[tech] Signing Gemini capsules

[Alexis]

ew.gemini <ew.gemini@nassur.net> writes:

>
> signify-openbsd uses a different key generation mechanism.
> Skimming the docs coming with the debian package did not say,
> what algorithm is used. So to me this looks like "but why
> another?" --- this might be my ignorance, however.

Not sure if you're already aware of this intro, describing the reasons for signify's existence and design decisions:

   https://www.openbsd.org/papers/bsdcan-signify.html


Alexis.