Sign Offline PGP Public Master Signing Key into Keybase Sigchain
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 9.2k
- Forks
- 1.3k
- Avg merge
- 12h 58m
- Merged PRs (30d)
- 56
Description
I have my master pgp signing key offline, with only subkeys available to my machine running keybase. This is considered best practice.
keybase pgp select allows me to sign my public subkeys into the keybase sigchain, without importing the secret keys to the local keybase keychain.
Is there a way to associate my public master signing key with my keybase identity? If I understand properly, that would necessitate my being given a challenge text that I could take to the offline machine to sign and return to keybase.
If this is not possible, could it be added?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the existing keybase pgp select flow and the surrounding PGP sigchain code. Determine whether an offline master-key challenge can be supported without importing secret keys; done would mean associating the public master signing key with the Keybase identity while keeping the master key offline.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- cryptography, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100