OpenPGP key generation for `keyfork wizard generate-shard-secret` #64

New Issue

Closed

opened 2025-01-30 05:38:09 +00:00 by anton · 2 comments

anton commented

2025-01-30 05:38:09 +00:00

Owner

For generating for new key

keyfork wizard generate-shard-secret --threshold --max --keys-per-shard=<number_of_smartcards_per_operator> --output shardfile.asc --cert-output keyring.asc --derive-openpgp-cert encryption_cert.asc,userid="Whatever"

For generating based on an existing Shardfile

keyfork wizard generate-shard-secret --shard-to shardfile.asc --output shardfile.new.asc --cert-output keyring.new.asc --derive-openpgp-cert encryption_cert.new.asc,userid="Whatever"

Description

We need a way to generate a cert when using the keyfork wizard generate-shard-secret

This requires implementing code to support the following additional flag in the command:

`--derive-openpgp-cert "<cert_name>",userid="<user_id>"

## For generating for new key keyfork wizard generate-shard-secret --threshold <M> --max <N> --keys-per-shard=<number_of_smartcards_per_operator> --output shardfile.asc --cert-output keyring.asc --derive-openpgp-cert encryption_cert.asc,userid="Whatever" ## For generating based on an existing Shardfile keyfork wizard generate-shard-secret --shard-to shardfile.asc --output shardfile.new.asc --cert-output keyring.new.asc --derive-openpgp-cert encryption_cert.new.asc,userid="Whatever" ## Description We need a way to generate a cert when using the `keyfork wizard generate-shard-secret` This requires implementing code to support the following additional flag in the command: * `--derive-openpgp-cert "<cert_name>",userid="<user_id>"

anton added this to the Custody Framework project 2025-01-30 05:38:09 +00:00

anton changed title from ~~OpenPGP key generation for `keyfork wizard generate-shard-secret`~~ to OpenPGP key generation for `keyfork wizard generate-shard-secret --threshold...`

2025-01-30 05:39:21 +00:00

anton changed title from ~~OpenPGP key generation for `keyfork wizard generate-shard-secret --threshold...`~~ to OpenPGP key generation for `keyfork wizard generate-shard-secret`

2025-01-30 05:41:04 +00:00

anton referenced this issue from public/docs

2025-01-30 05:42:16 +00:00

add instructions for generating encryption keys #45