Description
Files can be signed and verified with a deliberately simple public-key signature tool. Developers, packagers, and administrators use minisign to prove that downloads, releases, or configuration files came from a trusted key.
It is a signature tool, not encryption for hiding file contents. Trust depends on protecting private keys and distributing public keys through a reliable channel.