Module nh_avm_sign

Command line signing for packbeam archives.

Description

Command line signing for packbeam archives.

  nh-avm sign   --key fwup-key.priv --in app.avm --out app-signed.avm
  nh-avm verify --key fwup-key.pub  --in app-signed.avm
  nh-avm keygen --priv my.priv --pub my.pub

The keys are fwup keys

Deliberately. An fwup private key is 64 bytes: a 32 byte Ed25519 seed followed by its public key, which is libsodium's layout. The seed is what signs, and the trailing half is byte for byte the .pub file — so an organization signs packbeams with the key it already uses for fwup, and NervesHub verifies against the organization key it already stores. Signing AtomVM firmware adds no key management at all.

keygen writes the same format for anyone not already using fwup, and fwup -g produces files this accepts.

Function Index

main/1

Function Details

main/1

main(Args::[string()]) -> no_return()


Generated by EDoc