• NeoMutt and yubisigning

    From Gabx@mail2news@virebent.invalid to alt.privacy.anon-server,alt.cypherpunks,alt.privacy on Sun May 31 00:24:53 2026
    From Newsgroup: alt.privacy

    -----BEGIN YUBISIGNER SIGNED MESSAGE-----
    Hash: SHA256

    Neomutt cli linux email client multi account SMTP/IMAP
    Mail2News only sending account for
    - qee4i7sags6phsvb2yodwecfj7noimfhhalsjktsvikrwotxzis3raad.onion SMTP
    - mail2news@xilb7y4kj6u6qfo45o3yk2kilfv54ffukzei3puonuqlncy7cn2afwyd.onion M2N
    - peannyjkqwqfynd24p6dszvtchkq7hfkwymi5by5y332wmosy5dwfaqd.onion NNTP

    Added Yubisigner automatic YubiKey PIV Ed25519 signatures.

    I hope someone appreciates it !
    Happy hacking
    --
    Gabx

    Author: Gab Virebent
    Signed at: 2026-05-31 00:24:22 +0000
    Filename: m2n-msg.6AICjy
    File size: 432 bytes
    Email: gabriel1@virebent.art
    Telefax: n/a
    URL: www.virebent.art
    Comment: Posted via NeoMutt mail2news
    RIPEMD-256: e6633abadb8514c1c7d3330e116d66fca8fd7a7e7e6d16790459acf5b5c941bd
    SHA-256: 046860f88127944ebc6f9981da051b0eaa7d02cf2c5bfabf23ef5b7512594849
    SM3: 142888d914db9f6f970998df15323340074a9291587c23054256ad2cc9eda5cd Streebog-256: a7c2c27ad4d7a6d6ea07579bdc5cd9a3a2fb5ba373dd4900dfab3ece0f4cccfe -----BEGIN YUBISIGNER ED25519 SIGNATURE----- 016a3022f054b794469ed0178235afd551ac9537e5c4a787ceaec8ce6bc29a8a d17e1cf04d0ff35309af146b6c1bdf2b9d1d8060abd1f6687dcf95be7c35d680 49379ff9f862935ce0b229173cb6854e5c14cdbcec01ea12c2200b01bea3a30d
    -----END YUBISIGNER ED25519 SIGNATURE-----


    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Gabx@mail2news@virebent.invalid to alt.privacy.anon-server,alt.cypherpunks,alt.privacy on Sun May 31 00:31:02 2026
    From Newsgroup: alt.privacy

    -----BEGIN YUBISIGNER SIGNED MESSAGE-----
    Hash: SHA256

    I forgot to include the repository, here it is:

    https://git.virebent.art/virebent/neomutt-config

    a tutte le ore ;) !
    --
    Gabx

    Author: Gab Virebent
    Signed at: 2026-05-31 00:30:32 +0000
    Filename: m2n-msg.dxe6oE
    File size: 129 bytes
    Email: gabriel1@virebent.art
    Telefax: n/a
    URL: www.virebent.art
    Comment: Posted via NeoMutt mail2news
    RIPEMD-256: d4dc463fc341b9037ac2765daa8a4ca7318e97eddcc1b59f1e852d473017d931
    SHA-256: d53158943b0b6a0617622213e14762c435091d220cb631d5b448bfb07e87d312
    SM3: 57300c2f84b1d05853e6c2ccd4afdad599ec7b930d8781e9c1e256e97109147a Streebog-256: 3b453ea0c1a116fb65ae04ae2cd61a5d162b3e41a8ce2c09194f62de93715d15 -----BEGIN YUBISIGNER ED25519 SIGNATURE----- 016a3022f054b794469ed0178235afd551ac9537e5c4a787ceaec8ce6bc29a8a b8b93bcfe6aa7a5442bea178f48a5faff533869cc9b733cf2b42250f2970af87 91f9e29f9a6a15e234565ad67b983bb84102c84a8b4f4e7a430b24e5ad07e309
    -----END YUBISIGNER ED25519 SIGNATURE-----


    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Anne Frank@bounce.me@n2n.oc2mx.net to alt.privacy.anon-server,alt.cypherpunks,alt.privacy on Sun May 31 13:40:03 2026
    From Newsgroup: alt.privacy

    Gabx wrote:

    -----BEGIN YUBISIGNER SIGNED MESSAGE-----
    Hash: SHA256

    I forgot to include the repository, here it is:

    https://git.virebent.art/virebent/neomutt-config

    a tutte le ore ;) !

    Interesting that you use yubisigner for postings,
    instead of yubicrypt.

    Best regards
    Stefan
    --
    -----BEGIN ED25519 SIGNATURE----- 8a5f8adfec9690b8ae6ca95dc23811463fcce5bbba0d841f49b7d3f7a89ad149 05b66788038925656076c8a67627407dbc704033b200316690845ea018bd8132 e5050ca78dfd306daa1a64c85d9b116fa22d72b6bd0c2d8849c778a58b4a8201
    -----END ED25519 SIGNATURE-----

    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Gabx@mail2news@virebent.invalid to alt.privacy.anon-server,alt.cypherpunks,alt.privacy on Sun May 31 17:01:40 2026
    From Newsgroup: alt.privacy

    Interesting?
    I don't know,

    I should add verification to make it effective.

    let's see how it goes.
    --
    Gabx


    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Gabx@gabx@victor.virebent to alt.privacy.anon-server,alt.cypherpunks,alt.privacy on Mon Jun 1 17:00:21 2026
    From Newsgroup: alt.privacy

    Gabx wrote:
    let's see how it goes.
    Just f"""d it all up, lol

    Gabx
    --
    _______________________________
    https://contact.virebent.art
    https://www.virebent.art
    https://archives.virebent.art
    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Gabx@mail2news@virebent.invalid to alt.privacy.anon-server,alt.cypherpunks,alt.privacy on Wed Jun 3 00:08:35 2026
    From Newsgroup: alt.privacy

    -----BEGIN YUBISIGNER SIGNED MESSAGE-----
    Hash: SHA256

    Anne Frank wrote:
    Interesting that you use yubisigner for postings,
    instead of yubicrypt.
    Today I had some time to develop my response to your observation.

    I think yubisigner works better purpose usenet but also emails.

    Yubisigner produces cleartext signatures with explicit metadata and
    four redundant independent hash algorithms, as you know.

    Anyone can verify what was signed.

    Usenet posts are permanent public records.

    In 20 years, a reader can verify the yubisigner signature with any Ed25519 implementation.

    Yubisigner signature is self-contained.

    What do you think ?


    Regards
    Gabx
    --
    Gabx

    Author: Gab Virebent
    Signed at: 2026-06-03 00:08:20 +0000
    Filename: m2n-msg.oycdI8
    File size: 611 bytes
    Email: gabriel1@virebent.art
    Telefax: n/a
    URL: https://contact.virebent.art
    Comment: Posted via NeoMutt mail2news
    RIPEMD-256: 9441529cf42a7373f4ac556c1b1797fabfeefaeaffddb061b2aebd2f5b80565e
    SHA-256: a217f8d438439fb9a7a85d68edf142f6abd2fb6e0355d747a488077481713258
    SM3: b6b60579e0402685bf9a40ebdee651c8bfe18aca6498079622bcd3ce455a034a Streebog-256: 93762a797e8cd87855a10614db7e5a20a5a7963fdd1a01be12425d994bd279d7 -----BEGIN YUBISIGNER ED25519 SIGNATURE----- 016a3022f054b794469ed0178235afd551ac9537e5c4a787ceaec8ce6bc29a8a d44d1ae8445cfcd15725712382d8b808ad18e5f13f772543b7a8e2a7cae14211 7c359067262c96841e13885449987ccf08a73fd4e0280821f038cfbc35a43e0c
    -----END YUBISIGNER ED25519 SIGNATURE-----


    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Ch1ffr3punk@ch1ffr3punk@gmail.com to alt.privacy.anon-server,alt.cypherpunks,alt.privacy on Wed Jun 3 06:49:54 2026
    From Newsgroup: alt.privacy

    Gabx wrote:
    -----BEGIN YUBISIGNER SIGNED MESSAGE-----
    Hash: SHA256

    Anne Frank wrote:
    Interesting that you use yubisigner for postings,
    instead of yubicrypt.
    Today I had some time to develop my response to your observation.

    I think yubisigner works better purpose usenet but also emails.

    Yubisigner produces cleartext signatures with explicit metadata and
    four redundant independent hash algorithms, as you know.

    Anyone can verify what was signed.

    Usenet posts are permanent public records.

    In 20 years, a reader can verify the yubisigner signature with any Ed25519 implementation.

    Yubisigner signature is self-contained.

    What do you think ?

    The idea behind yubisigner was to detach-sign files with two modes,
    so that third parties can not fake content of public repositories,
    as it once happened to me, when I made SHAS256 jokes about the NSA.

    Additionally, the headers can't be faked, as it can be done in GnuPG
    and openbsd-signify.

    Regards
    Stefan
    --
    https://oc2mx.net
    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Gabx@mail2news@virebent.invalid to alt.privacy.anon-server,alt.privacy,alt.cypherpunks on Thu Jun 4 23:21:00 2026
    From Newsgroup: alt.privacy

    -----BEGIN YUBISIGNER SIGNED MESSAGE-----
    Hash: SHA256

    Ch1ffr3punk wrote:
    The idea behind yubisigner was to detach-sign files with two modes,
    so that third parties can not fake content of public repositories,
    as it once happened to me, when I made SHAS256 jokes about the NSA.

    Additionally, the headers can't be faked, as it can be done in GnuPG
    and openbsd-signify.

    It's for this reason i have taken seriously
    It is for this reason that I have taken posts identity and verification seriously,

    it could be increased with a merkle of the posts sent,

    experiments.
    --
    Gabx

    Author: Gab Virebent
    Signed at: 2026-06-04 23:20:49 +0000
    Filename: m2n-msg.ujlWjd
    File size: 539 bytes
    Email: gabriel1@virebent.art
    Telefax: n/a
    URL: https://contact.virebent.art
    Comment: Posted via NeoMutt mail2news
    RIPEMD-256: 5dbf7e246964d82bc319e11193893489c7b552be13431c30fdfefde3acf33175
    SHA-256: d11d15f76503d117d2db711f0b40f64d5e47fb66cdf5c37bd5c83abc1d4a303b
    SM3: 2f71a3cd14bd86137751b9df0a238fa036d69599f902d28b1c88714300e37f30 Streebog-256: 01fa5fc9df811b6f9640591c68e5e45ba7f5da68ec722520890c1741d5ba8f04 -----BEGIN YUBISIGNER ED25519 SIGNATURE----- 016a3022f054b794469ed0178235afd551ac9537e5c4a787ceaec8ce6bc29a8a 82b598f0e1e8301d8f021f0e905521dd862a535366493a3efe5b3033451cdd28 b2464c12aa07e65318c25329e378cfe6e7fec26aa49f871baa292274f3420906
    -----END YUBISIGNER ED25519 SIGNATURE-----


    --- Synchronet 3.22a-Linux NewsLink 1.2