Support for pre-hashing (HashEdDSA) was added.
The -H command-line switch, in addition to -S, enables HashEdDSA signatures instead of the default, pure EdDSA signatures.
HashEdDSA signatures:
- Require very little memory to be generated and verified, even with huge files
- Are faster to generate and verify than pure EdDSA signatures
- Require Minisign >= 0.6. In particular, they are not compatible with OpenBSD
signifytool. - Would not remain secure against (improbable) collisions in the Blake2b-512 hash function.
PureEdDSA signatures (default):
- Require as much memory as the size of the file to sign
- Cannot be used with files whose size is over 1 Gb
- Are compatible with all Minisign versions, as well as OpenBSD
signify. - Would remain secure against (improbable) collisions in the Blake2b-512 hash function.