keybase / keybase/keybase-issues
Unable decrypt messages from web UI if keys are all stored on Smart Cards
- Dominant language
- No language data
- Stars
- 899
- Forks
- 40
- PR merge metrics
- No merged PRs in 30d
Description
I have 2 keys, both of which are stored on Yubikeys added to my Keybase account.
Unfortunately, if I encrypt a test message with the web UI and try to decrypt it with:
```keybase pgp decrypt -i ~/gpgCerts/m.asc```
I get asked for a passphrase to decrypt my key, I have tried inputting the Yubikey pin, but regardless of the value input it keeps prompting until I close the popup, at which point it repeats the process for the other Yubikey, before giving up.
Trying to decrypt messages without using the pgp command fails, as the format is incorrect.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reproducing the web UI encryption flow with both keys stored on Yubikeys, then run `keybase pgp decrypt -i ~/gpgCerts/m.asc` and observe the passphrase prompts. Done means messages encrypted through the web UI can be decrypted with the Yubikey-backed keys without repeated prompts or an incompatible format.
Written by the indexing model from the issue text.
Assessment
- Domain
- cryptography, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100