KEKS/CM PQ tarball signatures

diff --git a/PUBKEY-CM.pub b/PUBKEY-CM.pub
new file mode 100644 (file)
index 0000000..e0fde1d
Binary files /dev/null and b/PUBKEY-CM.pub differ

diff --git a/PUBKEY-CM.pub.asc b/PUBKEY-CM.pub.asc
new file mode 100644 (file)
index 0000000..740f621
--- /dev/null
+++ b/PUBKEY-CM.pub.asc
@@ -0,0 +1,8 @@
+-----BEGIN PGP SIGNATURE-----
+
+iJEEABYKADkWIQTbL/jtRAp+lJhvt3bSI36ECQhstwUCaWoLGhsUgAAAAAAEAA5t
+YW51MiwyLjUrMS4xMSwyLDMACgkQ0iN+hAkIbLeXkgEA70EvEKnWXVLPQoob9FQx
+wBvTZyAWwcp8Zl0MiaIDFGwA/RRD2dhHp4bvg7Ogu5ySVM9GQNhEdCytTtb5Wj+q
+km8B
+=kuKf
+-----END PGP SIGNATURE-----

diff --git a/doc/Download b/doc/Download
index 608ce9dd20f428fde5f9455ef00abcdcd1271722..87702536648ab75ef8d53b9c98c2d496eb66a657 100644 (file)
--- a/doc/Download
+++ b/doc/Download
@@ -3,321 +3,375 @@ Release [NEWS]#2.8.0 | 2025-12-16 | 479 KiB
     => download/goredo-2.8.0.tar.zst tar\r
     => download/goredo-2.8.0.tar.zst.asc pgp\r
     => download/goredo-2.8.0.tar.zst.sig ssh\r
+    => download/goredo-2.8.0.tar.zst.cm cm\r
 
 Release [NEWS]#2.6.5 | 2025-10-26 | 478 KiB
     => download/goredo-2.6.5.tar.zst.meta4 meta4\r
     => download/goredo-2.6.5.tar.zst tar\r
     => download/goredo-2.6.5.tar.zst.asc pgp\r
     => download/goredo-2.6.5.tar.zst.sig ssh\r
+    => download/goredo-2.6.5.tar.zst.cm cm\r
 
 Release [NEWS]#2.6.4 | 2025-01-04 | 471 KiB
     => download/goredo-2.6.4.tar.zst.meta4 meta4\r
     => download/goredo-2.6.4.tar.zst tar\r
     => download/goredo-2.6.4.tar.zst.asc pgp\r
     => download/goredo-2.6.4.tar.zst.sig ssh\r
+    => download/goredo-2.6.4.tar.zst.cm cm\r
 
 Release [NEWS]#2.6.3 | 2024-11-24 | 471 KiB
     => download/goredo-2.6.3.tar.zst.meta4 meta4\r
     => download/goredo-2.6.3.tar.zst tar\r
     => download/goredo-2.6.3.tar.zst.asc pgp\r
     => download/goredo-2.6.3.tar.zst.sig ssh\r
+    => download/goredo-2.6.3.tar.zst.cm cm\r
 
 Release [NEWS]#2.6.2 | 2024-02-29 | 455 KiB
     => download/goredo-2.6.2.tar.zst.meta4 meta4\r
     => download/goredo-2.6.2.tar.zst tar\r
     => download/goredo-2.6.2.tar.zst.asc pgp\r
     => download/goredo-2.6.2.tar.zst.sig ssh\r
+    => download/goredo-2.6.2.tar.zst.cm cm\r
 
 Release [NEWS]#2.6.1 | 2024-02-19 | 455 KiB
     => download/goredo-2.6.1.tar.zst.meta4 meta4\r
     => download/goredo-2.6.1.tar.zst tar\r
     => download/goredo-2.6.1.tar.zst.asc pgp\r
     => download/goredo-2.6.1.tar.zst.sig ssh\r
+    => download/goredo-2.6.1.tar.zst.cm cm\r
 
 Release [NEWS]#2.6.0 | 2023-12-19 | 455 KiB
     => download/goredo-2.6.0.tar.zst.meta4 meta4\r
     => download/goredo-2.6.0.tar.zst tar\r
     => download/goredo-2.6.0.tar.zst.asc pgp\r
     => download/goredo-2.6.0.tar.zst.sig ssh\r
+    => download/goredo-2.6.0.tar.zst.cm cm\r
 
 Release [NEWS]#2.5.0 | 2023-11-26 | 455 KiB
     => download/goredo-2.5.0.tar.zst.meta4 meta4\r
     => download/goredo-2.5.0.tar.zst tar\r
     => download/goredo-2.5.0.tar.zst.asc pgp\r
     => download/goredo-2.5.0.tar.zst.sig ssh\r
+    => download/goredo-2.5.0.tar.zst.cm cm\r
 
 Release [NEWS]#2.4.0 | 2023-11-17 | 455 KiB
     => download/goredo-2.4.0.tar.zst.meta4 meta4\r
     => download/goredo-2.4.0.tar.zst tar\r
     => download/goredo-2.4.0.tar.zst.asc pgp\r
     => download/goredo-2.4.0.tar.zst.sig ssh\r
+    => download/goredo-2.4.0.tar.zst.cm cm\r
 
 Release [NEWS]#2.3.0 | 2023-11-11 | 455 KiB
     => download/goredo-2.3.0.tar.zst.meta4 meta4\r
     => download/goredo-2.3.0.tar.zst tar\r
     => download/goredo-2.3.0.tar.zst.asc pgp\r
     => download/goredo-2.3.0.tar.zst.sig ssh\r
+    => download/goredo-2.3.0.tar.zst.cm cm\r
 
 Release [NEWS]#2.2.0 | 2023-10-16 | 455 KiB
     => download/goredo-2.2.0.tar.zst.meta4 meta4\r
     => download/goredo-2.2.0.tar.zst tar\r
     => download/goredo-2.2.0.tar.zst.asc pgp\r
     => download/goredo-2.2.0.tar.zst.sig ssh\r
+    => download/goredo-2.2.0.tar.zst.cm cm\r
 
 Release [NEWS]#2.1.0 | 2023-10-09 | 455 KiB
     => download/goredo-2.1.0.tar.zst.meta4 meta4\r
     => download/goredo-2.1.0.tar.zst tar\r
     => download/goredo-2.1.0.tar.zst.asc pgp\r
     => download/goredo-2.1.0.tar.zst.sig ssh\r
+    => download/goredo-2.1.0.tar.zst.cm cm\r
 
 Release [NEWS]#2.0.0 | 2023-10-08 | 455 KiB
     => download/goredo-2.0.0.tar.zst.meta4 meta4\r
     => download/goredo-2.0.0.tar.zst tar\r
     => download/goredo-2.0.0.tar.zst.asc pgp\r
     => download/goredo-2.0.0.tar.zst.sig ssh\r
+    => download/goredo-2.0.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.32.0 | 2023-09-25 | 439 KiB
     => download/goredo-1.32.0.tar.zst.meta4 meta4\r
     => download/goredo-1.32.0.tar.zst tar\r
     => download/goredo-1.32.0.tar.zst.asc pgp\r
     => download/goredo-1.32.0.tar.zst.sig ssh\r
+    => download/goredo-1.32.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.31.0 | 2023-09-23 | 439 KiB
     => download/goredo-1.31.0.tar.zst.meta4 meta4\r
     => download/goredo-1.31.0.tar.zst tar\r
     => download/goredo-1.31.0.tar.zst.asc pgp\r
     => download/goredo-1.31.0.tar.zst.sig ssh\r
+    => download/goredo-1.31.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.30.0 | 2023-01-18 | 431 KiB
     => download/goredo-1.30.0.tar.zst.meta4 meta4\r
     => download/goredo-1.30.0.tar.zst tar\r
     => download/goredo-1.30.0.tar.zst.asc pgp\r
     => download/goredo-1.30.0.tar.zst.sig ssh\r
+    => download/goredo-1.30.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.29.0 | 2023-01-17 | 431 KiB
     => download/goredo-1.29.0.tar.zst.meta4 meta4\r
     => download/goredo-1.29.0.tar.zst tar\r
     => download/goredo-1.29.0.tar.zst.asc pgp\r
     => download/goredo-1.29.0.tar.zst.sig ssh\r
+    => download/goredo-1.29.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.28.0 | 2022-11-14 | 429 KiB
     => download/goredo-1.28.0.tar.zst.meta4 meta4\r
     => download/goredo-1.28.0.tar.zst tar\r
     => download/goredo-1.28.0.tar.zst.asc pgp\r
     => download/goredo-1.28.0.tar.zst.sig ssh\r
+    => download/goredo-1.28.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.27.1 | 2022-09-09 | 424 KiB
     => download/goredo-1.27.1.tar.zst.meta4 meta4\r
     => download/goredo-1.27.1.tar.zst tar\r
     => download/goredo-1.27.1.tar.zst.asc pgp\r
     => download/goredo-1.27.1.tar.zst.sig ssh\r
+    => download/goredo-1.27.1.tar.zst.cm cm\r
 
 Release [NEWS]#1.27.0 | 2022-08-28 | 424 KiB
     => download/goredo-1.27.0.tar.zst.meta4 meta4\r
     => download/goredo-1.27.0.tar.zst tar\r
     => download/goredo-1.27.0.tar.zst.asc pgp\r
     => download/goredo-1.27.0.tar.zst.sig ssh\r
+    => download/goredo-1.27.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.26.0 | 2022-08-26 | 424 KiB
     => download/goredo-1.26.0.tar.zst.meta4 meta4\r
     => download/goredo-1.26.0.tar.zst tar\r
     => download/goredo-1.26.0.tar.zst.asc pgp\r
     => download/goredo-1.26.0.tar.zst.sig ssh\r
+    => download/goredo-1.26.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.25.0 | 2022-05-08 | 402 KiB
     => download/goredo-1.25.0.tar.zst.meta4 meta4\r
     => download/goredo-1.25.0.tar.zst tar\r
     => download/goredo-1.25.0.tar.zst.asc pgp\r
     => download/goredo-1.25.0.tar.zst.sig ssh\r
+    => download/goredo-1.25.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.24.0 | 2022-03-01 | 401 KiB
     => download/goredo-1.24.0.tar.zst.meta4 meta4\r
     => download/goredo-1.24.0.tar.zst tar\r
     => download/goredo-1.24.0.tar.zst.asc pgp\r
     => download/goredo-1.24.0.tar.zst.sig ssh\r
+    => download/goredo-1.24.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.23.0 | 2022-02-23 | 401 KiB
     => download/goredo-1.23.0.tar.zst.meta4 meta4\r
     => download/goredo-1.23.0.tar.zst tar\r
     => download/goredo-1.23.0.tar.zst.asc pgp\r
     => download/goredo-1.23.0.tar.zst.sig ssh\r
+    => download/goredo-1.23.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.22.0 | 2022-01-26 | 388 KiB
     => download/goredo-1.22.0.tar.zst.meta4 meta4\r
     => download/goredo-1.22.0.tar.zst tar\r
     => download/goredo-1.22.0.tar.zst.asc pgp\r
     => download/goredo-1.22.0.tar.zst.sig ssh\r
+    => download/goredo-1.22.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.21.0 | 2021-11-20 | 387 KiB
     => download/goredo-1.21.0.tar.zst.meta4 meta4\r
     => download/goredo-1.21.0.tar.zst tar\r
     => download/goredo-1.21.0.tar.zst.asc pgp\r
     => download/goredo-1.21.0.tar.zst.sig ssh\r
+    => download/goredo-1.21.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.20.0 | 2021-11-19 | 385 KiB
     => download/goredo-1.20.0.tar.zst.meta4 meta4\r
     => download/goredo-1.20.0.tar.zst tar\r
     => download/goredo-1.20.0.tar.zst.asc pgp\r
     => download/goredo-1.20.0.tar.zst.sig ssh\r
+    => download/goredo-1.20.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.19.0 | 2021-11-09 | 385 KiB
     => download/goredo-1.19.0.tar.zst.meta4 meta4\r
     => download/goredo-1.19.0.tar.zst tar\r
     => download/goredo-1.19.0.tar.zst.asc pgp\r
     => download/goredo-1.19.0.tar.zst.sig ssh\r
+    => download/goredo-1.19.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.18.0 | 2021-10-27 | 388 KiB
     => download/goredo-1.18.0.tar.zst.meta4 meta4\r
     => download/goredo-1.18.0.tar.zst tar\r
     => download/goredo-1.18.0.tar.zst.asc pgp\r
     => download/goredo-1.18.0.tar.zst.sig ssh\r
+    => download/goredo-1.18.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.17.0 | 2021-10-19 | 387 KiB
     => download/goredo-1.17.0.tar.zst.meta4 meta4\r
     => download/goredo-1.17.0.tar.zst tar\r
     => download/goredo-1.17.0.tar.zst.asc pgp\r
     => download/goredo-1.17.0.tar.zst.sig ssh\r
+    => download/goredo-1.17.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.16.0 | 2021-10-14 | 387 KiB
     => download/goredo-1.16.0.tar.zst.meta4 meta4\r
     => download/goredo-1.16.0.tar.zst tar\r
     => download/goredo-1.16.0.tar.zst.asc pgp\r
     => download/goredo-1.16.0.tar.zst.sig ssh\r
+    => download/goredo-1.16.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.15.0 | 2021-09-30 | 392 KiB
     => download/goredo-1.15.0.tar.zst.meta4 meta4\r
     => download/goredo-1.15.0.tar.zst tar\r
     => download/goredo-1.15.0.tar.zst.asc pgp\r
     => download/goredo-1.15.0.tar.zst.sig ssh\r
+    => download/goredo-1.15.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.14.0 | 2021-09-15 | 392 KiB
     => download/goredo-1.14.0.tar.zst.meta4 meta4\r
     => download/goredo-1.14.0.tar.zst tar\r
     => download/goredo-1.14.0.tar.zst.asc pgp\r
     => download/goredo-1.14.0.tar.zst.sig ssh\r
+    => download/goredo-1.14.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.13.0 | 2021-08-06 | 392 KiB
     => download/goredo-1.13.0.tar.zst.meta4 meta4\r
     => download/goredo-1.13.0.tar.zst tar\r
     => download/goredo-1.13.0.tar.zst.asc pgp\r
     => download/goredo-1.13.0.tar.zst.sig ssh\r
+    => download/goredo-1.13.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.12.0 | 2021-08-01 | 392 KiB
     => download/goredo-1.12.0.tar.zst.meta4 meta4\r
     => download/goredo-1.12.0.tar.zst tar\r
     => download/goredo-1.12.0.tar.zst.asc pgp\r
     => download/goredo-1.12.0.tar.zst.sig ssh\r
+    => download/goredo-1.12.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.11.0 | 2021-08-01 | 392 KiB
     => download/goredo-1.11.0.tar.zst.meta4 meta4\r
     => download/goredo-1.11.0.tar.zst tar\r
     => download/goredo-1.11.0.tar.zst.asc pgp\r
     => download/goredo-1.11.0.tar.zst.sig ssh\r
+    => download/goredo-1.11.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.10.0 | 2021-08-01 | 392 KiB
     => download/goredo-1.10.0.tar.zst.meta4 meta4\r
     => download/goredo-1.10.0.tar.zst tar\r
     => download/goredo-1.10.0.tar.zst.asc pgp\r
     => download/goredo-1.10.0.tar.zst.sig ssh\r
+    => download/goredo-1.10.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.9.0 | 2021-07-31 | 392 KiB
     => download/goredo-1.9.0.tar.zst.meta4 meta4\r
     => download/goredo-1.9.0.tar.zst tar\r
     => download/goredo-1.9.0.tar.zst.asc pgp\r
     => download/goredo-1.9.0.tar.zst.sig ssh\r
+    => download/goredo-1.9.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.8.0 | 2021-07-02 | 389 KiB
     => download/goredo-1.8.0.tar.zst.meta4 meta4\r
     => download/goredo-1.8.0.tar.zst tar\r
     => download/goredo-1.8.0.tar.zst.asc pgp\r
     => download/goredo-1.8.0.tar.zst.sig ssh\r
+    => download/goredo-1.8.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.7.0 | 2021-06-23 | 389 KiB
     => download/goredo-1.7.0.tar.zst.meta4 meta4\r
     => download/goredo-1.7.0.tar.zst tar\r
     => download/goredo-1.7.0.tar.zst.asc pgp\r
     => download/goredo-1.7.0.tar.zst.sig ssh\r
+    => download/goredo-1.7.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.6.0 | 2021-06-22 | 387 KiB
     => download/goredo-1.6.0.tar.zst.meta4 meta4\r
     => download/goredo-1.6.0.tar.zst tar\r
     => download/goredo-1.6.0.tar.zst.asc pgp\r
     => download/goredo-1.6.0.tar.zst.sig ssh\r
+    => download/goredo-1.6.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.5.0 | 2021-06-21 | 387 KiB
     => download/goredo-1.5.0.tar.zst.meta4 meta4\r
     => download/goredo-1.5.0.tar.zst tar\r
     => download/goredo-1.5.0.tar.zst.asc pgp\r
     => download/goredo-1.5.0.tar.zst.sig ssh\r
+    => download/goredo-1.5.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.4.1 | 2021-04-29 | 383 KiB
     => download/goredo-1.4.1.tar.zst.meta4 meta4\r
     => download/goredo-1.4.1.tar.zst tar\r
     => download/goredo-1.4.1.tar.zst.asc pgp\r
     => download/goredo-1.4.1.tar.zst.sig ssh\r
+    => download/goredo-1.4.1.tar.zst.cm cm\r
 
 Release [NEWS]#1.4.0 | 2021-04-29 | 383 KiB
     => download/goredo-1.4.0.tar.zst.meta4 meta4\r
     => download/goredo-1.4.0.tar.zst tar\r
     => download/goredo-1.4.0.tar.zst.asc pgp\r
     => download/goredo-1.4.0.tar.zst.sig ssh\r
+    => download/goredo-1.4.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.3.0 | 2021-02-15 | 339 KiB
     => download/goredo-1.3.0.tar.zst.meta4 meta4\r
     => download/goredo-1.3.0.tar.zst tar\r
     => download/goredo-1.3.0.tar.zst.asc pgp\r
     => download/goredo-1.3.0.tar.zst.sig ssh\r
+    => download/goredo-1.3.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.2.0 | 2021-01-29 | 338 KiB
     => download/goredo-1.2.0.tar.zst.meta4 meta4\r
     => download/goredo-1.2.0.tar.zst tar\r
     => download/goredo-1.2.0.tar.zst.asc pgp\r
     => download/goredo-1.2.0.tar.zst.sig ssh\r
+    => download/goredo-1.2.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.1.0 | 2021-01-24 | 338 KiB
     => download/goredo-1.1.0.tar.zst.meta4 meta4\r
     => download/goredo-1.1.0.tar.zst tar\r
     => download/goredo-1.1.0.tar.zst.asc pgp\r
     => download/goredo-1.1.0.tar.zst.sig ssh\r
+    => download/goredo-1.1.0.tar.zst.cm cm\r
 
 Release [NEWS]#1.0.0 | 2021-01-16 | 338 KiB
     => download/goredo-1.0.0.tar.zst.meta4 meta4\r
     => download/goredo-1.0.0.tar.zst tar\r
     => download/goredo-1.0.0.tar.zst.asc pgp\r
     => download/goredo-1.0.0.tar.zst.sig ssh\r
+    => download/goredo-1.0.0.tar.zst.cm cm\r
 
 Release [NEWS]#0.12.3 | 2021-01-13 | 336 KiB
     => download/goredo-0.12.3.tar.zst.meta4 meta4\r
     => download/goredo-0.12.3.tar.zst tar\r
     => download/goredo-0.12.3.tar.zst.asc pgp\r
     => download/goredo-0.12.3.tar.zst.sig ssh\r
+    => download/goredo-0.12.3.tar.zst.cm cm\r
 
 Release [NEWS]#0.12.2 | 2021-01-13 | 336 KiB
     => download/goredo-0.12.2.tar.zst.meta4 meta4\r
     => download/goredo-0.12.2.tar.zst tar\r
     => download/goredo-0.12.2.tar.zst.asc pgp\r
     => download/goredo-0.12.2.tar.zst.sig ssh\r
+    => download/goredo-0.12.2.tar.zst.cm cm\r
 
 Release [NEWS]#0.12.1 | 2021-01-13 | 336 KiB
     => download/goredo-0.12.1.tar.zst.meta4 meta4\r
     => download/goredo-0.12.1.tar.zst tar\r
     => download/goredo-0.12.1.tar.zst.asc pgp\r
     => download/goredo-0.12.1.tar.zst.sig ssh\r
+    => download/goredo-0.12.1.tar.zst.cm cm\r
 
 Release [NEWS]#0.12.0 | 2021-01-12 | 379 KiB
     => download/goredo-0.12.0.tar.zst.meta4 meta4\r
     => download/goredo-0.12.0.tar.zst tar\r
     => download/goredo-0.12.0.tar.zst.asc pgp\r
     => download/goredo-0.12.0.tar.zst.sig ssh\r
+    => download/goredo-0.12.0.tar.zst.cm cm\r
 
 Release [NEWS]#0.11.0 | 2021-01-10 | 379 KiB
     => download/goredo-0.11.0.tar.zst.meta4 meta4\r
     => download/goredo-0.11.0.tar.zst tar\r
     => download/goredo-0.11.0.tar.zst.asc pgp\r
     => download/goredo-0.11.0.tar.zst.sig ssh\r
+    => download/goredo-0.11.0.tar.zst.cm cm\r
 
 Release [NEWS]#0.10.0 | 2021-01-09 | 436 KiB
     => download/goredo-0.10.0.tar.zst.meta4 meta4\r
     => download/goredo-0.10.0.tar.zst tar\r
     => download/goredo-0.10.0.tar.zst.asc pgp\r
     => download/goredo-0.10.0.tar.zst.sig ssh\r
+    => download/goredo-0.10.0.tar.zst.cm cm\r

diff --git a/doc/INSTALL b/doc/INSTALL
index 27d79b27d5ce2db2dd5a24f71a589e946ed7be76..9b26dedaec37d74ff6d55006671abf15670fcdaa 100644 (file)
--- a/doc/INSTALL
+++ b/doc/INSTALL
@@ -13,7 +13,7 @@ Preferable way is to [Download] tarball with the signature from website:
 
     $ v=2.8.0
     $ [fetch|wget] http://www.goredo.cypherpunks.su/download/goredo-$v.tar.zst
-    $ [fetch|wget] http://www.goredo.cypherpunks.su/download/goredo-$v.tar.zst.{asc,sig}
+    $ [fetch|wget] http://www.goredo.cypherpunks.su/download/goredo-$v.tar.zst.{asc,sig,cm}
     [Integrity] verify
     $ zstd -d <goredo-$v.tar.zst | tar xf -
     $ cd goredo-$v/src

diff --git a/doc/Integrity b/doc/Integrity
index 04b041c137dce2edad17a54deca0dc182917247f..6e1fd33e1b6dbe5cb3109baf7bc6a02f703d5c7d 100644 (file)
--- a/doc/Integrity
+++ b/doc/Integrity
@@ -1,13 +1,10 @@
-You *have to* verify downloaded tarballs authenticity to be sure
-that you retrieved trusted and untampered software. There are two options:
-
-=> https://librepgp.org/ LibrePGP .asc signature\r
-    Use GNU Privacy Guard free software implementation.
-    For the very first time it is necessary to get signing public key and
-    import it. It is provided in PUBKEY-PGP.asc}, but you should check
-    alternate resources.
+You *have to* verify downloaded tarballs authenticity to be sure that
+you retrieved trusted and untampered software. There are three options:
+
+=> https://librepgp.org/ LibrePGP\r
+    .asc ed25519 signature.
     => https://www.gnupg.org/ GNU Privacy Guard\r
-    => PUBKEY-PGP.asc\r
+    => PUBKEY-PGP.asc public key\r
 
     pub   ed25519/0x3A528DDE952C7E93 2021-01-09
           7531BB84FAF0BF35960C63B93A528DDE952C7E93
@@ -16,10 +13,26 @@ that you retrieved trusted and untampered software. There are two options:
     $ gpg --auto-key-locate dane --locate-keys goredo at cypherpunks dot su
     $ gpg --auto-key-locate  wkd --locate-keys goredo at cypherpunks dot su
 
-=> https://www.openssh.com/ OpenSSH .sig signature\r
-    => PUBKEY-SSH.pub Public key\r
-    => PUBKEY-SSH.pub.asc, its LibrePGP signature\r
-    Its fingerprint: SHA256:ddOaswnUBtNbuoEBYQtfcF59sR3Bvzo9pIfSlw9sKx8.
+=> https://www.openssh.com/ OpenSSH\r
+    .sig ed25519 signature.
+    => PUBKEY-SSH.pub public key\r
+    => PUBKEY-SSH.pub.asc its LibrePGP signature\r
+    Fingerprint: SHA256:ddOaswnUBtNbuoEBYQtfcF59sR3Bvzo9pIfSlw9sKx8
 
     $ ssh-keygen -Y verify -f PUBKEY-SSH.pub -I goredo@cypherpunks.su -n file \
         -s goredo-$v.tar.zst.sig <goredo-$v.tar.zst
+
+=> https://datatracker.ietf.org/doc/html/rfc5854.html Metalink4\r
+.meta4 file contains both LibrePGP and OpenSSH signatures.
+
+=> http://www.keks.cypherpunks.su/cm/index.html KEKS/CM\r
+    .cm quantum resistant SLH-DSA signature.
+    => PUBKEY-CM.pub public key\r
+    => PUBKEY-CM.pub.asc its LibrePGP signature\r
+
+    $ fpr=$(kekspp -v -p /data/id <PUBKEY-CM.pub)
+    $ echo $fpr
+    DB81E5A01871AA5715DD1AEBC2E712D8D31EAA088F3030427CAEF8CDEC9D15E1
+    $ mkdir -p pubs
+    $ ln -s ../PUBKEY-CM.pub pubs/$fpr
+    $ cat goredo-$v.tar.zst.cm goredo-$v.tar.zst | cmsigtool -v -d -pubs pubs

diff --git a/makedist b/makedist
index ca43412c6d26ece80619be73fe9582ee3c429282..0d9addcc306e97c9a2975657ff239765f4759771 100755 (executable)
--- a/makedist
+++ b/makedist
@@ -45,15 +45,16 @@ find t -name wrapper.rc -exec chmod +x {} +
 chmod +x t/apenwarr/sleep t/goredo-*.t
 
 cd ..
-detpax goredo-"$release" >goredo-"$release".tar
-zstd -22 --ultra -v goredo-"$release".tar
+detpax goredo-$release >goredo-$release.tar
+zstd -22 --ultra -v goredo-$release.tar
 tarball=goredo-"$release".tar.zst
 ssh-keygen -Y sign -f ~/.ssh/sign/goredo@cypherpunks.su -n file $tarball
-gpg --armor --detach-sign --sign --local-user 3A528DDE952C7E93 "$tarball"
-meta4ra-create -fn "$tarball" -mtime "$tarball" \
-    -sig-pgp "$tarball".asc -sig-ssh "$tarball".sig \
-    http://www.goredo.cypherpunks.su/download/"$tarball" \
-    http://y.www.goredo.cypherpunks.su/download/"$tarball" <"$tarball" >"$tarball".meta4
+gpg --armor --detach-sign --sign --local-user 3A528DDE952C7E93 $tarball
+meta4ra-create -fn $tarball -mtime $tarball \
+    -sig-pgp $tarball.asc -sig-ssh $tarball.sig \
+    http://www.goredo.cypherpunks.su/download/$tarball \
+    http://y.www.goredo.cypherpunks.su/download/$tarball <$tarball >$tarball.meta4
+cmsigtool -d ~/.cm/sign/goredo@cypherpunks.su.pub <$tarball >$tarball.cm
 
 size=$(( $(stat -f %z $tarball) / 1024 ))
 release_date=$(date "+%Y-%m-%d")
@@ -65,9 +66,16 @@ Release [NEWS]#$release | $release_date | $size KiB
     => download/$tarball tar
     => download/$tarball.asc pgp
     => download/$tarball.sig ssh
+    => download/$tarball.cm cm
 EOF
 
-mv $tmp/$tarball $tmp/"$tarball".asc $tmp/"$tarball".sig $tarball.meta4 $cur/doc/goredo.html/download
+mv \
+    $tmp/$tarball \
+    $tmp/"$tarball".asc \
+    $tmp/"$tarball".sig \
+    $tmp/"$tarball".cm \
+    $tarball.meta4 \
+    $cur/doc/goredo.html/download
 
 cat <<EOF
 Subject: goredo $release release announcement
@@ -88,12 +96,13 @@ goredo's home page is: http://www.goredo.cypherpunks.su/
 
 Source code and its signature for that version can be found here:
 
-    http://www.goredo.cypherpunks.su/download/goredo-${release}.tar.zst ($size KiB)
-    http://www.goredo.cypherpunks.su/download/goredo-${release}.tar.zst.{asc,sig}
+    http://www.goredo.cypherpunks.su/download/goredo-$release.tar.zst ($size KiB)
+    http://www.goredo.cypherpunks.su/download/goredo-$release.tar.zst.{asc,sig,cm}
 
 OpenPGP key: 7531 BB84 FAF0 BF35 960C  63B9 3A52 8DDE 952C 7E93
              goredo releases <goredo@cypherpunks.su>
 OpenSSH key: SHA256:ddOaswnUBtNbuoEBYQtfcF59sR3Bvzo9pIfSlw9sKx8
+KEKS/CM key: DB81E5A01871AA5715DD1AEBC2E712D8D31EAA088F3030427CAEF8CDEC9D15E1
 
 Please send questions regarding the use of goredo, bug reports and patches
 to mailing list: http://lists.cypherpunks.su/goredo-devel.html
@@ -101,4 +110,4 @@ EOF
 
 echo mutt -s \"goredo $release release announcement\" \
     goredo-devel@lists.cypherpunks.su \
-    -a $cur/doc/goredo.html/download/"$tarball".meta4
+    -a $cur/doc/goredo.html/download/$tarball.meta4