when copying curvy files from ssh, an extra one snuck in.
signify doesn't do any kex stuff and doesn't need scalarmult.

add a new option (-z) for signing gzip archives.
- simple barebones gzip header parsing
- signature is outside of the archive
- checksums for blocks of 64K
- verify stuff then pass it to the pipeline

add a new option (-z) for signing gzip archives.
- simple barebones gzip header parsing
- signature is outside of the archive
- checksums for blocks of 64K
- verify stuff then pass it to the pipeline
lots of inputs by tedu@ and deraadt@
okay tedu@

show more ...

Pull in all the parts. Let's face the facts -- .PATH from other
parts of the tree is PAINFUL for basically everyone upstream, not
just for us in our own tree.

dang it!

new day, new options. -m message and -x signature.
this should be less confusing and more consistent in various modes.
also support stdin/stdout where feasible. touch up usage to be helpful.
ok deraa

new day, new options. -m message and -x signature.
this should be less confusing and more consistent in various modes.
also support stdin/stdout where feasible. touch up usage to be helpful.
ok deraadt

show more ...

base64.c workaround keeps sneaking back in

change the listing of the options, because there is way too much
befuddlement.
sorry jmc
ok tedu

oops

copy secret key comment into signature. requested by deraadt

allow building a VERIFYONLY version that's considerably smaller.
most of the savings comes from eliminating the large constant table
in ge25519.c. ok deraadt

reduce size by using equivalent code from libc instead of nacl
ok deraadt

add signify, a tool to sign and verify signatures.
man page and error message help from espie
other feedback from deraadt djm mikeb