Skip to content

Arnas Verify 0.1.0

Latest
Latest

Choose a tag to compare

View all tags
@natearnas natearnas released this 12 Aug 18:23
· 6 commits to main since this release
v0.1.0
1b1cbce

Public reference release of Arnas Verify: offline, computer-locked (machine-bound) signed license verification.

Added

  • Verifier library for flat signed JSON licenses: RSA-PSS-SHA256 (PSS salt length 32) over canonical JSON, with product binding, mandatory machine_id binding (one license per computer), and calendar expiry (YYYY-MM-DD).
  • Machine fingerprint helper (get_machine_id / arnas-verify --print-machine-id): Windows WMI hardware fingerprint (UUID + baseboard + BIOS serial), with portable mac/hostname fallback.
  • Standard license-file lookup locations (per-user first, then machine-wide) for Windows and POSIX.
  • arnas-verify CLI with documented exit codes.
  • Intentionally committed demo keypair, demo-only issuance module, and a signed example license.
  • Deployment-hardening guidance (build-time public-key embedding, private-key custody, native verify, issuer ledger).
  • Test suite covering cryptographic, structural, machine-binding, CLI, and location behavior.

License

PolyForm Noncommercial License 1.0.0, with commercial licenses available from Arnas Technologies, LLC.

Note: The demo keypair in demo_keys/ (including the private key) is intentionally public and confers no trust. This repository is a verifier reference — not a production signing authority or entitlement ledger.

Assets 2
Loading