diff --git a/static/build.html b/static/build.html index b427b62a..63eee683 100644 --- a/static/build.html +++ b/static/build.html @@ -546,7 +546,7 @@ m aapt2

You should set a passphrase for the signing keys to keep them at rest until you need to sign a release with them. The GrapheneOS scripts (make_key and - encrypt_keys.sh) encrypt the signing keys using scrypt for key derivation + encrypt-keys.sh) encrypt the signing keys using scrypt for key derivation and AES256 as the cipher. If you use swap, make sure it's encrypted, ideally with an ephemeral key rather a persistent key to support hibernation. Even with an ephemeral key, swap will reduce the security gained from encrypting the keys since it breaks the @@ -586,12 +586,12 @@ cd ../..

Encrypting keys

-

You can (re-)encrypt your signing keys using the encrypt_keys script, +

You can (re-)encrypt your signing keys using the encrypt-keys script, which will prompt for the old passphrase (if any) and new passphrase:

-
script/encrypt_keys.sh keys/raven
+
script/encrypt-keys.sh keys/raven
-

The script/decrypt_keys.sh script can be used to remove encryption, +

The script/decrypt-keys.sh script can be used to remove encryption, which is not recommended. The script exists primarily for internal usage to decrypt the keys in tmpfs to perform signing.

@@ -668,11 +668,11 @@ cd ../.. update if one exists for going directly from the currently installed version to the latest release. In order to generate a delta update, the original signed target files package for both the source version and target version are needed. The - script/generate_delta.sh script provides a wrapper script for generating + script/generate-delta.sh script provides a wrapper script for generating delta updates by passing the device, source version build number and target version build number. For example:

-
script/generate_delta.sh raven 2021102503 2021102613
+
script/generate-delta.sh raven 2021102503 2021102613

The script assumes that the releases are organized in the following directory structure: