https://www.sigsum.org/ Recent content on Hugo en https://www.sigsum.org/about/ Mon, 01 Jan 0001 00:00:00 +0000 https://www.sigsum.org/about/ About Sigsum is a free and open-source software project that launched officially in October, 2021. The goal is to provide the necessary building blocks for building, operating and verifying transparent systems. The project’s history is tracked in a separate document. Maintenance Maintenance and development of Sigsum is lead by Glasklar Teknik AB. Funding and sponsors Glasklar Teknik AB’s work on Sigsum is paid for by Mullvad VPN AB. Past sponsors: https://www.sigsum.org/contact/ Mon, 01 Jan 0001 00:00:00 +0000 https://www.sigsum.org/contact/ Contact Chat with users and developers on IRC or Matrix. The rooms are bridged so it does not matter which one you choose. IRC: #sigsum @ OFTC.net Matrix: #sigsum:matrix.org Subscribe to the Sigsum mailing lists by sending an email with the subject subscribe to sigsum-announce-join (at) lists.sigsum.org sigsum-general-join (at) lists.sigsum.org or use the form at each list’s info page. Once subscribed, you can provide feedback, report issues, ask questions, submit patches, and so forth on the sigsum-general list by sending en email to https://www.sigsum.org/docs/ Mon, 01 Jan 0001 00:00:00 +0000 https://www.sigsum.org/docs/ Documentation for users Meant for users who want try Sigsum and understand how it works: Sigsum’s command-line tools: generate keys, sign, submit, and offline verify Sigsum’s getting started: step-by-step demo of key-usage transparency Sigsum’s monitor tooling: poll the logs to detect signatures produced by your keys Florian’s monitor tooling: most complete monitor Sigsum is aware of right now Libraries implementing some or all of the Sigsum specifications: sigsum-c sigsum-go sigsum-rs Documentation for operators Meant for operators who want to stand up bastions, logs, and witnesses: https://www.sigsum.org/getting-started/ Mon, 01 Jan 0001 00:00:00 +0000 https://www.sigsum.org/getting-started/ Getting started This is a demo of key-usage transparency. You will create a signing key-pair, log a signed checksum, offline-verify a signed checksum, and detect that a signature is available for the generated public key. Install Install the Go toolchain. You will need at least Go version 1.23. If you would like to run a few optional debug commands, also ensure that sha256sum, cut, and basenc are installed on the system. https://www.sigsum.org/services/ Mon, 01 Jan 0001 00:00:00 +0000 https://www.sigsum.org/services/ Services This page lists services related to the Sigsum project. Log servers seasalp – stable log One stable log is being operated by Glasklar Teknik. Public key and URL in policy-file format: log 0ec7e16843119b120377a73913ac6acbc2d03d82432e2c36b841b09a95841f25 https://seasalp.glasklar.is See Glasklar’s sigsum-logs repo for information on how seasalp is being operated. Test logs Please note that the test logs are following the main branch of the log-go repository. They are intended for test and development only.