keybase / keybase/keybase-issues
Private key inconsistent between initial creation and export
- Dominant language
- No language data
- Stars
- 899
- Forks
- 40
- PR merge metrics
- No merged PRs in 30d
Description
When creating a key from the keybase interface you get an option to download the private key and / or upload it to keybase for convenience.
In the event of you saving the private and allow keybase to store it; performing an "Export my private key from Keybase" provides you a similar but different private key. In my experience after a few hundred characters the key begins to change.
I'm no crypto export, but I'd assume these keys should identical.
Further to this, performing a gpg --import of the originally downloaded key (offered on creation) results in:
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0
However attempting an import of the exported key (offered after keybase storage) succeeds.
Contributor guide
No contributing guide indexed for this repository
Research direction
Reproduce the keybase interface flow: download a private key during creation, allow Keybase to store it, export it later, and run gpg --import on both files. Compare the two outputs and determine whether they should match; done means the intended private-key export is consistent and imports successfully.
Written by the indexing model from the issue text.
Assessment
- Domain
- cryptography
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100