#private-key #secret-key #openpgp #pgp #hardware-devices

sequoia-keystore-softkeys

A soft key (in-memory key) backend for Sequoia's private key store

3 releases (breaking)

0.3.0 Mar 24, 2024
0.2.0 Feb 20, 2024
0.1.0 Jan 21, 2024

#2220 in Cryptography

Download history 63/week @ 2024-02-12 210/week @ 2024-02-19 300/week @ 2024-02-26 57/week @ 2024-03-04 188/week @ 2024-03-11 71/week @ 2024-03-18 161/week @ 2024-03-25 172/week @ 2024-04-01 225/week @ 2024-04-08 167/week @ 2024-04-15

777 downloads per month
Used in 2 crates (via sequoia-keystore)

LGPL-2.0-or-later

29KB
541 lines

A soft key (in-memory key) backend for Sequoia's private key store.

The sequoia-keystore crate implements a server that manages secret key material. Secret key material can be stored in files, on hardware devices like smartcards, or accessed via the network. sequoia-keystore doesn't implement these access methods. This is taken care of by various backends.

This crate includes a backend that provides access to secret key material stored in files. These are called soft keys in contrast to keys managed by a separate piece of hardware.

If the keystore is configured to use .local/share/sequoia as its data directory, then the soft key backend uses .local/share/sequoia/keystore/softkeys. Specifically, it iterates over the files in that directory, and looks for binary encoded or ASCII-armor encoded OpenPGP certificates in files ending with .pgp or .asc; other files are silently ignored.

$ ls .local/share/sequoia/keystore/softkeys/
1234.pgp  1234.pgp.rev  alice.pgp  alice.pgp.rev  F44B66C85C9B7B02AF2D52FDEFF613897AD9CE21.pgp

Dependencies

~15–29MB
~434K SLoC