keybase / keybase-issues

A single repo for managing publicly recognized issues with the keybase client, installer, and website.
902 stars 37 forks source link

Private key format is unfamiliar to me #867

Closed xaprb closed 10 years ago

xaprb commented 10 years ago

When I generated a new key in the browser, it wasn't obvious to me what I should do with the encrypted private key. The public key was in the well-known GPG format that looked familiar to me, but I didn't recognize the format of the private key, and I couldn't seem to decrypt it when I saved it to a file on my computer. Maybe some more documentation, or just using the standard GPG private key format, is a better way to do it.

malgorithms commented 10 years ago

You can export your key in standard PGP armored format. If you generate on the site and choose to encrypt and save to the server, we use TripleSec, which does extensive passphrase stretching (https://keybase.io/triplesec). I think you might've stumbled into our display of the latter, which we show to demonstrate what's being posted to the server.

If you do keep your private key on the server, you can get the regular armored format from your profile page by clicking the gear, and converting it from triplesec to a standard armored-passphrase-protected:

Screen clip:

image

But your point is valid, this shouldn't be confusing...will work on the messaging there.

malgorithms commented 10 years ago

I have no idea why my screenshot didn't display, but just click the gear on your profile, in the top right corner, and you'll see an option there to export your private key. this is after you've generated a key pair and posted to the server.

if you don't want keybase to host an encrypted copy of your private key at all, just uncheck that box when doing the key generation, and it will show you the standard armored format then, and you can download it at the end of the key generation process.