Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sparkle edDSA signature #1282

Closed
Eitot opened this issue Dec 22, 2019 · 3 comments
Closed

Sparkle edDSA signature #1282

Eitot opened this issue Dec 22, 2019 · 3 comments
Milestone

Comments

@Eitot
Copy link
Contributor

Eitot commented Dec 22, 2019

Sparkle 1.21 and newer has a different signature scheme than before (ed25519 instead of DSA). For this, Sparkle has created helper tools based on a portable ed25519 library to create and sign the releases. The previous scheme is deprecated, but both schemes can be used simultaneously.

Further reference: https://sparkle-project.org/documentation/

I have found that the OpenSSL implementation is a bit flaky. I haven’t been able to generate an identical signature using the existing private key. There are many GitHub issues on the Sparkle repo about this. It has been suggested that the OpenSSL libraries in macOS are to blame.

@Eitot Eitot added this to the v3.5.5 milestone Dec 22, 2019
@Eitot
Copy link
Contributor Author

Eitot commented Jan 26, 2020

Carthage sadly fails to build the correct Sparkle scheme that contains the helper scripts for the signature scheme. We may have to find an alternative.

@barijaona
Copy link
Member

barijaona commented Jan 27, 2020

Did you try the 2.x branch ?

My bad : 2.x branch does not yet support edDSA sparkle-project/Sparkle#1523
We have to be patient… 😒

@Eitot
Copy link
Contributor Author

Eitot commented Nov 3, 2021

Resolved by #1485

@Eitot Eitot closed this as completed Nov 3, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants