From: Kevin Day Date: Fri, 20 Jan 2023 01:35:03 +0000 (-0600) Subject: Update: Add public keys and provide checksum pages and documentation. X-Git-Url: https://git.kevux.org/?a=commitdiff_plain;h=7712225c3bf3bf8e446442c2e96634c49f920f42;p=kevux.org-website Update: Add public keys and provide checksum pages and documentation. --- diff --git a/checksum.html b/checksum.html new file mode 100644 index 0000000..ee002f5 --- /dev/null +++ b/checksum.html @@ -0,0 +1,160 @@ + + + + Kevux Systems and Software - Checksum + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + +
+
+
+

Checksum

+
+ +
+
+

About

+
+ +
+

+ Files get corrupted and malicious actors tamper with files. + There are many things that can go wrong when transfering files between two parties. + Checksums and signatures are provided to help protect against these kinds of problems. +

+
+
+ +
+
+

SHA2

+
+ +
+

+ The checksum algorithm known as SHA2 is utilized as a quick and simple integrity check on files. + This also functions as a poor mans authentication but offers no real security that the checksum itself is valid. + The GPG checksums are a more appropriate choice for authentication. +

+

+ There are several variations of this algorithm. +

+
    +
  1. SHA512: A 512-byte version of SHA2 that results the largest, strongest, and slowest checksums. +
  2. SHA385: A 384-byte version of SHA2. +
  3. SHA256: A 256-byte version of SHA2. +
  4. SHA224: A 224-byte version of SHA2 that results in the smallest, weakest, and fastest checksums. +
+
+
+ +
+
+

GPG / PGP

+
+ +
+

+ The GPG is an open-source implementation, or perhaps version, of the PGP standard. + This provides signatures and even encryption of files that are often called keys. + There are several different forms of security and data integrity. + Within the GPG key, checksums algorithms like SHA2 are also used. +

+

+ There are public and private parts to a GPG key. + The public part of a GPG key is given out publically so that the person receiving the files can verify the integrity and authenticity of the files. + These keys are even used to verify and encrypt e-mails. +

+

+ The following are public keys from Kevin Day and are themselves signed and checksumed. +

+
    +
  1. 2024 and earlier: Kevin Day 76E903396DAD0A83 (SHA256) (GPG).
    2. +
  2. 2023 and later: Kevin Day 02E939B8F7EFE597 (SHA256) (GPG).
    3. +
+

+ The key identified by 76E903396DAD0A83 is authenticated via the key identified by 02E939B8F7EFE597. + This key will expire near the start of 2024 and will not be used again. + This followed the old, and perhaps lazy, practice of using the master key for signing everything. + This also utilizes older and less trusted algorithms. +

+

+ The key identified by 02E939B8F7EFE597 is authenticated via the key identified by 76E903396DAD0A83. + This key has been created near the start of 2023 and will be used until such time a replacement comes about. + This follows the newer practice of signing using subkeys, making the master key unavailable. + This key utilizes newer algorithms. +

+

+ These public keys should be downloaded imported into your own key chain to perform integrity checking and authentication. +

+
+
+
+
+
+ + diff --git a/documents/checksum/kevin_day/2017/kevin_day-76E903396DAD0A83.public b/documents/checksum/kevin_day/2017/kevin_day-76E903396DAD0A83.public new file mode 100644 index 0000000..cc59b1d --- /dev/null +++ b/documents/checksum/kevin_day/2017/kevin_day-76E903396DAD0A83.public @@ -0,0 +1,52 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFlm0hIBEACx9AN/uDdUST/LlnIBDL/BFsdhrah6ba1Tsa4MIhhtmxAzUjCv +hkMyZKLxqqCCU9kj9EwvdoftMiuMWrLPJf07IDrkQEXFQu0K0Q8QOf5WZHhXQ2SL ++vbkaaSE6sxPVPtTHvwgb6oJNj/e7AmPPi/9oMCkt5HuUj+1K1jEK1vTff8xAqgZ +fo7m2sBlH0T6ht1N5duOowbneqWAoDHh5MrruohbomaSCt3aNsuZZzRULeV0AwP7 ++WIS9G6q1YP+Vc45YzfpgikmiI8veKHdaf8Si9aysp1WI08F+7bRYFFGM8CWCc4i +ke+fQdAjlVEjttCe1Wh1g6mV7V2XGMALg/EiN5rkZoTv3By6zg9AW3Qx0Bw2zHZG +OhoHkeqfLDkyqWR97+kchQe69vERi92m2K4voYau6UIZLh+YXrNkrqZIMijZ5mn5 +UP+xowVyPdQvLSK5/3hYMvqyIIuX3t15tJfflKugd/hv8mPO5uT1kpWjYExLcIzh +hneg8UUGKj5OlTx2VeFwdu663Wf+4yCYDTgadZ0krC2aDzbSMf9/cj3hE8wu0F/F +S2ZyBTjAfvmN1GxIsHWPZWbVFkHtQUz2tg24PF1d3xC1tu2lMI3mEhoob0bjkxEQ +U0RGSVdXNsCZD4sr/DR9mXSkBgfU+4jvrn9jjvKitw2NSWLOJyHszdGtKwARAQAB +tCFLZXZpbiBEYXkgPHRoZWtldmluZGF5QGdtYWlsLmNvbT6JAlYEEwECAEACGwMH +CwkIBwMCAQYVCAIJCgsEFgIDAQIeAQIXgBYhBDjJo1pK2b7sE5q1jHbpAzltrQqD +BQJjw0iCBQkMhixwAAoJEHbpAzltrQqDM9kQAJV49C2A2MG+yIH8qKC8BLBbte6B +UkOgYSTtOKflXE8atnB37WaPcDnl4bPIKmbynzK9eCze0lXG/V7CJegndEhEAt6Z +OTQXVcOLFkJwjqs7OkVtMXm46jO5vEU3bEIF2BCKN55yoQRltsW+7r84tRpIa23r +GTVBh57BMaOlsF7YZjO7e1qtZwmXdVixc9Ohxq2sN54lLcDWWchuBspQukQIuDhB +PDhCs6Hy3TGcNEPOreSxJxz2fUkO7QUFaGG0Hzkoo7whgRPKwSZztSwO9VM9k0dZ +5any2qStfQkgDE2t3RgkX6ibYz63B7teLCmJz9lH6q5HnPQl15JHCrA+LekwckYY +yPqFzCbJsMJoDQn8lXR5Aedj8crMEQ2ueZFtYh3lT3t4Yu8fEeMhuy4DtfuoRZqY +0wTbeK79QV1dAYdB7bBpAUl1q9shYOQpJ3C7C0Gf3g+EmojkpZw2nck+ikjDDpQb +o8/6RA9gHXWAlDI8SV9BJdstSqYx7RslXQfCPGc6fwFqQCzPYaezf/rPyZMXBKuz +blCGyNDc5bubQAN6HJNJcPKOgBmXN4JxqY5fIdtBry7utdnzPeM/djDSzzLyJf+s +iqzjbyohLblORLFvPfjvpP7kExJ0NLMfikDk/q5q/omjwqq+CnwS6VaFW4dotezN +tBI+QDhYqBxAwTppuQINBFlm0hIBEADQq4Pb4bJBtwGjtAECi062WzwmxAQIa5eO +hrgYrGiI6TYqQ1gmowIMTdIPk81j1NiyHez7INTSuY48ZVVSlkhFglbUpj5wM2ck +uTxoaQy/V9BIgIGdQ0Hr9Y54MlKjOQBz+dwcKGQtVLAYLtDHscPcfTGSXmARpr8a ++ShOcSVq1oJK3BydAtRcizfiIzxRPygupyhs7XDVh11tj6QJZLTSgkL8U/EgQR51 +7Dzs/yvHGYiguW+YgukLantvmdAzerv9yxR8/H7JuvlGb0AbsLr3dpnp8vi91jIe +yUa5tTiy0kMEIXljL4DX/ZhM7mbzzzsrnVTomg9zVnIjhxKfoSVEjP8orbO0g8M5 +PSfAOLYznTkoQJlMN3gtAUdU65i39fUAOh8hYrAC41tCdqCIJ9/rQKNP1IsvrzmJ +nV5V/2a2XDvX1xUEN1Pk4yREy20HArPJBmWX23bXPG5Zg5VH/6oV1abJpGrjTfOG +/O3QiF66mJN1sxHKT8UAYlvoc/oRh45oWZiON4tGSRpIfxCY9A87Km5U0Cz0rWMX +QQZ0tUYc1FzwU4MVxKzp/9cEV8gT20L/w0ECWl0JU3o+SB7IKU3fFySPQXHHzh8W +0SAgoSRX6Va12O+C1Z7I78Xju0PMg0pdDRGrG3t7Pi0ppopiwCdnDudP5kwLrgFZ +TQIC6sXklQARAQABiQI8BBgBAgAmAhsMFiEEOMmjWkrZvuwTmrWMdukDOW2tCoMF +AmPDSGUFCQyGLFMACgkQdukDOW2tCoOGpg/+LQkBoVtQ8nwW6lN4qvE4Zo6FScbn +k9dTwR0mZX5zjt47fW0TYQDlu5VfJJm58zaUB5EJgDkrd/itXkNTvXJcG/hXbPSl +W4VwiZf4SihZwIVD3DSgFM3aMAJcX8XPfl/Ez2A+mL1urKKRTbhglNPXu2Cm5nbh +f/PavRyE4gBzoxIMKjR/EwvHHNpwJh7tebblNGZojdOVvKR2fplEraqgWHkx8664 +dEHLeygWsexW0z+ggqTPt6ho4OmlVry2kKN/7TJ9c9GX2hOMXK0m90DRJwORmw/Q +aPqVK/SeP7RiuojOVUwJaxhYq3BQXuz87dh6iI4EC97yhtKKOGrD2zvLcfOG2yXi +MFrn0Vr+06m084Lm6CwvIYY5QR6gjnkTHk+hVuXk6FBXXjcvhOT7wsWft1l8vxmI +678tDIc6+oUKH0b5hvNKQU4Y/0JxbAhoPLd5PO1GzC6UnGEjgatO6Jw4OxsrnGyL +BbgPem5fqd464LgK7CHPLERv8DbCGtGF/lA7QLD4a0qGdV2EsA5ZvaQcsBtAPxm6 +3qMyoFiSPs+gM74Vmpo8+LVcPqOhwRDlk+EgT2iD/HUkcFIygEqFQp4q6SKTHVIL +bYFOLwYTpOC8VcU24FaXurXagfIVaVruacgoU5ncwjmJQ69XxcmQWcNKe8ei/BE9 +jAbv04ojci3va70= +=pmSm +-----END PGP PUBLIC KEY BLOCK----- diff --git a/documents/checksum/kevin_day/2017/kevin_day-76E903396DAD0A83.public.asc b/documents/checksum/kevin_day/2017/kevin_day-76E903396DAD0A83.public.asc new file mode 100644 index 0000000..45b27e4 --- /dev/null +++ b/documents/checksum/kevin_day/2017/kevin_day-76E903396DAD0A83.public.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- + +iHUEABYKAB0WIQQwcFVH2oDfL8GzO6AC6Tm49+/llwUCY8noTAAKCRAC6Tm49+/l +l3d2AQCA058MhITwhF2GIvQK3ZNieYhB+EFy/99O0yhII9qbZAEA6ibfsaJI1KwZ +iGWy+F946gzwC077j83be3koFmUpmgQ= +=3Nfg +-----END PGP SIGNATURE----- diff --git a/documents/checksum/kevin_day/2017/kevin_day-76E903396DAD0A83.public.sha256 b/documents/checksum/kevin_day/2017/kevin_day-76E903396DAD0A83.public.sha256 new file mode 100644 index 0000000..0731951 --- /dev/null +++ b/documents/checksum/kevin_day/2017/kevin_day-76E903396DAD0A83.public.sha256 @@ -0,0 +1 @@ +5d9ebd75e820403d4c67878ecb42c2ac0c51b116ae2e0d5d9ba9f017f1f7c7be kevin_day-76E903396DAD0A83.public diff --git a/documents/checksum/kevin_day/2023/kevin_day-02E939B8F7EFE597.public b/documents/checksum/kevin_day/2023/kevin_day-02E939B8F7EFE597.public new file mode 100644 index 0000000..6ca4c06 --- /dev/null +++ b/documents/checksum/kevin_day/2023/kevin_day-02E939B8F7EFE597.public @@ -0,0 +1,16 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mDMEY8jMdxYJKwYBBAHaRw8BAQdABBDPvw6je5e7nhtsbnJneC2A0rlVNtcWkF+Y +FUHrwDO0G0tldmluIERheSA8a2V2aW5Aa2V2dXgub3JnPoidBBMWCgBFAhsDAh4F +AheABQkCKbZMFiEEybxreJJGQiIu1aC6v3CqGIdqrmgFAmPI1UQKCwkIBw0MCwMB +AgcVCgkICwMCBRYDAgEAAAoJEL9wqhiHaq5o3EIA/3cHfWpBkNOlb7xaHWd4hfRr +VWouOnLNymbpXZTXb6x6AP9s1MLMpm6F72hc9XI53w0gQxbhQXbsBRuoKT0vVyzM +BbgzBGPIzJYWCSsGAQQB2kcPAQEHQErU15IMiFWdU6WXS+YlX4WWy0l5DwfbOuKN +fhH2i+85iPUEGBYKACYWIQTJvGt4kkZCIi7VoLq/cKoYh2quaAUCY8jMlgIbAgUJ +Aim2AACBCRC/cKoYh2quaHYgBBkWCgAdFiEEMHBVR9qA3y/BszugAuk5uPfv5ZcF +AmPIzJYACgkQAuk5uPfv5ZfqdgD9G7vBjZpKmnju8snL2h2rLfvDR6zL2cCgUS/a +jkLaYRoBAMbTr91ZyS5kueCtZgS3fKbFg3IMwe5iMZJCsY0XTooLvsAA/RgiBYju +9B7UzJrILSN7p+SPBzECMWr6FMc+ctbU8S8XAPwN9kcrERRybDypzc9Cyz19WRRl +tTXB/FnotvjWfDyOAw== +=sg0n +-----END PGP PUBLIC KEY BLOCK----- diff --git a/documents/checksum/kevin_day/2023/kevin_day-02E939B8F7EFE597.public.asc b/documents/checksum/kevin_day/2023/kevin_day-02E939B8F7EFE597.public.asc new file mode 100644 index 0000000..f78505f --- /dev/null +++ b/documents/checksum/kevin_day/2023/kevin_day-02E939B8F7EFE597.public.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIyBAABCgAdFiEEOMmjWkrZvuwTmrWMdukDOW2tCoMFAmPJ6LwACgkQdukDOW2t +CoMGFg/4jzN1/F5PPrvjpvFJlM20zZx7ctWadDe25OKS2zLoqNZseFHyi+o3TvAk +71jqd9Wiv80zIBasQd8UVv5+uFInOWNraNas67noTsdnPi/kFPkl4ecCcaLNf4oY +0cnOift+0g8v9Oe4+Yiz25qxRIRT38h3sz094P0mg5XBOpr16NQzrw8KlFxCvEYv +LK5SJItztqXEAj/PlPFrND6YZHJpEtGoiHiI1Oe6L8Ec7mSrDN2qRQ/hZ5jmpKBv +wT4g3q4VH1BkcSVHVSX7QlIYl+/L77Ys6dUKh93zQfEnq4ZiJ6p/o95AN5wTLu3U +oHWLSzup11n2LIEuaX7C88E5tzG4euup5c52ck1L73fMvNgyRWoDv4CFZb/7sp3P +dSUNrF/tpPiUYzBoacjgmah533ACAoiH1cU1wj7I5XgvVJfoJj5xrvsHI7NpWbLu +dpWEA7BWSxXWNyze3I9Z2EidZxAm83lk89ajC94BPpcYRUzTvrWdWjSXJEmz44OU +uJpRGk0ga6cH/lGBaf9vVR5r9dDnU2aSC+7pow1QQHvS9stT0/WmE+7RHuDVBQec ++XyOm2xL5dPQnjDLJill6LvMaqku1zJp8Nl+/GqP24ialvk1m7/mL1IfuyjlHkx6 +3X1JZ6h3qF+mG2iQjUdNJsMQChRP4/WMX+K4CguhUxreV7IsVw== +=PIzD +-----END PGP SIGNATURE----- diff --git a/documents/checksum/kevin_day/2023/kevin_day-02E939B8F7EFE597.public.sha256 b/documents/checksum/kevin_day/2023/kevin_day-02E939B8F7EFE597.public.sha256 new file mode 100644 index 0000000..1f62043 --- /dev/null +++ b/documents/checksum/kevin_day/2023/kevin_day-02E939B8F7EFE597.public.sha256 @@ -0,0 +1 @@ +63848035ddf60685b4590d605d0fa889739662a979cab0ab0ff57f67884acf0c kevin_day-02E939B8F7EFE597.public diff --git a/fll.html b/fll.html index 2338588..45d4a9c 100644 --- a/fll.html +++ b/fll.html @@ -101,6 +101,9 @@

In addition to being a library, the FLL also provides several programs. Some programs, such as Featureless Make (a build system similar to GNU Make), are forever part of the FLL. Other programs, such as the Controller program, will eventually bud off into their own project space.

+

+ Many of these files also include checksums to help provide integrity (under Hash) and authenticity (under Sign). +

diff --git a/news.html b/news.html index 0546931..f1d0864 100644 --- a/news.html +++ b/news.html @@ -68,6 +68,9 @@ Source Code
+ Checksum +
+
Webbing
@@ -156,6 +159,7 @@