v0.7.3

What's Changed

Bug Fixes

• Fix 8-byte alignment requirement for WIN_CERTIFICATE in overlay-bearing PE files

  Windows requires the WIN_CERTIFICATE structure to start at an 8-byte aligned offset. For overlay-bearing files (e.g., WiX Burn bundles), the signature position was not being aligned, causing Windows to reject signatures with error 0x80096010.

  The fix adds padding bytes after the overlay (before the signature) to ensure proper alignment, and includes this padding in the Authenticode hash computation.

Full Changelog: v0.7.1...v0.7.3

v0.7.1

Release v0.7.1

Binaries

Binaries for Windows, Linux, and macOS (Intel & Apple Silicon).

Windows binaries are code-signed using an EV certificate.

Linux x86_64 Binaries

Binary	Description
yubikey-signer-x86_64-unknown-linux-musl	Full version with local YubiKey support (requires pcscd)
yubikey-signer-remote-x86_64-unknown-linux-musl	Fully static, remote-only (no pcscd needed)
yubikey-proxy-x86_64-unknown-linux-musl	Proxy server for remote signing

For CI/CD pipelines: Use yubikey-signer-remote - it's fully static with zero dependencies.

ASUS Router / Embedded aarch64

Use yubikey-proxy-aarch64-unknown-linux-musl-direct-usb for ASUS routers
and similar embedded devices. This binary uses direct USB communication
(no pcscd required).

See README for usage instructions.

v0.7.0

Release v0.7.0

Binaries

Binaries for Windows, Linux, and macOS (Intel & Apple Silicon).

Windows binaries are code-signed using an EV certificate.

Linux x86_64 Binaries

Binary	Description
yubikey-signer-x86_64-unknown-linux-musl	Full version with local YubiKey support (requires pcscd)
yubikey-signer-remote-x86_64-unknown-linux-musl	Fully static, remote-only (no pcscd needed)
yubikey-proxy-x86_64-unknown-linux-musl	Proxy server for remote signing

For CI/CD pipelines: Use yubikey-signer-remote - it's fully static with zero dependencies.

ASUS Router / Embedded aarch64

Use yubikey-proxy-aarch64-unknown-linux-musl-direct-usb for ASUS routers
and similar embedded devices. This binary uses direct USB communication
(no pcscd required).

See README for usage instructions.

v0.6.2

Release v0.6.2

Binaries

Binaries for Windows, Linux, and macOS (Intel & Apple Silicon).

Windows binaries are code-signed using an EV certificate.

Linux x86_64 Binaries

Binary	Description
yubikey-signer-x86_64-unknown-linux-musl	Full version with local YubiKey support (requires pcscd)
yubikey-signer-remote-x86_64-unknown-linux-musl	Fully static, remote-only (no pcscd needed)
yubikey-proxy-x86_64-unknown-linux-musl	Proxy server for remote signing

For CI/CD pipelines: Use yubikey-signer-remote - it's fully static with zero dependencies.

ASUS Router / Embedded aarch64

Use yubikey-proxy-aarch64-unknown-linux-musl-direct-usb for ASUS routers
and similar embedded devices. This binary uses direct USB communication
(no pcscd required).

See README for usage instructions.

v0.6.1

Release v0.6.1

Binaries

Binaries for Windows, Linux, and macOS (Intel & Apple Silicon).

Windows binaries are code-signed using an EV certificate.

Linux x86_64 Binaries

Binary	Description
yubikey-signer-x86_64-unknown-linux-musl	Full version with local YubiKey support (requires pcscd)
yubikey-signer-remote-x86_64-unknown-linux-musl	Fully static, remote-only (no pcscd needed)
yubikey-proxy-x86_64-unknown-linux-musl	Proxy server for remote signing

For CI/CD pipelines: Use yubikey-signer-remote - it's fully static with zero dependencies.

ASUS Router / Embedded aarch64

Use yubikey-proxy-aarch64-unknown-linux-musl-direct-usb for ASUS routers
and similar embedded devices. This binary uses direct USB communication
(no pcscd required).

See README for usage instructions.

v0.6.0

Release v0.6.0

Binaries

Binaries for Windows, Linux, and macOS (Intel & Apple Silicon).

Windows binaries are code-signed using an EV certificate.

Linux x86_64 Binaries

Binary	Description
yubikey-signer-x86_64-unknown-linux-musl	Full version with local YubiKey support (requires pcscd)
yubikey-signer-remote-x86_64-unknown-linux-musl	Fully static, remote-only (no pcscd needed)
yubikey-proxy-x86_64-unknown-linux-musl	Proxy server for remote signing

For CI/CD pipelines: Use yubikey-signer-remote - it's fully static with zero dependencies.

ASUS Router / Embedded aarch64

Use yubikey-proxy-aarch64-unknown-linux-musl-direct-usb for ASUS routers
and similar embedded devices. This binary uses direct USB communication
(no pcscd required).

See README for usage instructions.

v0.5.2

Release v0.5.2

Binaries

Binaries for Windows, Linux, and macOS (Intel & Apple Silicon).

Windows binaries are code-signed using an EV certificate.

Linux x86_64 Binaries

Binary	Description
yubikey-signer-x86_64-unknown-linux-musl	Full version with local YubiKey support (requires pcscd)
yubikey-signer-remote-x86_64-unknown-linux-musl	Fully static, remote-only (no pcscd needed)
yubikey-proxy-x86_64-unknown-linux-musl	Proxy server for remote signing

For CI/CD pipelines: Use yubikey-signer-remote - it's fully static with zero dependencies.

ASUS Router / Embedded aarch64

Use yubikey-proxy-aarch64-unknown-linux-musl-direct-usb for ASUS routers
and similar embedded devices. This binary uses direct USB communication
(no pcscd required).

See README for usage instructions.

v0.5.1

Release v0.5.1

Binaries

Binaries for Windows, Linux, and macOS (Intel & Apple Silicon).

Windows binaries are code-signed using an EV certificate.

ASUS Router / Embedded aarch64

Use yubikey-proxy-aarch64-unknown-linux-musl-direct-usb for ASUS routers
and similar embedded devices. This binary uses direct USB communication
(no pcscd required).

See README for usage instructions.

v0.5.0

Release v0.5.0

Binaries

Binaries for Windows, Linux, and macOS (Intel & Apple Silicon).

ASUS Router / Embedded aarch64

Use yubikey-proxy-aarch64-unknown-linux-musl-direct-usb for ASUS routers
and similar embedded devices. This binary uses direct USB communication
(no pcscd required).

See README for usage instructions.

v0.3.4

Release v0.3.4

Binaries for Windows, Linux, and macOS (Intel & Apple Silicon).
See README for usage instructions.