keybase / keybase/keybase-issues

Unable decrypt messages from web UI if keys are all stored on Smart Cards

Open
#3,126 6 comments 1 reaction 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

I have 2 keys, both of which are stored on Yubikeys added to my Keybase account.

Unfortunately, if I encrypt a test message with the web UI and try to decrypt it with:

```keybase pgp decrypt -i ~/gpgCerts/m.asc```

I get asked for a passphrase to decrypt my key, I have tried inputting the Yubikey pin, but regardless of the value input it keeps prompting until I close the popup, at which point it repeats the process for the other Yubikey, before giving up.

Trying to decrypt messages without using the pgp command fails, as the format is incorrect.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the web UI encryption flow with both keys stored on Yubikeys, then run `keybase pgp decrypt -i ~/gpgCerts/m.asc` and observe the passphrase prompts. Done means messages encrypted through the web UI can be decrypted with the Yubikey-backed keys without repeated prompts or an incompatible format.

Written by the indexing model from the issue text.

Assessment

Domain
cryptography, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.