grarpamp's email address proposed a way to sign messages using age.
You publicise a private key, and encrypt hashes to it.
age ostensibly has a way to generate public keys from private keys, in
this commit, haven't looked:
https://github.com/FiloSottile/age/commit/f31d4eca473cb904174bc3658f84dbc1b6...
seems it would be fun to use the message signing approach. My local
age is version 1.0.0~rc1 and does not yet have the -y option needed
for making the encrypted signatures.
$ age --version
1.0.0~rc1
I seem to already have a ~/src/age folder with git sources, so I tried
to pull the latest changes and rebuild. Unfortunately, the latest
changes are a different codebase from mine:
ubuntu@ubuntu:~/src/age $ git remote -v
origin https://github.com/FiloSottile/age.git (fetch)
origin https://github.com/FiloSottile/age.git (push)
ubuntu@ubuntu:~/src/age $ git pull
fatal: refusing to merge unrelated histories
It turns out my repo was on the master branch, which has somehow had
its history entirely rebased. Whereas the branch renamed to main, has
history that aligns with my history.
$ git merge origin/main # fast-forwards fine
$ git checkout -b main
$ git merge origin/master # fails, unrelated histories
repo commits:
ubuntu@ubuntu:~/src/age $ git log origin/master | head
commit 80a2ea62921170c29f66461b9c1221746ad9b0ab
Author: Filippo Valsorda