Creating encryption keys
The following commands generate the file upload and code signing key pairs.
BOINC_KEY_DIR is the directory where the kays will be stored.
The code signing private key should be stored only on
a highly secure (e.g., a disconnected, physically secure) host.
crypt_prog -genkey 1024 BOINC_KEY_DIR/upload_private BOINC_KEY_DIR/upload_public
crypt_prog -genkey 1024 BOINC_KEY_DIR/code_sign_private BOINC_KEY_DIR/code_sign_public
The program lib/crypt_prog can be used for several purposes:
- crypt_prog -genkey n private_keyfile public_keyfile
-
Create a key pair with n bits (always use 1024).
Write the keys in encoded ASCII form to the indicated files.
- crypt_prog -sign file private_keyfile
-
Create a digital signature for the given file. Write it in encoded
ASCII to stdout.
- crypt_prog -verify file signature_file public_keyfile
-
Verify a signature for the given file.
- crypt_prog -test_crypt private_keyfile public_keyfile
-
Perform an internal test, checking that encryption followed by
decryption works.