Scroll to navigation

SIGSUM-KEY-SIGN(1) User Commands SIGSUM-KEY-SIGN(1)

NAME

sigsum-key-sign - create Ed25519 signature

SYNOPSIS

sigsum-key sign [--help] [-k key-file] [-n namespace] [-o output-file] < msg

DESCRIPTION

Create an Ed25519 signature with a given namespace. The namespaces that are used in the Sigsum system are 'sigsum.org/v1/tree-leaf' (signed checksums) and 'sigsum.org/v1/submit-token' (rate limiting). The default behavior is to not use any namespace.

The message to sign is provided on stdin.

OPTIONS

Show usage message and exit

-k, --signing-key=key-file

Private key in OpenSSH format; or a corresponding public key where the private part is accessed using the SSH agent protocol (required)

-n, --namespace=namespace

Signature namespace to ensure domain separation

-o, --output=output-file

Signature in hex format

RETURN CODES

A non-zero return code is used to indicate failure.

CONTACT

Send an email to the sigsum-general mailing list at sigsum-general@lists.sigsum.org. You can also reach out in room #sigsum at OFTC.net and matrix.org.

REPORTING BUGS

Use the issue tracker located at https://git.glasklar.is/sigsum/core/sigsum-go/-/issues. To file issues without a GitLab account, send an email to sigsum-core-sigsum-go-issues@incoming.glasklar.is and wait for a maintainer to make the issue public.

SEE ALSO

sigsum-key-from-hex(1) sigsum-key-from-vkey(1) sigsum-key-generate(1) sigsum-key-sign(1) sigsum-key-to-hash(1) sigsum-key-to-hex(1) sigsum-key-to-vkey(1) sigsum-key-verify(1) sigsum-monitor(1) sigsum-submit(1) sigsum-token(1) sigsum-tools(5) sigsum-verify(1)

March 2025 sigsum-key sign 0.11.1-1+exp0