From eb4668408ceac440972213053ab0d97f6fa7ae89 Mon Sep 17 00:00:00 2001
From: stefan <stefan@i3mint.local>
Date: Mon, 23 Feb 2026 18:53:35 +0100
Subject: SLSA models added

Signed-off-by: stefan <stefan@i3mint.local>
---
 .../GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.svg           | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.svg

(limited to 'PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.svg')

diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.svg b/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.svg
new file mode 100644
index 0000000..3571e5c
--- /dev/null
+++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.svg
@@ -0,0 +1 @@
+<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="893px" preserveAspectRatio="none" style="width:575px;height:893px;background:#FFFFFF;" version="1.1" viewBox="0 0 575 893" width="575px" zoomAndPan="magnify"><title>DFD:  Multiple GnuPG Signatures for the NetBSD ISO image</title><defs/><g><g class="header" data-source-line="8"><text fill="#888888" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="273.0969" x="287.9031" y="14.9659">Combining Trust from the Web of Trust</text><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="169.4799" x="391.5201" y="29.7579">Timestamp: 2026-02-23 18:52 +0100</text></g><g class="title" data-source-line="6"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="409.9185" x="75.5408" y="58.6538">DFD:  Multiple GnuPG Signatures for the NetBSD ISO image</text></g><!--entity Alice--><g class="entity" data-qualified-name="Alice" data-source-line="15" id="ent0002"><ellipse cx="287" cy="91.7558" fill="#F1F1F1" rx="12" ry="12" style="stroke:#181818;stroke-width:0.5;"/><line style="stroke:#181818;stroke-width:0.5;" x1="275" x2="299" y1="105.7558" y2="105.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="30.7859" x="271.6071" y="122.7218">Alice</text></g><!--entity Bob--><g class="entity" data-qualified-name="Bob" data-source-line="16" id="ent0003"><ellipse cx="461" cy="91.7558" fill="#F1F1F1" rx="12" ry="12" style="stroke:#181818;stroke-width:0.5;"/><line style="stroke:#181818;stroke-width:0.5;" x1="449" x2="473" y1="105.7558" y2="105.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.1799" x="447.91" y="122.7218">Bob</text></g><!--entity Charly--><g class="entity" data-qualified-name="Charly" data-source-line="17" id="ent0004"><ellipse cx="113.0039" cy="91.7558" fill="#F1F1F1" rx="12" ry="12" style="stroke:#181818;stroke-width:0.5;"/><line style="stroke:#181818;stroke-width:0.5;" x1="101.0039" x2="125.0039" y1="105.7558" y2="105.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="41.8878" x="92.06" y="122.7218">Charly</text></g><!--entity ISORepo--><g class="entity" data-qualified-name="ISORepo" data-source-line="19" id="ent0005"><path d="M201.16,320.8158 C201.16,310.8158 287.0047,310.8158 287.0047,310.8158 C287.0047,310.8158 372.8494,310.8158 372.8494,320.8158 L372.8494,348.8837 C372.8494,358.8837 287.0047,358.8837 287.0047,358.8837 C287.0047,358.8837 201.16,358.8837 201.16,348.8837 L201.16,320.8158" fill="#F1F1F1" style="stroke:#181818;stroke-width:0.5;"/><path d="M201.16,320.8158 C201.16,330.8158 287.0047,330.8158 287.0047,330.8158 C287.0047,330.8158 372.8494,330.8158 372.8494,320.8158" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="151.6894" x="211.16" y="349.7818">NetBSD ISO Repository</text></g><!--entity SigStore--><g class="entity" data-qualified-name="SigStore" data-source-line="20" id="ent0006"><path d="M204.18,838.8858 C204.18,828.8858 287.0007,828.8858 287.0007,828.8858 C287.0007,828.8858 369.8214,828.8858 369.8214,838.8858 L369.8214,866.9537 C369.8214,876.9537 287.0007,876.9537 287.0007,876.9537 C287.0007,876.9537 204.18,876.9537 204.18,866.9537 L204.18,838.8858" fill="#F1F1F1" style="stroke:#181818;stroke-width:0.5;"/><path d="M204.18,838.8858 C204.18,848.8858 287.0007,848.8858 287.0007,848.8858 C287.0007,848.8858 369.8214,848.8858 369.8214,838.8858" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="145.6414" x="214.18" y="867.8518">Public Signature Store</text></g><!--entity P1--><g class="entity" data-qualified-name="P1" data-source-line="22" id="ent0007"><ellipse cx="287" cy="218.8158" fill="#F1F1F1" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="93.8976" x="240.0512" y="250.7818">Download ISO</text></g><!--entity P2--><g class="entity" data-qualified-name="P2" data-source-line="23" id="ent0008"><ellipse cx="287" cy="450.8858" fill="#F1F1F1" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="152.5154" x="210.7423" y="482.8518">Compute SHA256 Hash</text></g><!--entity P3--><g class="entity" data-qualified-name="P3" data-source-line="24" id="ent0009"><ellipse cx="287" cy="593.8858" fill="#F1F1F1" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="92.7917" x="240.6042" y="625.8518">Sign ISO Hash</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="81.5217" x="240.6042" y="644.9197">(Private Key)</text></g><!--entity P4--><g class="entity" data-qualified-name="P4" data-source-line="25" id="ent0010"><ellipse cx="287" cy="736.8858" fill="#F1F1F1" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="115.7516" x="229.1242" y="768.8518">Publish Signature</text></g><!--link Alice to P1--><g class="link" data-entity-1="ent0002" data-entity-2="ent0007" data-link-type="dependency" data-source-line="27" id="lnk11"><path d="M287,127.0758 C287,153.3258 287,187.2558 287,203.9958" fill="none" id="Alice-to-P1" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="287,209.9958,291,200.9958,287,204.9958,283,200.9958,287,209.9958" style="stroke:#181818;stroke-width:1;"/></g><!--link P1 to ISORepo--><g class="link" data-entity-1="ent0007" data-entity-2="ent0005" data-link-type="dependency" data-source-line="28" id="lnk12"><path d="M287,227.6558 C287,244.4658 287,278.5358 287,304.3658" fill="none" id="P1-to-ISORepo" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="287,310.3658,291,301.3658,287,305.3658,283,301.3658,287,310.3658" style="stroke:#181818;stroke-width:1;"/></g><!--link ISORepo to P2--><g class="link" data-entity-1="ent0005" data-entity-2="ent0008" data-link-type="dependency" data-source-line="29" id="lnk13"><path d="M287,359.2058 C287,385.0058 287,419.1458 287,436.0058" fill="none" id="ISORepo-to-P2" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="287,442.0058,291,433.0058,287,437.0058,283,433.0058,287,442.0058" style="stroke:#181818;stroke-width:1;"/></g><!--link P2 to P3--><g class="link" data-entity-1="ent0008" data-entity-2="ent0009" data-link-type="dependency" data-source-line="30" id="lnk14"><path d="M287,459.8758 C287,484.6858 287,554.2958 287,578.9858" fill="none" id="P2-to-P3" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="287,584.9858,291,575.9858,287,579.9858,283,575.9858,287,584.9858" style="stroke:#181818;stroke-width:1;"/></g><!--link P3 to P4--><g class="link" data-entity-1="ent0009" data-entity-2="ent0010" data-link-type="dependency" data-source-line="31" id="lnk15"><path d="M287,602.8758 C287,627.6858 287,697.2958 287,721.9858" fill="none" id="P3-to-P4" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="287,727.9858,291,718.9858,287,722.9858,283,718.9858,287,727.9858" style="stroke:#181818;stroke-width:1;"/></g><!--link P4 to SigStore--><g class="link" data-entity-1="ent0010" data-entity-2="ent0006" data-link-type="dependency" data-source-line="32" id="lnk16"><path d="M287,745.7258 C287,762.5358 287,796.6058 287,822.4358" fill="none" id="P4-to-SigStore" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="287,828.4358,291,819.4358,287,823.4358,283,819.4358,287,828.4358" style="stroke:#181818;stroke-width:1;"/></g><!--link Bob to P1--><g class="link" data-entity-1="ent0003" data-entity-2="ent0007" data-link-type="dependency" data-source-line="34" id="lnk17"><path d="M444.63,113.1558 C408.59,137.0858 328.399,190.3377 300.799,208.6577" fill="none" id="Bob-to-P1" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="295.8,211.9758,305.5106,210.3312,299.9658,209.2107,301.0864,203.6659,295.8,211.9758" style="stroke:#181818;stroke-width:1;"/></g><!--link Bob to P2--><g class="link" data-entity-1="ent0003" data-entity-2="ent0008" data-link-type="dependency" data-source-line="35" id="lnk18"><path d="M458.85,127.1358 C453.71,175.2458 437.4,283.0358 390,358.8858 C364.71,399.3558 321.1744,428.9822 301.1044,441.3822" fill="none" id="Bob-to-P2" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="296,444.5358,305.759,443.2082,300.2536,441.9078,301.5541,436.4024,296,444.5358" style="stroke:#181818;stroke-width:1;"/></g><!--link Bob to P3--><g class="link" data-entity-1="ent0003" data-entity-2="ent0009" data-link-type="dependency" data-source-line="36" id="lnk19"><path d="M463.96,127.0258 C465.82,143.8558 468.05,166.6458 469,186.8158 C475.43,322.9758 459.06,365.9658 389,482.8858 C362.36,527.3458 320.0946,565.2972 300.5546,581.7072" fill="none" id="Bob-to-P3" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="295.96,585.5658,305.4244,582.8409,299.7889,582.3503,300.2795,576.7147,295.96,585.5658" style="stroke:#181818;stroke-width:1;"/></g><!--link Bob to P4--><g class="link" data-entity-1="ent0003" data-entity-2="ent0010" data-link-type="dependency" data-source-line="37" id="lnk20"><path d="M477.48,122.2258 C507.5,160.6258 568,248.6058 568,333.8558 C568,333.8558 568,333.8558 568,451.8858 C568,610.7258 348.6898,710.3414 301.2598,730.0714" fill="none" id="Bob-to-P4" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="295.72,732.3758,305.566,732.6123,300.3365,730.4554,302.4934,725.2259,295.72,732.3758" style="stroke:#181818;stroke-width:1;"/></g><!--link Charly to P1--><g class="link" data-entity-1="ent0004" data-entity-2="ent0007" data-link-type="dependency" data-source-line="39" id="lnk21"><path d="M134.34,116.4558 C172.63,141.8758 246.5116,190.9367 273.0616,208.5667" fill="none" id="Charly-to-P1" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="278.06,211.8858,272.7752,203.575,273.8947,209.1199,268.3497,210.2395,278.06,211.8858" style="stroke:#181818;stroke-width:1;"/></g><!--link Charly to P2--><g class="link" data-entity-1="ent0004" data-entity-2="ent0008" data-link-type="dependency" data-source-line="40" id="lnk22"><path d="M115.15,127.1358 C120.29,175.2458 136.6,283.0358 184,358.8858 C209.29,399.3558 252.8256,428.9822 272.8956,441.3822" fill="none" id="Charly-to-P2" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="278,444.5358,272.4459,436.4024,273.7464,441.9078,268.241,443.2082,278,444.5358" style="stroke:#181818;stroke-width:1;"/></g><!--link Charly to P3--><g class="link" data-entity-1="ent0004" data-entity-2="ent0009" data-link-type="dependency" data-source-line="41" id="lnk23"><path d="M111.45,127.1758 C110.07,156.8258 109.2,207.7658 116,250.8158 C132.8,357.2358 132.67,389.2858 186,482.8858 C211.54,527.7158 253.787,565.4791 273.397,581.7891" fill="none" id="Charly-to-P3" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="278.01,585.6258,273.6483,576.7954,274.1658,582.4286,268.5327,582.9461,278.01,585.6258" style="stroke:#181818;stroke-width:1;"/></g><!--link Charly to P4--><g class="link" data-entity-1="ent0004" data-entity-2="ent0010" data-link-type="dependency" data-source-line="42" id="lnk24"><path d="M92.62,127.2658 C61.58,167.9358 6,252.1458 6,333.8558 C6,333.8558 6,333.8558 6,451.8858 C6,610.7258 225.3102,710.3414 272.7402,730.0714" fill="none" id="Charly-to-P4" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="278.28,732.3758,271.5066,725.2259,273.6635,730.4554,268.434,732.6123,278.28,732.3758" style="stroke:#181818;stroke-width:1;"/></g><?plantuml-src LL1DJyCm3BtxLtYL4EEm0-tWC0aaO693Q50n92J49LszDLgJL4aAwh_7JTTrooNlsS_F7tY9UvAQS2jiHdeqWaiS-O8KePAApCwAgW1mUwahOOL2LuZS_4czuuhI4S2dz2NX_7a-GrpLfPSLquMkqmMkvKuBNrjok3KMsHRVo3-kv_YoVaUfn8xh2n8vMRZ39wCogLldJrixZrjhLAZveWpDzX3bVegS5wgQuKKkF8sZXjzajPhaEUxtCwNmExf289qVhFcHzj8t-53A3VNaqMGzV2g4BHi0zXEPS8JHoPmVL1adlR5DXCAreJPoeathZ7s7RN7DOWfYZWK2i95smuU9vkPFbqRahK-GfDV775-WgZtNBn_YcrjS2bTqalWeQPk4gThaZnwdLlxo4V2LcgjEcnorOIvN38DrWYb0k0DE9lTjz_Gwe7wlmzzbOqZZ3YMG9XsQGZeDQ5YEJzcx7M4ym6I0tBmxTgy_PV4PIyxO5Fu1?></g></svg>
\ No newline at end of file
-- 
cgit v1.2.3