Preferable way is to download tarball with the signature from official
website and, for example, run tests with benchmarks:
- $ wget http://gogost.cypherpunks.ru/gogost-4.1.0.tar.xz
- $ wget http://gogost.cypherpunks.ru/gogost-4.1.0.tar.xz.sig
- $ gpg --verify gogost-4.1.0.tar.xz.sig gogost-4.1.0.tar.xz
- $ xz -d < gogost-4.1.0.tar.xz | tar xf -
- $ make -C gogost-4.1.0 all bench
- $ echo hello world | ./gogost-4.1.0/streebog256
+ $ wget http://gogost.cypherpunks.ru/gogost-4.2.0.tar.xz
+ $ wget http://gogost.cypherpunks.ru/gogost-4.2.0.tar.xz.sig
+ $ gpg --verify gogost-4.2.0.tar.xz.sig gogost-4.2.0.tar.xz
+ $ xz -d < gogost-4.2.0.tar.xz | tar xf -
+ $ make -C gogost-4.2.0 all bench
+ $ echo hello world | ./gogost-4.2.0/streebog256
f72018189a5cfb803dbe1f2149cf554c40093d8e7f81c21e08ac5bcd09d9934d
And then you can include its source code in your project for example
like this:
$ mkdir -p myproj/src
- $ cp -r gogost-4.1.0/src/go.cypherpunks.ru myproj/src
+ $ cp -r gogost-4.2.0/src/go.cypherpunks.ru myproj/src
$ export GOPATH=$PWD/myproj
$ cd myproj/src
$ cat > main.go <<EOF
func main() {
h := gost34112012256.New()
- h.Write([]byte("hello world"))
+ h.Write([]byte("hello world\n"))
fmt.Println(hex.EncodeToString(h.Sum(nil)))
}
EOF
$ go run main.go
- c600fd9dd049cf8abd2f5b32e840d2cb0e41ea44de1c155dcd88dc84fe58a855
-
-GoGOST is also go-get-able. For example to use streebog256 utility:
-
- $ go get go.cypherpunks.ru/gogost/cmd/streebog256
+ f72018189a5cfb803dbe1f2149cf554c40093d8e7f81c21e08ac5bcd09d9934d
You have to verify downloaded tarballs integrity and authenticity to be
sure that you retrieved trusted and untampered software. GNU Privacy
Look in PUBKEY.asc file.
$ gpg --auto-key-locate dane --locate-keys gogost at cypherpunks dot ru
$ gpg --auto-key-locate wkd --locate-keys gogost at cypherpunks dot ru
+
+GoGOST is also go-get-able. For example to use streebog256 utility:
+
+ $ go get go.cypherpunks.ru/gogost/cmd/streebog256
+
+go.cypherpunks.ru uses CACert.org certificate authority, that is not
+included by default in some operating system distributions and probably
+you have to install it in your system, because "go get" uses HTTPS
+connections. If you have issues using either sum.golang.org or
+proxy.golang.org, then you can disable their usage with
+GOPRIVATE=go.cypherpunks.ru/gogost environment variable.
+
+Also you can use "replace" feature inside your go.mod, like:
+
+ require go.cypherpunks.ru/gogost/v4 v4.2.0
+ replace go.cypherpunks.ru/gogost/v4 => /home/stargrave/gogost-4.2.0/src/go.cypherpunks.ru/gogost/v4