Lertaro/Lertaro v5.5.2 on GitHub

Changelog (Commits)

bump: version v5.5.2 (ad24593)
refactor: split oversized search files (ae5b46f)
docs: update homepage security warning (5321d6c)
refactor: remove plugin-specific settings save button (0ab0d50)
feat: full-window hotkey cycling, plugin config save, plugin page performance (6455d7a)
perf(inline): release the working set after 3s idle instead of 15s (bdd69fc)
feat(search): ranking tiers, case-insensitive matching, and inline search overhaul (6af6c4c)

Security Verification

SHA-256 Checksums

Lertaro-Setup.exe (x64): fe532a34ca79f1071733e75456badaeeedf57bbb28dc9ac276f154bf160af8e4
Lertaro-Portable.zip (x64): 35a6480682caac3670810c8062681a7c3caa5c6a0f081c819270c78fae480290
Lertaro-Setup-arm64.exe (arm64): ccac3acdf773dc8d90441b31429b68ad26375a8138908a8083a32f62f9e5e1ce
Lertaro-Portable-arm64.zip (arm64): 678b02ac013ed1a01ac4792982aeb7747a1822e68ede36a7c3521286fa1f5a6f

Signature Verification (ECDsa NistP256)

The portable ZIP release is signed using our official release key.

To verify the signature manually using OpenSSL:

# 1. Save the public key shown above to 'public_key.pem'
# 2. Run the following command:
openssl dgst -sha256 -verify public_key.pem -signature Lertaro-Portable.zip.sig Lertaro-Portable.zip
# Expected output: Verified OK

To verify the signature manually in PowerShell (.NET 5.0+):

$zipBytes = [System.IO.File]::ReadAllBytes('Lertaro-Portable.zip')
$sigBytes = [System.IO.File]::ReadAllBytes('Lertaro-Portable.zip.sig')
$ecdsa = [System.Security.Cryptography.ECDsa]::Create()
$pubKeyPem = '-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE117370jTbSPgIwHLntC+Bi3SD6gJ
QfxAySjSpUWa6zy4n0YHVv/ZWXM9zQlF2LTqpQC0iHNdJNH+MKU9UvDMTQ==
-----END PUBLIC KEY-----'
$ecdsa.ImportFromPem($pubKeyPem)
$ecdsa.VerifyData($zipBytes, $sigBytes, [System.Security.Cryptography.HashAlgorithmName]::SHA256, [System.Security.Cryptography.DSASignatureFormat]::Rfc3279DerSequence)
# Expected output: True