NOTARY(1)

NAME
sign, enroll, verify, key, notaryd - sign and verify certificates

SYNOPSIS
notary sign

notary enroll [ -n ] name

notary verify name xsum text

lmask xn /usr/notary/notaryd [ -m mtpt ] [ -d dir ]

notary key

DESCRIPTION
Notary provides a document-authentication service. Any user may `sign' a document by presenting it and a secret key to the notary. The notary returns a certificate (a cryptographic checksum made with the secret key). For the certificate to be useful, the key must be enrolled with the notary under some public name. Given the certificate and the public name, any user may ask the notary to authenticate the document by verifying that it is indeed as certified.

Sign writes on the standard output a certificate for its standard input. The secret key is demanded from the terminal.

Enroll prompts the terminal for a secret key to associate with the public name. Unless this is a new enrollment for name, indicated by option -n, the previous value of the key is demanded from the terminal. If a trivial new key is presented, the name is erased from the database.

Verify tells whether xsum is the checksum of text, figured with the enrolled key for the public name.

Notaryd is the notary daemon, which mounts itself on mtpt (default and keeps its log files and database in directory dir (default The database is encrypted, so that although notaryd is normally started by rc(8), it cannot serve other requests until it has been primed by a request, which obtains the notary's master key from the terminal.

FILES

SEE ALSO
notary(3)