Download Shareware and Freeware Software for Windows, Linux, Macintosh, PDA

line Home  |  About Us  |  Link To Us  |  FAQ  |  Contact

Serving Software Downloads in 976 Categories, Downloaded 29.875.304 Times

sign 1.0.7

  Date Added: August 07, 2010  |  Visits: 620

sign

Report Broken Link
Printer Friendly Version


Product Homepage
Download (73 downloads)



sign is a file signing and signature verification utility. Its main purpose is to be a simple and convenient extension to a tar/gz/bzip2 line of tools to check file integrity and authenticity. Its small and simple, it does just one thing and hopefully does it well. I needed a tool to digitally sign a bunch of .tar.gz and to allow recepients of the files to easily check, unzip, untar and start enjoying the content as quickly and painlessly as possible. There are OpenSSL, GnuPG, PGP and others and they are of course perfectly capable of file signing. OpenSSL is probably the most widely spread one and best suited for the role of being a universal signing utility. However the state of affairs is such that OpenSSL as an application is not really used for anything more than generating tarball MD5 hashes. The other packages are plain big and complex for a simple task of file integrity checking. Its like getting a professional sound editing suite instead of a dead-simple .mp3 player. The larger crypto-packages also tend to lack modularity in a sense that to get file signing working I would need to configure a handful of core, but otherwise unrelated settings first. Besides if I am not going to use anything but a signing code, the rest will be sitting there collecting dust, creating untrivial shared libraries dependencies and a general feeling of a wasted disk space. First of all, sign is a file processing tool, it reads from the files (including stdin) and writes to the files (including stdout). It can be used to attach signatures to the files or to verify and/or strip them. Between signing and verifying latter will account for a bulk of usage. When checking the signature, sign will check for both integrity and authenticity of the file. An integrity check is done by validating SHA-1 hash embedded into the signature, and an authenticity is ensured by checking signers credentials against a trusted list. sign adopts OpenSSH-style authentication model, where the trust hierarchy is flat (no certificates), an authentication is done with public keys and the list of trusted keys is grown gradually on as-needed basis. Every trusted key is associated with a file name prefix called the title. The key can be trusted for signing files, whose name start with keys title. The same key may be associated with more than one title, but not vice versa. The signature is appended at the end of the file and it carries three bits of information - the title, the public key of the signer and the hash of all preceeding data encrypted with signers private key. The verification is performed as follows: The filename is checked to start with a title The hash is decrypted using the public key The hash is compared to the locally computed value (this ensures integrity) The title is looked up locally; if its known and associated public key is the same as in the signature, the file is deemed authentic. Otherwise if the title is known, but the key is different, the file is considered to be signed by untrusted, impersonating party and the check fails. And lastly, if the title is unknown, the authenticity of the file cannot be established. The user is provided with public key fingerprint, which should be manually authenticated. Then the title and the key are added to the trusted list; and subsequent signatures from the this signer for this particular title will be cleared automatically. In order to sign files, the signing keypair must first be generated. The keypair is maintained on per-user basis and can be created by running sign with a special command-line flag. The signing process itself is as follows (give or take insignificant details): Run the filename through a list of owned titles and find the best match. Alternately accept explicit title from the user using one of the command-line flags. Attach the title, attach public signing key Compute the hash, encrypt it with private signing key Attach encrypted hash. For details on command-line syntax and other operating parameters, please refer to a man page; an online version is here..

Requirements: No special requirements
Platforms: Linux
Keyword: File Files Key Monitoring Openssl Public Key Sign Signature Signature Verification Signing System Title
Users rating: 0/10

License: Freeware Size: 27.65 KB
USER REVIEWS
More Reviews or Write Review


SIGN RELATED
Security Tools  -  Eureka Public Key 1.0.0
Eureka Public Key was created due to numerous requests for a public key application using our strong encryption techniques. The basic principle for its use is one creates their own public key and distributes the key to whomever they will be...
2.6 MB  
Utilities  -  OpenSSH LDAP Public Key patch 0.3.9
OpenSSH LDAP Public Key patch provides an easy way of centralizing strong user authentication by using an LDAP server for retrieving public keys instead of ~/.ssh/authorized_keys. It uses the standard core.schema/nis.schema and...
60.42 KB  
Security Tools  -  NTRU 1.1
NTRU was specially designed as a public key cryptosystem that is thought to be unbreakable even with quantum computers. Commonly used cryptosystems like RSA or ECC, on the other hand, will be broken if and when quantum computers become...
 
Networking Tools  -  DX-PKI 1.9.0
IDX-PKI is an Open Source implementation of a Public Key Infrastructure which aims to be IETF compliant for PKIX recommendation. IDX-PKI is very used by companies and public agencies.. OPENTRUST.COM - Building Trusted Ecosystems or End to End...
604.16 KB  
Security Tools  -  OpenPGP Public Key Server 0.9.6
PKS is an OpenPGP Public Key Server. It allows users to store and lookup public keys from the server's database. It can also synchronize with other servers. (This product includes software developed by Marc Horowitz.)
546.75 KB  
Security Tools  -  Cryptonit 0.9.7
Cryptonit project is a client side cryptographic tool which allows you to encrypt/decrypt and sign/verify files with PKI (Public Key Infrastructure) certificates.. OPENTRUST.COM - Building Trusted Ecosystems or End to End Security
2.4 MB  
Security Tools  -  Deltacrypt OneClick Encryption Software 3.0
Deltacrypt OneClick Public Key File and Email Encryption Software application featuring RSA protection in its public keys, encryption and public key integrity protection with hashing functions and digital signatures. Deltacrypt OneClick lets the...
1000 KB  
File Security  -  QuickSigner 1.0
Secure your data exchanges and transfers with digitally signed files!This is a tool for quickly digitally signing or verifying text or files with Public-Key-Encryption with RSA encryption algorithm (RSAES-OAEP).Key length for signing up to 7120...
2.85 MB  
Utilities  -  Vista Key checker 1.0.0
Vista Key checker is a free software that can check a Vista Product key. With Vista Key Checker you can find a Vista product key or check your Vista serial number and product ID. The product ID is calculated together with your Vista product key...
382 KB  
Server Tools  -  Safe Express free 2.5
Safe Express is a powerful, highly configurable, yet easy to use email client. Safe Express is a public key email encryption client that automatically encrypts all your messages. Safe Express is an anti-spam email client that automatically...
840 KB  
NEW DOWNLOADS IN LINUX SOFTWARE, UTILITIES
Linux Software  -  Polling Autodialer Software 3.4
ICTBroadcast Auto Dialer software has a survey campaign for telephone surveys and polls. This auto dialer software automatically dials a list of numbers and asks them a set of questions that they can respond to, by using their telephone keypad....
488 B  
Linux Software  -  Total Video Converter Mac Free 3.5.5
Total Video Converter Mac Free developed by EffectMatrix Ltd is the official legal version of Total Video Converter which was a globally recognized brand since 2006. Total Video Converter Mac Free is a free but powerful all-in-one video...
17.7 MB  
Linux Software  -  Skeith mod_log_sql Analyzer 2.10beta2
Skeith is a php based front end for analyzing logs for Apache using mod_log_sql.
47.5 KB  
Linux Software  -  SLAX 6.0+
Slax is a modern, portable, small and fast Linux operating system with a modular approach and outstanding design. Despite its small size, Slax provides a wide collection of pre-installed software for daily use, including a well organized graphical...
190 KB  
Linux Software  -  GTK+ 2.5
GTK+, which stands for the GIMP Toolkit, is a library for creating graphical user interfaces for the X Window System. It is designed to be small, efficient, and flexible. GTK+ is written in C with a very object-oriented approach. Language bindings...
60 MB  
Utilities  -  LPAR2RRD 4.95-4
LPAR2RRD collects performance data and generates actual, historical and future trends utilization graphs of your virtual environment. It is agentless (it receives everything from the management stations like vCenter or HMC). The product supports...
2.25 MB  
Utilities  -  Nessconnect 1.0.2
Nessconnect is a GUI, CLI and API client for Nessus and Nessus compatible servers. With an improved user interface, it provides local session management, scan templates, report generation through XSLT, charts and graphs, and vulnerability trending.
819.2 KB  
Utilities  -  Dynamic Power Management 2.6.16
The Dynamic Power Management (DPM) project explores technologies to improve power conservation capabilities of platforms based on open source software. Of particular interest are techniques applicable to running systems, adjusting power parameters...
30.72 KB  
Utilities  -  Ethernet bridge tables 2.4.37.9
Ethernet bridge tables - Linux Ethernet filter for the Linux bridge. The 2.4-ebtables-brnf package contains the ebtables+bridge-nf patch. Be sure to check out the ebtables hp. This site also contains the arptables userspace tool.
40.96 KB  
Utilities  -  SaraB 1.0.0
SaraB works with DAR (Disk ARchive) to schedule and rotate backups on random-access media (i.e. hard drives, CDs, DVDs, Zip, etc. Basically anything except magnetic tapes.) This reduces hassle for the administrator by providing an automatic backup...
20.48 KB