Skip to content

v5.0.9

Choose a tag to compare

View all tags
@github-actions github-actions released this 31 Aug 14:24
· 122 commits to main since this release
v5.0.9
1e5e1c7

Changelog (Commits)

  • bump: version v5.0.9 (1e5e1c7)
  • fix: prevent hover preview from overriding keyboard selection (e4cfd8e)

Security Verification

SHA-256 Checksums

  • Lertaro-Setup.exe (x64): f4a660070363fcc370eb67dd5c152c0d07bdd74ac46e4ff7ec11c1f3a4742edb
  • Lertaro-Portable.zip (x64): 9f5334491eb3f4a4b5f63baa239856ebf36efe67cd3d274e2a07efa7a5cb140a
  • Lertaro-Setup-arm64.exe (arm64): 1618a58c5790d382ea4baec47d70f1bd32d85371401ee6ef905267a14c6cfaab
  • Lertaro-Portable-arm64.zip (arm64): 863837c9764eadd68696fea7bd3276e7f08aad7efea8036b1bd5b1e61568af20

Signature Verification (ECDsa NistP256)

The portable ZIP release is signed using our official release key.

To verify the signature manually using OpenSSL:

# 1. Save the public key shown above to 'public_key.pem'
# 2. Run the following command:
openssl dgst -sha256 -verify public_key.pem -signature Lertaro-Portable.zip.sig Lertaro-Portable.zip
# Expected output: Verified OK

To verify the signature manually in PowerShell (.NET 5.0+):

$zipBytes = [System.IO.File]::ReadAllBytes('Lertaro-Portable.zip')
$sigBytes = [System.IO.File]::ReadAllBytes('Lertaro-Portable.zip.sig')
$ecdsa = [System.Security.Cryptography.ECDsa]::Create()
$pubKeyPem = '-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE117370jTbSPgIwHLntC+Bi3SD6gJ
QfxAySjSpUWa6zy4n0YHVv/ZWXM9zQlF2LTqpQC0iHNdJNH+MKU9UvDMTQ==
-----END PUBLIC KEY-----'
$ecdsa.ImportFromPem($pubKeyPem)
$ecdsa.VerifyData($zipBytes, $sigBytes, [System.Security.Cryptography.HashAlgorithmName]::SHA256, [System.Security.Cryptography.DSASignatureFormat]::Rfc3279DerSequence)
# Expected output: True
Assets 8
Loading