Skip to content
This repository was archived by the owner on May 17, 2026. It is now read-only.
This repository was archived by the owner on May 17, 2026. It is now read-only.

stronger private key encryption? #4

@ghscuuo

Description

@ghscuuo

Great tool, thanks! Love that it can be used offline on a chromebook, factory reset, in guest mode, in a browser, loaded from a thumbdrive, and that it has the file import/export function.

I would like the encryption around my private key to be as strong as practical. This is for a very high-value, but very rarely used, private key. I don't care about size or speed.

From this tool:
$ gpg --verbose --list-packets ~/junk/0xB4A67CAD-sec.asc | grep -e iter.salt -e count
gpg: armor header: Version: Keybase OpenPGP v2.0.76
gpg: armor header: Comment: https://keybase.io/crypto
iter+salt S2K, algo: 9, SHA1 protection, hash: 8, salt: AE0B2E0F024269C8
protect count: 65536 (96)

How can we make the s2k options configurable, maybe something like these?:
--s2k-cipher-algo AES256
--s2k-digest-algo SHA256+
--s2k-mode 3
--s2k-count 65011712

Thanks in advance.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions