Lertaro/Lertaro v5.3.0

on GitHub

Changelog (Commits)

• bump: version v5.3.0 (43e9ec8)
• docs: document SVG icon configuration input (8597bfa)
• fix: validate plugin icon path input (08d6499)

Security Verification

SHA-256 Checksums

• Lertaro-Setup.exe (x64): 32c09257ba7be925aab102107781559631a5aca18c7989cc8df83e84eff56489
• Lertaro-Portable.zip (x64): c21a5a27542f144a6411b13ffa31f0d8545b21e6cc150e684b160d552fe8097e
• Lertaro-Setup-arm64.exe (arm64): a69f1dfb1a6f0a8a9d96095262a876a7ee170fc65e0d69163ff3e453cb1b154d
• Lertaro-Portable-arm64.zip (arm64): 2b61b4cb450e1743174389874339a4a4962638618242e184aba3f8847322e7ec

Signature Verification (ECDsa NistP256)

The portable ZIP release is signed using our official release key.

To verify the signature manually using OpenSSL:

# 1. Save the public key shown above to 'public_key.pem'
# 2. Run the following command:
openssl dgst -sha256 -verify public_key.pem -signature Lertaro-Portable.zip.sig Lertaro-Portable.zip
# Expected output: Verified OK

To verify the signature manually in PowerShell (.NET 5.0+):

$zipBytes = [System.IO.File]::ReadAllBytes('Lertaro-Portable.zip')
$sigBytes = [System.IO.File]::ReadAllBytes('Lertaro-Portable.zip.sig')
$ecdsa = [System.Security.Cryptography.ECDsa]::Create()
$pubKeyPem = '-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE117370jTbSPgIwHLntC+Bi3SD6gJ
QfxAySjSpUWa6zy4n0YHVv/ZWXM9zQlF2LTqpQC0iHNdJNH+MKU9UvDMTQ==
-----END PUBLIC KEY-----'
$ecdsa.ImportFromPem($pubKeyPem)
$ecdsa.VerifyData($zipBytes, $sigBytes, [System.Security.Cryptography.HashAlgorithmName]::SHA256, [System.Security.Cryptography.DSASignatureFormat]::Rfc3279DerSequence)
# Expected output: True