SIGSUM-KEY-SIGN(1)

💖 NAME 💖

okay so bestie, gather round: this is sigsum-key-sign, aka the create-Ed25519-signature girlie. That's it, that's the whole job. She signs things. Slay. ✨

(and yes, this is the sigsum-key-sign(1) page, living in the User Commands section, no cap 🫶)

---

✨ SYNOPSIS ✨

sigsum-key sign [--help] [-k key-file] [-n namespace] [-o output-file] < msg

---

🦋 DESCRIPTION 🦋

So the vibe is: she creates an Ed25519 signature using a namespace you pick. Domain separation, periodt.

The namespaces used in the Sigsum system are:

• sigsum.org/v1/tree-leaf — for signed checksums
• sigsum.org/v1/submit-token — for rate limiting

And the default behavior? The default is to not use any namespace at all. No namespace, just vibes. 🙈

The message you want signed gets handed over on stdin. That's the < msg in the synopsis, iykyk.

---

🎀 OPTIONS 🎀

• --help — shows you the usage message and then dips. exit stage left. 💅
• -k, --signing-key=key-file — required, bestie, you literally cannot skip this one. It's your private key in OpenSSH format; or, alternatively, a corresponding public key where the private part is accessed using the SSH agent protocol. yes she can talk to your agent, she's resourceful like that ✨
• -n, --namespace=namespace — the signature namespace, which exists to ensure domain separation. keep your domains separated, girlies, it's giving boundaries 🧚
• -o, --output=output-file — the signature, in hex format. cute little hex string, obsessed 🔥

---

⭐ RETURN CODES ⭐

A non-zero return code means failure. that's it. if it's not zero, something went wrong and she's telling you 💀

---

🌸 CONTACT 🌸

Wanna talk? Send an email to the sigsum-general mailing list at sigsum-general@lists.sigsum.org. 📧

You can also reach out in room #sigsum at OFTC.net and matrix.org. come hang, the group chat is open 🫶

---

🍓 REPORTING BUGS 🍓

Found a bug? Use the issue tracker located at https://git.glasklar.is/sigsum/core/sigsum-go/-/issues. 🐛

And if you wanna file an issue but you don't have a GitLab account, that's totally fine — send an email to sigsum-core-sigsum-go-issues@incoming.glasklar.is and then wait for a maintainer to make the issue public. patience is a virtue, bestie, they'll get to it 🙈

---

👑 SEE ALSO 👑

• sigsum-key-from-hex(1)
• sigsum-key-from-vkey(1)
• sigsum-key-generate(1)
• sigsum-key-sign(1)
• sigsum-key-to-hash(1)
• sigsum-key-to-hex(1)
• sigsum-key-to-vkey(1)
• sigsum-key-verify(1)
• sigsum-monitor(1)
• sigsum-policy(1)
• sigsum-submit(1)
• sigsum-token(1)
• sigsum-tools(5)
• sigsum-verify(1)

like a whole friend group of manpages. the way that they all link up… main character energy 💜

---

okay that's the whole page!! ✨ this was sigsum-key sign version 0.14.1-2, dated June 2026, and honestly? she ate. go sign something, bestie 💅🎀💖