uvmac/docs/extras/sigcheck/index.html

1 line
8.5 KiB
HTML
Raw Normal View History

2020-03-14 19:28:01 +00:00
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <title> SigCheck </title> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="canonical" href="index.html"> </head> <body> <div> <i> <a href="https://www.gryphel.com/index.html">www.gryphel.com</a>/c/<a href="../../index.html">minivmac</a>/<a href="../index.html">extras</a>/sigcheck - <a href="https://www.gryphel.com/c/feedback.html">feedback</a> </i> </div> <hr> <h2 align=center> SigCheck </h2> <hr> <p> Download </p> <blockquote> <p> <a href="https://www.gryphel.com/d/minivmac/extras/sigcheck/sigcheck-1.1.0.zip">sigcheck-1.1.0.zip</a> (111K) a zipped hfs disk image and checksum file. The disk image can be mounted with Mini vMac. Includes source code. </p> </blockquote> <p> SigCheck is a tool for checking the digital signatures found throughout this website, to verify the integrity of downloads. Also, anyone can create their own signed message for SigCheck using the <a href="../sigwrite/index.html">SigWrite</a> tool. </p> <p> <img src="https://www.gryphel.com/d/minivmac/extras/sigcheck/screen.gif" width=514 height=344 border=0 alt="Screenshot"> </p> <p> To use SigCheck, launch the application, and in the editing window that appears, paste in a signed message. For example: <!-- For example, here is a checksum for the SigCheck download, signed with <a href="../../../../c/keys/k1.html">Gryphel Key 1</a>, the main public key for the Gryphel Project: --> </p> <blockquote> <pre> --------- GRY SIGNED TEXT --------- Twas brillig, and the slithy toves did gyre and gimble in the wabe: All mimsy were the borogoves, and the mome raths outgrabe. ------- BEGIN GRY SIGNATURE ------- Gry/AXuKqWsF8Rh5/Bb045yIowANlvp/V/ymKoDa55Wb7dW/xGfPmca8oLw+Rv9d cSQpcL+XpzESnWqpK/uNg7lTIe4wdOzo1/s6bHU0u27J+A5EngkYQiAMHeETq6Nx DM8viQbkNx2UZrDxyOLCGXW1N4txMktyjC3DYzRMH/oKBVHxgP6B2j8sipEgp3Zf -------- END GRY SIGNATURE -------- </pre> </blockquote> <p> Copy all of the indented text above, which includes the message body, the signature, and headers and footers. Then paste it into SigCheck, which requires getting the clipboard into the emulated Macintosh, if SigCheck is run inside Mini vMac. You can get text into the emulated Macintosh using the &ldquo;Host Paste&rdquo; command in the Edit Menu of SigCheck. It is like the &ldquo;Paste&rdquo; command, except that it uses the clipboard of the real computer instead of the clipboard of the emulated computer. The keyboard shortcut is Command-Option-V. (The &ldquo;Host Paste&rdquo; command has similar effect to using <a href="../clipin/index.html">ClipIn</a> and then the normal &ldquo;Paste&rdquo; command.) </p> <p> Then click on the status bar, at the bottom of the window below the editing area. (Choosing the &lsquo;Go&rsquo; command from the File menu, of the emulated Macintosh, will also work. The keyboard shortcut is Command-G.) </p> <p> The editing area is cleared. Next paste in the public key for the signed message. For this example: </p> <blockquote> <pre> ----- BEGIN GRY PUBLIC KEY ----- Gry+PKAIAAA/AXuKqWsF8Rh5Ie4/vORBnTxYf8FPpRl/n6hpgDgfJ5MAOsAEyePE nSfjmL3I9emNTuW/iCIHlCl/WkaWyMQZ+NDb1ZsnSLyOKwOycVkR3JwJbUamM4wy jUuoWV6jzuhqWZobpGPMSN4B3ivHXtcNVm5SVmnAL13T4FCLnx+TxaYRAQABwA54 ------ END GRY PUBLIC KEY ------ </pre> </blockquote> <p> Before continuing, it would be a good idea to set Mini vMac to <a href="../../hardware.html#processor">All Out speed</a>. Then, on a modern computer, SigCheck should take less than a second to run. At 1x speed, or on a real Macintosh Plus, it takes much longer. The code of SigCheck is intended to be simple to understand and maintain, as opposed to fast. </p> <p> Now, click on the status bar again. If all is well, the status bar should say &ldquo;Good Signature.&rdquo; Otherwise you should get an alert with some error message. </p> <p> If SigCheck says the signature is good, that is strong evidence that the message was signed by the owner of the public key (the person who