file > signature_file
+}}}
+sign_executable is compiled in the lib/ directory,
+and installed in your project's bin/ directory.
+It writes the signature to stdout.
+
+== Creating encryption keys ==
 
 The program `lib/crypt_prog` performs various encryption tasks.
 
-crypt_prog is built by the standard build procedure on Unix systems. You can also build it on Windows (with Visual Studio 2003) using the project file `win_build/crypt_prog.vcproj`.
+ crypt_prog -genkey nbits private_keyfile public_keyfile::
+        Create a key pair with nbits bits (always use 1024). Write the keys in encoded ASCII form to the indicated files.
 
-== Creating encryption keys ==
-
- crypt_prog -genkey n private_keyfile public_keyfile::
-        Create a key pair with n bits (always use 1024). Write the keys in encoded ASCII form to the indicated files.
-
-The following commands generate the file upload and code signing key pairs. BOINC_KEY_DIR is the directory where the keys will be stored. The code signing private key should be stored only on a highly secure (e.g., a disconnected, physically secure) host.
+The following commands generate the file upload and code signing key pairs.
+BOINC_KEY_DIR is the directory where the keys will be stored.
+The code signing private key should be stored only on a highly secure (e.g., a disconnected, physically secure) host.
 {{{
 crypt_prog -genkey 1024 BOINC_KEY_DIR/upload_private BOINC_KEY_DIR/upload_public
 crypt_prog -genkey 1024 BOINC_KEY_DIR/code_sign_private BOINC_KEY_DIR/code_sign_public
 }}}
-Or, in the test/ directory, run
-{{{
-gen_keys.php
-}}}
 
-== Generating signatures ==
+Other functions of crypt_prog:
 
  crypt_prog -sign file private_keyfile::
-        Create a digital signature for the given file. Write it in encoded ASCII to stdout.
+        Create a digital signature for the given file (same as sign_executable).
  crypt_prog -sign_string string private_keyfile::
-        Create a digital signature for the given string. Write it in encoded ASCII to stdout.
+        Create a digital signature for the given string, write it to stdout.
  crypt_prog -verify file signature_file public_keyfile::
         Verify a signature for the given file.