Many Linux distributions rely on cryptographic signatures for their packages and release artifacts. However, most of the used signing solutions either do not rely on hardware backed private key material or are run in untrusted environments.

This presentation will provide a general overview of the Signstar project, which is currently under development by Arch Linux to provide a generic signing solution based on a Hardware Security Module (HSM).