Heiko / is on Nostr

Assorted OpenPGP-related activities, mostly in Rust. Including:

- Introduction to OpenPGP for application developers: https://openpgp.dev
- OpenPGP card tool for Git signing and verification: https://crates.io/crates/openpgp-card-tool-git
- Simple standalone SSH Agent for OpenPGP cards: https://crates.io/crates/openpgp-card-ssh-agent
- https://crates.io/crates/rsop
- Decentralized certification authority tool https://openpgp-ca.org
- Rust client libraries for OpenPGP card (and other HSM)

Codeberg: https://codeberg.org/heiko
OpenPGP for application developers: https://openpgp.dev
OpenPGP CA: https://openpgp-ca.org
OpenPGP: 23da7c0eaa711f0170013595b518d342eb2d4805

Last Notes

2024-07-10 15:10:47

I just released OpenPGP CA version 0.14.0 (https://crates.io/crates/openpgp-ca)
OpenPGP CA is a tool for certifying and managing keys, in groups or organizations.
This version changes the default cipher suite for CA keys to Curve 25519.
And the same for CA-generated user keys.
This version also exposes optional control over the cipher suite of new keys via the CLI.
Thanks @npub10ey…tkad for impulses and PRs!

2024-06-18 15:11:44

I just made a set of #OpenPGP related tool releases:
oct v0.11.1, a tool for inspecting, configuring and using OpenPGP cards (https://crates.io/crates/openpgp-card-tools)
oct-git v0.1.2, a tool for #Git signing and verification with a focus on OpenPGP cards (https://crates.io/crates/openpgp-card-tool-git)
rsop v0.3.4, a #SOP CLI tool with OpenPGP card support (https://crates.io/crates/rsop)
Thanks @npub154c…494f for the actionable pointer to aim for non-pre dependencies, for packaging purposes.
#PGP #GnuPG #GPG

2024-06-09 20:13:01

Apparently the EU elections are telling us that we need to continue working on decentralized privacy tools.

2024-06-03 20:12:14

- reply

Btw 😏, oct is packaged for #ArchLinux:
https://archlinux.org/packages/extra/x86_64/openpgp-card-tools/

2024-06-03 19:57:20

I'm excited to announce the release of oct v0.11.0 🚀️
oct is a tool for inspecting, configuring and using #OpenPGP cards 🔒 (https://crates.io/crates/openpgp-card-tools)
oct can now set up cards in #KDF mode, the text output format was improved for readability, and some minor bugs were fixed.
Finally, version 0.11.0 uses #rPGP, a pure #Rust OpenPGP library 🦀.
As a result, the binary on #Linux links to four fewer dynamic libraries, while at the same time being 10% smaller.
#RustLang #GnuPG #gpg #Nitrokey #YubiKey

2024-05-28 20:20:00

During our work towards openpgp-card v0.5 (https://fosstodon.org/@hko/112520486266094575), we wondered how to deal with secrets in log files.
It's often good if secrets are redacted in logs: This avoids accidental publication of a user PIN (or decrypted payload) in bug reports.
On the other hand, it can be useful for a developer to have full and verbatim logs (including secrets) for debugging.
We started work on this, but would like to hear from you. What should we do?
#smartcard #logging #OpenPGP #debug #RustLang

2024-05-28 19:59:25

I just released openpgp-card v0.5.0: https://crates.io/crates/openpgp-card/0.5.0
openpgp-card is a Rust client library for using #OpenPGP card hardware security devices.
This version comes with a significantly adjusted API:
The low-level API has been moved to the "ocard" module. At the top level of the crate, more convenient abstractions are now directly available (including PIN handling for cards in KDF mode).
#HSM #RustLang #PGP #GnuPG #gpg #Rust