Releases

Every build is signed three ways: Apple notarization, a minisign signature over its manifest, and HTTPS in transit. You can check the first two yourself before you install.

Latest

No public release yet. This page will list every version with its notes, its SHA-256 sums, and its RELEASE.json plus signature. The direct build and the Mac App Store build are the same code from the same archive.

The app is a free download and opens any supported drive read-only; a one-time $9.99 licence turns on writing.

Homebrew

Once the first release is out:

brew install --cask betim-hodza/luksmac/luksmac

Homebrew checks the download against the checksum published here, and brew upgrade keeps it current. The app makes no network connection of its own; Homebrew does the fetching.

Verifying a download

Install minisign with brew install minisign, then run these from the folder you downloaded into:

minisign -Vm RELEASE.json -P <public key below>

That confirms the manifest was signed by the LuksMac release key. RELEASE.json lists a SHA-256 for every file, so compare the one for the package you downloaded:

shasum -a 256 LuksMac-*.pkg, then match that against the sha256 field in RELEASE.json.

A compromised download server cannot pass the signature check, and cannot roll you back to an older build.

Release signing key

minisign public key, also compiled into the app and included in every fulfilment email:

RWQ_PLACEHOLDER_replace_once_the_keypair_is_generated

Checking for updates from the app

LuksMac has a Check for Updates item that opens this page in your browser. It never contacts a server itself. The Mac App Store build updates through Apple.