From 7a1dd92aeb382f8188289d8c0f131da566dc7491 Mon Sep 17 00:00:00 2001
From: Jesse Shawl <jesse@jesse.sh>
Date: Tue, 6 Feb 2024 19:28:40 -0600
Subject: [PATCH] add comment to private key from keypair

---
 lib/minisign/key_pair.rb       | 1 +
 spec/minisign/key_pair_spec.rb | 1 +
 2 files changed, 2 insertions(+)

diff --git a/lib/minisign/key_pair.rb b/lib/minisign/key_pair.rb
index 3c6ccfd..9187e04 100644
--- a/lib/minisign/key_pair.rb
+++ b/lib/minisign/key_pair.rb
@@ -22,6 +22,7 @@ def private_key
       @kdf_opslimit = kdf_opslimit_bytes.pack('C*')
       @kdf_memlimit = kdf_memlimit_bytes.pack('C*')
       Minisign::PrivateKey.new(
+        "untrusted comment: minisign secret key\n" +
         Base64.strict_encode64("Ed#{@kdf_algorithm}B2#{@kdf_salt}#{@kdf_opslimit}#{@kdf_memlimit}#{@keynum_sk}"),
         @password
       )
diff --git a/spec/minisign/key_pair_spec.rb b/spec/minisign/key_pair_spec.rb
index 0d9662a..aa78cca 100644
--- a/spec/minisign/key_pair_spec.rb
+++ b/spec/minisign/key_pair_spec.rb
@@ -8,5 +8,6 @@
   it 'generates a keypair with a password' do
     keypair = Minisign::KeyPair.new('secret password')
     expect(keypair.private_key).to be_truthy
+    File.write("test/generated/new-keypair.key", keypair.private_key)
   end
 end