From: Sergey Matveev <stargrave@stargrave.org>
Date: Fri, 16 Jan 2026 11:34:41 +0000 (+0300)
Subject: KEKS/CM PQ tarball signatures
X-Git-Tag: v2.9.0~4
X-Git-Url: http://www.git.cypherpunks.su/?a=commitdiff_plain;h=fd7efd03f47193d783817690d7c6838275a45763;p=goredo.git

KEKS/CM PQ tarball signatures
---

diff --git a/PUBKEY-CM.pub b/PUBKEY-CM.pub
new file mode 100644
index 0000000..e0fde1d
Binary files /dev/null and b/PUBKEY-CM.pub differ
diff --git a/PUBKEY-CM.pub.asc b/PUBKEY-CM.pub.asc
new file mode 100644
index 0000000..740f621
--- /dev/null
+++ b/PUBKEY-CM.pub.asc
@@ -0,0 +1,8 @@
+-----BEGIN PGP SIGNATURE-----
+
+iJEEABYKADkWIQTbL/jtRAp+lJhvt3bSI36ECQhstwUCaWoLGhsUgAAAAAAEAA5t
+YW51MiwyLjUrMS4xMSwyLDMACgkQ0iN+hAkIbLeXkgEA70EvEKnWXVLPQoob9FQx
+wBvTZyAWwcp8Zl0MiaIDFGwA/RRD2dhHp4bvg7Ogu5ySVM9GQNhEdCytTtb5Wj+q
+km8B
+=kuKf
+-----END PGP SIGNATURE-----
diff --git a/doc/Download b/doc/Download
index 608ce9d..8770253 100644
--- a/doc/Download
+++ b/doc/Download
@@ -3,321 +3,375 @@ Release [NEWS]#2.8.0 | 2025-12-16 | 479 KiB
     => download/goredo-2.8.0.tar.zst tar
     => download/goredo-2.8.0.tar.zst.asc pgp
     => download/goredo-2.8.0.tar.zst.sig ssh
+    => download/goredo-2.8.0.tar.zst.cm cm
 
 Release [NEWS]#2.6.5 | 2025-10-26 | 478 KiB
     => download/goredo-2.6.5.tar.zst.meta4 meta4
     => download/goredo-2.6.5.tar.zst tar
     => download/goredo-2.6.5.tar.zst.asc pgp
     => download/goredo-2.6.5.tar.zst.sig ssh
+    => download/goredo-2.6.5.tar.zst.cm cm
 
 Release [NEWS]#2.6.4 | 2025-01-04 | 471 KiB
     => download/goredo-2.6.4.tar.zst.meta4 meta4
     => download/goredo-2.6.4.tar.zst tar
     => download/goredo-2.6.4.tar.zst.asc pgp
     => download/goredo-2.6.4.tar.zst.sig ssh
+    => download/goredo-2.6.4.tar.zst.cm cm
 
 Release [NEWS]#2.6.3 | 2024-11-24 | 471 KiB
     => download/goredo-2.6.3.tar.zst.meta4 meta4
     => download/goredo-2.6.3.tar.zst tar
     => download/goredo-2.6.3.tar.zst.asc pgp
     => download/goredo-2.6.3.tar.zst.sig ssh
+    => download/goredo-2.6.3.tar.zst.cm cm
 
 Release [NEWS]#2.6.2 | 2024-02-29 | 455 KiB
     => download/goredo-2.6.2.tar.zst.meta4 meta4
     => download/goredo-2.6.2.tar.zst tar
     => download/goredo-2.6.2.tar.zst.asc pgp
     => download/goredo-2.6.2.tar.zst.sig ssh
+    => download/goredo-2.6.2.tar.zst.cm cm
 
 Release [NEWS]#2.6.1 | 2024-02-19 | 455 KiB
     => download/goredo-2.6.1.tar.zst.meta4 meta4
     => download/goredo-2.6.1.tar.zst tar
     => download/goredo-2.6.1.tar.zst.asc pgp
     => download/goredo-2.6.1.tar.zst.sig ssh
+    => download/goredo-2.6.1.tar.zst.cm cm
 
 Release [NEWS]#2.6.0 | 2023-12-19 | 455 KiB
     => download/goredo-2.6.0.tar.zst.meta4 meta4
     => download/goredo-2.6.0.tar.zst tar
     => download/goredo-2.6.0.tar.zst.asc pgp
     => download/goredo-2.6.0.tar.zst.sig ssh
+    => download/goredo-2.6.0.tar.zst.cm cm
 
 Release [NEWS]#2.5.0 | 2023-11-26 | 455 KiB
     => download/goredo-2.5.0.tar.zst.meta4 meta4
     => download/goredo-2.5.0.tar.zst tar
     => download/goredo-2.5.0.tar.zst.asc pgp
     => download/goredo-2.5.0.tar.zst.sig ssh
+    => download/goredo-2.5.0.tar.zst.cm cm
 
 Release [NEWS]#2.4.0 | 2023-11-17 | 455 KiB
     => download/goredo-2.4.0.tar.zst.meta4 meta4
     => download/goredo-2.4.0.tar.zst tar
     => download/goredo-2.4.0.tar.zst.asc pgp
     => download/goredo-2.4.0.tar.zst.sig ssh
+    => download/goredo-2.4.0.tar.zst.cm cm
 
 Release [NEWS]#2.3.0 | 2023-11-11 | 455 KiB
     => download/goredo-2.3.0.tar.zst.meta4 meta4
     => download/goredo-2.3.0.tar.zst tar
     => download/goredo-2.3.0.tar.zst.asc pgp
     => download/goredo-2.3.0.tar.zst.sig ssh
+    => download/goredo-2.3.0.tar.zst.cm cm
 
 Release [NEWS]#2.2.0 | 2023-10-16 | 455 KiB
     => download/goredo-2.2.0.tar.zst.meta4 meta4
     => download/goredo-2.2.0.tar.zst tar
     => download/goredo-2.2.0.tar.zst.asc pgp
     => download/goredo-2.2.0.tar.zst.sig ssh
+    => download/goredo-2.2.0.tar.zst.cm cm
 
 Release [NEWS]#2.1.0 | 2023-10-09 | 455 KiB
     => download/goredo-2.1.0.tar.zst.meta4 meta4
     => download/goredo-2.1.0.tar.zst tar
     => download/goredo-2.1.0.tar.zst.asc pgp
     => download/goredo-2.1.0.tar.zst.sig ssh
+    => download/goredo-2.1.0.tar.zst.cm cm
 
 Release [NEWS]#2.0.0 | 2023-10-08 | 455 KiB
     => download/goredo-2.0.0.tar.zst.meta4 meta4
     => download/goredo-2.0.0.tar.zst tar
     => download/goredo-2.0.0.tar.zst.asc pgp
     => download/goredo-2.0.0.tar.zst.sig ssh
+    => download/goredo-2.0.0.tar.zst.cm cm
 
 Release [NEWS]#1.32.0 | 2023-09-25 | 439 KiB
     => download/goredo-1.32.0.tar.zst.meta4 meta4
     => download/goredo-1.32.0.tar.zst tar
     => download/goredo-1.32.0.tar.zst.asc pgp
     => download/goredo-1.32.0.tar.zst.sig ssh
+    => download/goredo-1.32.0.tar.zst.cm cm
 
 Release [NEWS]#1.31.0 | 2023-09-23 | 439 KiB
     => download/goredo-1.31.0.tar.zst.meta4 meta4
     => download/goredo-1.31.0.tar.zst tar
     => download/goredo-1.31.0.tar.zst.asc pgp
     => download/goredo-1.31.0.tar.zst.sig ssh
+    => download/goredo-1.31.0.tar.zst.cm cm
 
 Release [NEWS]#1.30.0 | 2023-01-18 | 431 KiB
     => download/goredo-1.30.0.tar.zst.meta4 meta4
     => download/goredo-1.30.0.tar.zst tar
     => download/goredo-1.30.0.tar.zst.asc pgp
     => download/goredo-1.30.0.tar.zst.sig ssh
+    => download/goredo-1.30.0.tar.zst.cm cm
 
 Release [NEWS]#1.29.0 | 2023-01-17 | 431 KiB
     => download/goredo-1.29.0.tar.zst.meta4 meta4
     => download/goredo-1.29.0.tar.zst tar
     => download/goredo-1.29.0.tar.zst.asc pgp
     => download/goredo-1.29.0.tar.zst.sig ssh
+    => download/goredo-1.29.0.tar.zst.cm cm
 
 Release [NEWS]#1.28.0 | 2022-11-14 | 429 KiB
     => download/goredo-1.28.0.tar.zst.meta4 meta4
     => download/goredo-1.28.0.tar.zst tar
     => download/goredo-1.28.0.tar.zst.asc pgp
     => download/goredo-1.28.0.tar.zst.sig ssh
+    => download/goredo-1.28.0.tar.zst.cm cm
 
 Release [NEWS]#1.27.1 | 2022-09-09 | 424 KiB
     => download/goredo-1.27.1.tar.zst.meta4 meta4
     => download/goredo-1.27.1.tar.zst tar
     => download/goredo-1.27.1.tar.zst.asc pgp
     => download/goredo-1.27.1.tar.zst.sig ssh
+    => download/goredo-1.27.1.tar.zst.cm cm
 
 Release [NEWS]#1.27.0 | 2022-08-28 | 424 KiB
     => download/goredo-1.27.0.tar.zst.meta4 meta4
     => download/goredo-1.27.0.tar.zst tar
     => download/goredo-1.27.0.tar.zst.asc pgp
     => download/goredo-1.27.0.tar.zst.sig ssh
+    => download/goredo-1.27.0.tar.zst.cm cm
 
 Release [NEWS]#1.26.0 | 2022-08-26 | 424 KiB
     => download/goredo-1.26.0.tar.zst.meta4 meta4
     => download/goredo-1.26.0.tar.zst tar
     => download/goredo-1.26.0.tar.zst.asc pgp
     => download/goredo-1.26.0.tar.zst.sig ssh
+    => download/goredo-1.26.0.tar.zst.cm cm
 
 Release [NEWS]#1.25.0 | 2022-05-08 | 402 KiB
     => download/goredo-1.25.0.tar.zst.meta4 meta4
     => download/goredo-1.25.0.tar.zst tar
     => download/goredo-1.25.0.tar.zst.asc pgp
     => download/goredo-1.25.0.tar.zst.sig ssh
+    => download/goredo-1.25.0.tar.zst.cm cm
 
 Release [NEWS]#1.24.0 | 2022-03-01 | 401 KiB
     => download/goredo-1.24.0.tar.zst.meta4 meta4
     => download/goredo-1.24.0.tar.zst tar
     => download/goredo-1.24.0.tar.zst.asc pgp
     => download/goredo-1.24.0.tar.zst.sig ssh
+    => download/goredo-1.24.0.tar.zst.cm cm
 
 Release [NEWS]#1.23.0 | 2022-02-23 | 401 KiB
     => download/goredo-1.23.0.tar.zst.meta4 meta4
     => download/goredo-1.23.0.tar.zst tar
     => download/goredo-1.23.0.tar.zst.asc pgp
     => download/goredo-1.23.0.tar.zst.sig ssh
+    => download/goredo-1.23.0.tar.zst.cm cm
 
 Release [NEWS]#1.22.0 | 2022-01-26 | 388 KiB
     => download/goredo-1.22.0.tar.zst.meta4 meta4
     => download/goredo-1.22.0.tar.zst tar
     => download/goredo-1.22.0.tar.zst.asc pgp
     => download/goredo-1.22.0.tar.zst.sig ssh
+    => download/goredo-1.22.0.tar.zst.cm cm
 
 Release [NEWS]#1.21.0 | 2021-11-20 | 387 KiB
     => download/goredo-1.21.0.tar.zst.meta4 meta4
     => download/goredo-1.21.0.tar.zst tar
     => download/goredo-1.21.0.tar.zst.asc pgp
     => download/goredo-1.21.0.tar.zst.sig ssh
+    => download/goredo-1.21.0.tar.zst.cm cm
 
 Release [NEWS]#1.20.0 | 2021-11-19 | 385 KiB
     => download/goredo-1.20.0.tar.zst.meta4 meta4
     => download/goredo-1.20.0.tar.zst tar
     => download/goredo-1.20.0.tar.zst.asc pgp
     => download/goredo-1.20.0.tar.zst.sig ssh
+    => download/goredo-1.20.0.tar.zst.cm cm
 
 Release [NEWS]#1.19.0 | 2021-11-09 | 385 KiB
     => download/goredo-1.19.0.tar.zst.meta4 meta4
     => download/goredo-1.19.0.tar.zst tar
     => download/goredo-1.19.0.tar.zst.asc pgp
     => download/goredo-1.19.0.tar.zst.sig ssh
+    => download/goredo-1.19.0.tar.zst.cm cm
 
 Release [NEWS]#1.18.0 | 2021-10-27 | 388 KiB
     => download/goredo-1.18.0.tar.zst.meta4 meta4
     => download/goredo-1.18.0.tar.zst tar
     => download/goredo-1.18.0.tar.zst.asc pgp
     => download/goredo-1.18.0.tar.zst.sig ssh
+    => download/goredo-1.18.0.tar.zst.cm cm
 
 Release [NEWS]#1.17.0 | 2021-10-19 | 387 KiB
     => download/goredo-1.17.0.tar.zst.meta4 meta4
     => download/goredo-1.17.0.tar.zst tar
     => download/goredo-1.17.0.tar.zst.asc pgp
     => download/goredo-1.17.0.tar.zst.sig ssh
+    => download/goredo-1.17.0.tar.zst.cm cm
 
 Release [NEWS]#1.16.0 | 2021-10-14 | 387 KiB
     => download/goredo-1.16.0.tar.zst.meta4 meta4
     => download/goredo-1.16.0.tar.zst tar
     => download/goredo-1.16.0.tar.zst.asc pgp
     => download/goredo-1.16.0.tar.zst.sig ssh
+    => download/goredo-1.16.0.tar.zst.cm cm
 
 Release [NEWS]#1.15.0 | 2021-09-30 | 392 KiB
     => download/goredo-1.15.0.tar.zst.meta4 meta4
     => download/goredo-1.15.0.tar.zst tar
     => download/goredo-1.15.0.tar.zst.asc pgp
     => download/goredo-1.15.0.tar.zst.sig ssh
+    => download/goredo-1.15.0.tar.zst.cm cm
 
 Release [NEWS]#1.14.0 | 2021-09-15 | 392 KiB
     => download/goredo-1.14.0.tar.zst.meta4 meta4
     => download/goredo-1.14.0.tar.zst tar
     => download/goredo-1.14.0.tar.zst.asc pgp
     => download/goredo-1.14.0.tar.zst.sig ssh
+    => download/goredo-1.14.0.tar.zst.cm cm
 
 Release [NEWS]#1.13.0 | 2021-08-06 | 392 KiB
     => download/goredo-1.13.0.tar.zst.meta4 meta4
     => download/goredo-1.13.0.tar.zst tar
     => download/goredo-1.13.0.tar.zst.asc pgp
     => download/goredo-1.13.0.tar.zst.sig ssh
+    => download/goredo-1.13.0.tar.zst.cm cm
 
 Release [NEWS]#1.12.0 | 2021-08-01 | 392 KiB
     => download/goredo-1.12.0.tar.zst.meta4 meta4
     => download/goredo-1.12.0.tar.zst tar
     => download/goredo-1.12.0.tar.zst.asc pgp
     => download/goredo-1.12.0.tar.zst.sig ssh
+    => download/goredo-1.12.0.tar.zst.cm cm
 
 Release [NEWS]#1.11.0 | 2021-08-01 | 392 KiB
     => download/goredo-1.11.0.tar.zst.meta4 meta4
     => download/goredo-1.11.0.tar.zst tar
     => download/goredo-1.11.0.tar.zst.asc pgp
     => download/goredo-1.11.0.tar.zst.sig ssh
+    => download/goredo-1.11.0.tar.zst.cm cm
 
 Release [NEWS]#1.10.0 | 2021-08-01 | 392 KiB
     => download/goredo-1.10.0.tar.zst.meta4 meta4
     => download/goredo-1.10.0.tar.zst tar
     => download/goredo-1.10.0.tar.zst.asc pgp
     => download/goredo-1.10.0.tar.zst.sig ssh
+    => download/goredo-1.10.0.tar.zst.cm cm
 
 Release [NEWS]#1.9.0 | 2021-07-31 | 392 KiB
     => download/goredo-1.9.0.tar.zst.meta4 meta4
     => download/goredo-1.9.0.tar.zst tar
     => download/goredo-1.9.0.tar.zst.asc pgp
     => download/goredo-1.9.0.tar.zst.sig ssh
+    => download/goredo-1.9.0.tar.zst.cm cm
 
 Release [NEWS]#1.8.0 | 2021-07-02 | 389 KiB
     => download/goredo-1.8.0.tar.zst.meta4 meta4
     => download/goredo-1.8.0.tar.zst tar
     => download/goredo-1.8.0.tar.zst.asc pgp
     => download/goredo-1.8.0.tar.zst.sig ssh
+    => download/goredo-1.8.0.tar.zst.cm cm
 
 Release [NEWS]#1.7.0 | 2021-06-23 | 389 KiB
     => download/goredo-1.7.0.tar.zst.meta4 meta4
     => download/goredo-1.7.0.tar.zst tar
     => download/goredo-1.7.0.tar.zst.asc pgp
     => download/goredo-1.7.0.tar.zst.sig ssh
+    => download/goredo-1.7.0.tar.zst.cm cm
 
 Release [NEWS]#1.6.0 | 2021-06-22 | 387 KiB
     => download/goredo-1.6.0.tar.zst.meta4 meta4
     => download/goredo-1.6.0.tar.zst tar
     => download/goredo-1.6.0.tar.zst.asc pgp
     => download/goredo-1.6.0.tar.zst.sig ssh
+    => download/goredo-1.6.0.tar.zst.cm cm
 
 Release [NEWS]#1.5.0 | 2021-06-21 | 387 KiB
     => download/goredo-1.5.0.tar.zst.meta4 meta4
     => download/goredo-1.5.0.tar.zst tar
     => download/goredo-1.5.0.tar.zst.asc pgp
     => download/goredo-1.5.0.tar.zst.sig ssh
+    => download/goredo-1.5.0.tar.zst.cm cm
 
 Release [NEWS]#1.4.1 | 2021-04-29 | 383 KiB
     => download/goredo-1.4.1.tar.zst.meta4 meta4
     => download/goredo-1.4.1.tar.zst tar
     => download/goredo-1.4.1.tar.zst.asc pgp
     => download/goredo-1.4.1.tar.zst.sig ssh
+    => download/goredo-1.4.1.tar.zst.cm cm
 
 Release [NEWS]#1.4.0 | 2021-04-29 | 383 KiB
     => download/goredo-1.4.0.tar.zst.meta4 meta4
     => download/goredo-1.4.0.tar.zst tar
     => download/goredo-1.4.0.tar.zst.asc pgp
     => download/goredo-1.4.0.tar.zst.sig ssh
+    => download/goredo-1.4.0.tar.zst.cm cm
 
 Release [NEWS]#1.3.0 | 2021-02-15 | 339 KiB
     => download/goredo-1.3.0.tar.zst.meta4 meta4
     => download/goredo-1.3.0.tar.zst tar
     => download/goredo-1.3.0.tar.zst.asc pgp
     => download/goredo-1.3.0.tar.zst.sig ssh
+    => download/goredo-1.3.0.tar.zst.cm cm
 
 Release [NEWS]#1.2.0 | 2021-01-29 | 338 KiB
     => download/goredo-1.2.0.tar.zst.meta4 meta4
     => download/goredo-1.2.0.tar.zst tar
     => download/goredo-1.2.0.tar.zst.asc pgp
     => download/goredo-1.2.0.tar.zst.sig ssh
+    => download/goredo-1.2.0.tar.zst.cm cm
 
 Release [NEWS]#1.1.0 | 2021-01-24 | 338 KiB
     => download/goredo-1.1.0.tar.zst.meta4 meta4
     => download/goredo-1.1.0.tar.zst tar
     => download/goredo-1.1.0.tar.zst.asc pgp
     => download/goredo-1.1.0.tar.zst.sig ssh
+    => download/goredo-1.1.0.tar.zst.cm cm
 
 Release [NEWS]#1.0.0 | 2021-01-16 | 338 KiB
     => download/goredo-1.0.0.tar.zst.meta4 meta4
     => download/goredo-1.0.0.tar.zst tar
     => download/goredo-1.0.0.tar.zst.asc pgp
     => download/goredo-1.0.0.tar.zst.sig ssh
+    => download/goredo-1.0.0.tar.zst.cm cm
 
 Release [NEWS]#0.12.3 | 2021-01-13 | 336 KiB
     => download/goredo-0.12.3.tar.zst.meta4 meta4
     => download/goredo-0.12.3.tar.zst tar
     => download/goredo-0.12.3.tar.zst.asc pgp
     => download/goredo-0.12.3.tar.zst.sig ssh
+    => download/goredo-0.12.3.tar.zst.cm cm
 
 Release [NEWS]#0.12.2 | 2021-01-13 | 336 KiB
     => download/goredo-0.12.2.tar.zst.meta4 meta4
     => download/goredo-0.12.2.tar.zst tar
     => download/goredo-0.12.2.tar.zst.asc pgp
     => download/goredo-0.12.2.tar.zst.sig ssh
+    => download/goredo-0.12.2.tar.zst.cm cm
 
 Release [NEWS]#0.12.1 | 2021-01-13 | 336 KiB
     => download/goredo-0.12.1.tar.zst.meta4 meta4
     => download/goredo-0.12.1.tar.zst tar
     => download/goredo-0.12.1.tar.zst.asc pgp
     => download/goredo-0.12.1.tar.zst.sig ssh
+    => download/goredo-0.12.1.tar.zst.cm cm
 
 Release [NEWS]#0.12.0 | 2021-01-12 | 379 KiB
     => download/goredo-0.12.0.tar.zst.meta4 meta4
     => download/goredo-0.12.0.tar.zst tar
     => download/goredo-0.12.0.tar.zst.asc pgp
     => download/goredo-0.12.0.tar.zst.sig ssh
+    => download/goredo-0.12.0.tar.zst.cm cm
 
 Release [NEWS]#0.11.0 | 2021-01-10 | 379 KiB
     => download/goredo-0.11.0.tar.zst.meta4 meta4
     => download/goredo-0.11.0.tar.zst tar
     => download/goredo-0.11.0.tar.zst.asc pgp
     => download/goredo-0.11.0.tar.zst.sig ssh
+    => download/goredo-0.11.0.tar.zst.cm cm
 
 Release [NEWS]#0.10.0 | 2021-01-09 | 436 KiB
     => download/goredo-0.10.0.tar.zst.meta4 meta4
     => download/goredo-0.10.0.tar.zst tar
     => download/goredo-0.10.0.tar.zst.asc pgp
     => download/goredo-0.10.0.tar.zst.sig ssh
+    => download/goredo-0.10.0.tar.zst.cm cm
diff --git a/doc/INSTALL b/doc/INSTALL
index 27d79b2..9b26ded 100644
--- a/doc/INSTALL
+++ b/doc/INSTALL
@@ -13,7 +13,7 @@ Preferable way is to [Download] tarball with the signature from website:
 
     $ v=2.8.0
     $ [fetch|wget] http://www.goredo.cypherpunks.su/download/goredo-$v.tar.zst
-    $ [fetch|wget] http://www.goredo.cypherpunks.su/download/goredo-$v.tar.zst.{asc,sig}
+    $ [fetch|wget] http://www.goredo.cypherpunks.su/download/goredo-$v.tar.zst.{asc,sig,cm}
     [Integrity] verify
     $ zstd -d <goredo-$v.tar.zst | tar xf -
     $ cd goredo-$v/src
diff --git a/doc/Integrity b/doc/Integrity
index 04b041c..6e1fd33 100644
--- a/doc/Integrity
+++ b/doc/Integrity
@@ -1,13 +1,10 @@
-You *have to* verify downloaded tarballs authenticity to be sure
-that you retrieved trusted and untampered software. There are two options:
-
-=> https://librepgp.org/ LibrePGP .asc signature
-    Use GNU Privacy Guard free software implementation.
-    For the very first time it is necessary to get signing public key and
-    import it. It is provided in PUBKEY-PGP.asc}, but you should check
-    alternate resources.
+You *have to* verify downloaded tarballs authenticity to be sure that
+you retrieved trusted and untampered software. There are three options:
+
+=> https://librepgp.org/ LibrePGP
+    .asc ed25519 signature.
     => https://www.gnupg.org/ GNU Privacy Guard
-    => PUBKEY-PGP.asc
+    => PUBKEY-PGP.asc public key
 
     pub   ed25519/0x3A528DDE952C7E93 2021-01-09
           7531BB84FAF0BF35960C63B93A528DDE952C7E93
@@ -16,10 +13,26 @@ that you retrieved trusted and untampered software. There are two options:
     $ gpg --auto-key-locate dane --locate-keys goredo at cypherpunks dot su
     $ gpg --auto-key-locate  wkd --locate-keys goredo at cypherpunks dot su
 
-=> https://www.openssh.com/ OpenSSH .sig signature
-    => PUBKEY-SSH.pub Public key
-    => PUBKEY-SSH.pub.asc, its LibrePGP signature
-    Its fingerprint: SHA256:ddOaswnUBtNbuoEBYQtfcF59sR3Bvzo9pIfSlw9sKx8.
+=> https://www.openssh.com/ OpenSSH
+    .sig ed25519 signature.
+    => PUBKEY-SSH.pub public key
+    => PUBKEY-SSH.pub.asc its LibrePGP signature
+    Fingerprint: SHA256:ddOaswnUBtNbuoEBYQtfcF59sR3Bvzo9pIfSlw9sKx8
 
     $ ssh-keygen -Y verify -f PUBKEY-SSH.pub -I goredo@cypherpunks.su -n file \
         -s goredo-$v.tar.zst.sig <goredo-$v.tar.zst
+
+=> https://datatracker.ietf.org/doc/html/rfc5854.html Metalink4
+.meta4 file contains both LibrePGP and OpenSSH signatures.
+
+=> http://www.keks.cypherpunks.su/cm/index.html KEKS/CM
+    .cm quantum resistant SLH-DSA signature.
+    => PUBKEY-CM.pub public key
+    => PUBKEY-CM.pub.asc its LibrePGP signature
+
+    $ fpr=$(kekspp -v -p /data/id <PUBKEY-CM.pub)
+    $ echo $fpr
+    DB81E5A01871AA5715DD1AEBC2E712D8D31EAA088F3030427CAEF8CDEC9D15E1
+    $ mkdir -p pubs
+    $ ln -s ../PUBKEY-CM.pub pubs/$fpr
+    $ cat goredo-$v.tar.zst.cm goredo-$v.tar.zst | cmsigtool -v -d -pubs pubs
diff --git a/makedist b/makedist
index ca43412..0d9addc 100755
--- a/makedist
+++ b/makedist
@@ -45,15 +45,16 @@ find t -name wrapper.rc -exec chmod +x {} +
 chmod +x t/apenwarr/sleep t/goredo-*.t
 
 cd ..
-detpax goredo-"$release" >goredo-"$release".tar
-zstd -22 --ultra -v goredo-"$release".tar
+detpax goredo-$release >goredo-$release.tar
+zstd -22 --ultra -v goredo-$release.tar
 tarball=goredo-"$release".tar.zst
 ssh-keygen -Y sign -f ~/.ssh/sign/goredo@cypherpunks.su -n file $tarball
-gpg --armor --detach-sign --sign --local-user 3A528DDE952C7E93 "$tarball"
-meta4ra-create -fn "$tarball" -mtime "$tarball" \
-    -sig-pgp "$tarball".asc -sig-ssh "$tarball".sig \
-    http://www.goredo.cypherpunks.su/download/"$tarball" \
-    http://y.www.goredo.cypherpunks.su/download/"$tarball" <"$tarball" >"$tarball".meta4
+gpg --armor --detach-sign --sign --local-user 3A528DDE952C7E93 $tarball
+meta4ra-create -fn $tarball -mtime $tarball \
+    -sig-pgp $tarball.asc -sig-ssh $tarball.sig \
+    http://www.goredo.cypherpunks.su/download/$tarball \
+    http://y.www.goredo.cypherpunks.su/download/$tarball <$tarball >$tarball.meta4
+cmsigtool -d ~/.cm/sign/goredo@cypherpunks.su.pub <$tarball >$tarball.cm
 
 size=$(( $(stat -f %z $tarball) / 1024 ))
 release_date=$(date "+%Y-%m-%d")
@@ -65,9 +66,16 @@ Release [NEWS]#$release | $release_date | $size KiB
     => download/$tarball tar
     => download/$tarball.asc pgp
     => download/$tarball.sig ssh
+    => download/$tarball.cm cm
 EOF
 
-mv $tmp/$tarball $tmp/"$tarball".asc $tmp/"$tarball".sig $tarball.meta4 $cur/doc/goredo.html/download
+mv \
+    $tmp/$tarball \
+    $tmp/"$tarball".asc \
+    $tmp/"$tarball".sig \
+    $tmp/"$tarball".cm \
+    $tarball.meta4 \
+    $cur/doc/goredo.html/download
 
 cat <<EOF
 Subject: goredo $release release announcement
@@ -88,12 +96,13 @@ goredo's home page is: http://www.goredo.cypherpunks.su/
 
 Source code and its signature for that version can be found here:
 
-    http://www.goredo.cypherpunks.su/download/goredo-${release}.tar.zst ($size KiB)
-    http://www.goredo.cypherpunks.su/download/goredo-${release}.tar.zst.{asc,sig}
+    http://www.goredo.cypherpunks.su/download/goredo-$release.tar.zst ($size KiB)
+    http://www.goredo.cypherpunks.su/download/goredo-$release.tar.zst.{asc,sig,cm}
 
 OpenPGP key: 7531 BB84 FAF0 BF35 960C  63B9 3A52 8DDE 952C 7E93
              goredo releases <goredo@cypherpunks.su>
 OpenSSH key: SHA256:ddOaswnUBtNbuoEBYQtfcF59sR3Bvzo9pIfSlw9sKx8
+KEKS/CM key: DB81E5A01871AA5715DD1AEBC2E712D8D31EAA088F3030427CAEF8CDEC9D15E1
 
 Please send questions regarding the use of goredo, bug reports and patches
 to mailing list: http://lists.cypherpunks.su/goredo-devel.html
@@ -101,4 +110,4 @@ EOF
 
 echo mutt -s \"goredo $release release announcement\" \
     goredo-devel@lists.cypherpunks.su \
-    -a $cur/doc/goredo.html/download/"$tarball".meta4
+    -a $cur/doc/goredo.html/download/$tarball.meta4