Feature Request: Key QR Code export

google / end-to-end

End-To-End is a crypto library to encrypt, decrypt, digital sign, and verify signed messages (implementing OpenPGP)

Apache License 2.0

4.13k stars 298 forks source link

Feature Request: Key QR Code export #195

Closed koto closed 8 years ago

koto commented 9 years ago

From rum...@google.com on November 13, 2014 20:05:20

It'd be awesome if the public and private keys could be rendered as QR Codes, so that these can be easily imported into mobile phones, e.g. OpenKeychain.

For the public key, it'd probably be easiest to use the Google charts API to render the QR code image.
For the private key sending it somewhere else may not be a good idea, so rendering could use a library like qrcodejs.

Original issue: http://code.google.com/p/end-to-end/issues/detail?id=158

dlg-yahoo commented 9 years ago

W.r.t. private keys: Any functionality for exporting them via QR code needs to be carefully reviewed for its security implications. In particular,

S2K SKESK-protected keys should be considered equivalent (or worse than) plaintext;
any transfer mechanism should require both a local attacker and a network attacker for the private key to be accessible.

Would be delighted to see this for public keys, however.

koto commented 9 years ago

All various private/public key exports are part of a KeyRing redesign that now takes place.

sirdarckcat commented 8 years ago

if someone wants to take this over, please reopen the issue for further discussion.