Prepare 1.2.0 release, upgrade to ECDSA keypair over secp384r1

CHANGELOG.md

@@ -1,7 +1,12 @@
-### Unreleased
+### Version 1.2.0 - 2015-02-05
 
 * Whitespace and other cosmetic changes
 * Added a changelog.
+* We now ship with a command line utility to build a PHP Archive from the 
+  command line.
+
+  Every time we publish a new release, we will also upload a .phar
+  to Github. Our public key is signed by our GPG key.
 
 ### Version 1.1.6 - 2015-01-29
 

README.md

@@ -34,7 +34,20 @@ to a newer version of PHP immediately.
 
     composer require paragonie/random_compat
 
-**Manually:**
+**Signed PHP Archive:**
+
+As of version 1.2.0, we also ship an ECDSA-signed PHP Archive with each stable 
+release on Github.
+
+1. Download [the `.phar`, `.phar.pubkey`, and `.phar.pubkey.asc`](https://github.com/paragonie/random_compat/releases/latest) files.
+2. (**Recommended** but not required) Verify the PGP signature of `.phar.pubkey` 
+   (contained within the `.asc` file) using the [PGP public key for Paragon Initiative Enterprises](https://paragonie.com/static/gpg-public-key.txt).
+3. Extract both `.phar` and `.phar.pubkey` files to the same directory.
+4. `require_once "/path/to/random_compat.phar";`
+5. When a new version is released, you only need to replace the `.phar` file;
+   the `.pubkey` will not change (unless our signing key is ever compromised).
+
+**Manual Installation:**
 
 1. Download [a stable release](https://github.com/paragonie/random_compat/releases/latest).
 2. Extract the files into your project.

dist/random_compat.phar.pubkey

@@ -1,9 +1,5 @@
 -----BEGIN PUBLIC KEY-----
-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56Ododgbfwfg+QAxOPex
-HtofrcX6DR6wOJ9H1E7LZiOWWBe1pR85oqBbWYC/0r858/KeMnVj6cH0KQ+FAWxE
-VqKuX5oyl1u2fTKTMI0KIBXMu1CxWHKbZBHEtur8zEgoPyhMzOxCbKDtcfHLuKTK
-pWBAsakH0LY6vVzJXqsLjsKJt65CeNlDAs8PhYnrX69bgb6M5u30fdTjhnBKeEJf
-lKx9YIrYN3fwUvIxw93g+4mQQKOzg4nPvjVXabhUdBLi/X8eJLVSCbp7/Lisj/Uj
-kzNBfYsd4b9vZnGsRVW4m3/+tyRSAEY3atio1KfoYKnqb2aPdfLxaKc03xK2JyaU
-iQIDAQAB
+MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEEd+wCqJDrx5B4OldM0dQE0ZMX+lx1ZWm
+pui0SUqD4G29L3NGsz9UhJ/0HjBdbnkhIK5xviT0X5vtjacF6ajgcCArbTB+ds+p
++h7Q084NuSuIpNb6YPfoUFgC/CL9kAoc
 -----END PUBLIC KEY-----

dist/random_compat.phar.pubkey.asc

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.22 (MingW32)
+
+iQEcBAABAgAGBQJWtW1hAAoJEGuXocKCZATaJf0H+wbZGgskK1dcRTsuVJl9IWip
+QwGw/qIKI280SD6/ckoUMxKDCJiFuPR14zmqnS36k7N5UNPnpdTJTS8T11jttSpg
+1LCmgpbEIpgaTah+cELDqFCav99fS+bEiAL5lWDAHBTE/XPjGVCqeehyPYref4IW
+NDBIEsvnHPHPLsn6X5jq4+Yj5oUixgxaMPiR+bcO4Sh+RzOVB6i2D0upWfRXBFXA
+NNnsg9/zjvoC7ZW73y9uSH+dPJTt/Vgfeiv52/v41XliyzbUyLalf02GNPY+9goV
+JHG1ulEEBJOCiUD9cE1PUIJwHA/HqyhHIvV350YoEFiHl8iSwm7SiZu5kPjaq74=
+=B6+8
+-----END PGP SIGNATURE-----