keybase / keybase/keybase-issues

Encrypted message is decryptable by me, but not by the intended recipient

Open
#2,057 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

I attempted to send an encrypted message to another user whom I track, using the linux cli (Keybase Go 1.0.10 linux):

ojensen@human ~ $ keybase pgp encrypt rfmcpherson -m '****************'
▶ INFO Generating tracking statement for rfmcpherson
You last tracked rfmcpherson on 2016-02-10 10:46:03 CST
✔ <tracked> public key fingerprint: F02A A204 C17B 3591 4A4F 416E F97E A118 DD9A 576C
✔ <tracked> "rfmcpherson" on github: https://gist.github.com/0c8b2d26fd5b16be09f9
✔ <tracked> "richard_mcp" on hackernews: https://news.ycombinator.com/user?id=richard_mcp
✔ <tracked> "rfmcpherson" on twitter: https://twitter.com/rfmcpherson/status/697300964328501248
▶ INFO Your tracking statement is up-to-date
-----BEGIN PGP MESSAGE-----
Comment: https://keybase.io/download
Version: Keybase Go 1.0.10 (linux)
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=pwp0
-----END PGP MESSAGE-----

He attempted to decrypt it via the web interface, but received the message:
Error: no header found

On a whim I myself pasted the PGP message into the "decrypt" web interface page, and while I got a warning which said:
? unsigned; the author of this message is unknown.
it also successfully showed me the message that I encrypted with what was supposed to be rfmcpherson's public key. I can similarly decrypt the above message using keybase pgp decrypt

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the issue with the shown keybase pgp encrypt command and the resulting PGP message, then try decrypting it through the web interface as the intended recipient. Compare the CLI output and web error, and consider the issue done when the recipient can decrypt the message successfully.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, linux
Domain
cli, cryptography
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.