Heiko

Various OpenPGP-related activities (mostly in Rust):

"OpenPGP for application developers" (https://openpgp.dev)

SOP with rPGP (https://crates.io/crates/rsop)
Contributor to rPGP (https://mastodon.social/@rpgp)

OpenPGP card (HSM) projects:
* "oct" CLI tool (https://crates.io/crates/openpgp-card-tools)
* Git signing (https://crates.io/crates/openpgp-card-tool-git)
* SSH Agent (https://crates.io/crates/openpgp-card-ssh-agent)

Decentralized OpenPGP certifications (https://openpgp-ca.org)

Codeberg: https://codeberg.org/heiko
OpenPGP for application developers: https://openpgp.dev
OpenPGP: 23da7c0eaa711f0170013595b518d342eb2d4805

Last Notes

2025-04-24 07:48:57 UTC

- reply

i also got email notifications for quite a few spammy issue tracker entries.
Looks like codeberg cleaned them up already, though.
This is a very annoying timeline we're on.
But yay for codeberg!

2025-03-07 14:20:54 UTC

- reply

... I have, however, enjoyed the "Stateless OpenPGP (SOP)" CLI standard - and even implemented a subset of it (see https://crates.io/crates/rsop), based on the excellent @npub1f5g…3gr2 OpenPGP library
There are many SOP implementations, all with the same CLI. Anyone who would like to play with encryption and digital signatures might enjoy a look at SOP.
A few SOPs even implement the new OpenPGP RFC 9580, which introduces modern encryption using AEAD mechanisms, and surely more will follow.

2025-03-07 13:27:17 UTC

- reply

I'm definitely also not smart enough to use GnuPG 🤷

2025-02-28 12:04:12 UTC

- reply

... actually, to add to this: the oct-git tool is a shared project by me and @npub1859…ycwv
Even he has since shifted towards git signing with ssh keys, his work constitutes the main portion of oct-git 😃

2025-02-10 00:06:58 UTC

I just released versions 0.6.2 of rsop, a stateless #OpenPGP ("SOP") CLI tool based on @npub1f5g…3gr2:
https://crates.io/crates/rsop/
Changes since rsop 0.6.0:
- decryption based on session keys is now supported,
- generation of man pages and shell tab completion has been added,
- some subtle semantics fixes for component key validity were implemented.
For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/
#PGP #GnuPG

2025-02-07 13:38:11 UTC

There's a lot of interest in #pass -like tools, but without being bound to #gnupg
One exciting early stage exploration by @npub18he…8d3x uses the standard #SOP mechanism (https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/).
Kushal's experimental fork of pass can already directly use #OpenPGP card devices via the rsop-oct implementation:
https://github.com/kushaldas/password-store/tree/card

2024-12-23 19:05:36 UTC

- reply

awesome, happy to see this get more use.
I'm unsure how many users will enjoy entirely uncached pinentry, though 😬

2024-12-23 18:00:51 UTC

I just released version 0.3.3 of openpgp-card-state, a shared User PIN handling mechanism for #OpenPGP card hardware devices:
https://crates.io/crates/openpgp-card-state
This version adds support for a new, non-persisting backend that uses Pinentry for interactive input.
Thanks to Fina Wilke for submitting a PR with this functionality!
#GnuPG #PGP #rustlang

2024-12-23 01:29:37 UTC

I just released version 0.1.0 of rsop-oct, a new stateless #OpenPGP ("SOP") CLI tool that focuses exclusively on use with OpenPGP card hardware devices:
https://crates.io/crates/rsop-oct/0.1.0
Like its sibling project #rsop, rsop-oct is based on @npub1f5g…3gr2
In the next release of rsop, OpenPGP card functionality will be removed from it.
The goal is to offer clear UX in two distinct simple CLI tools, as opposed to one combined and confusing CLI tool.
For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/
#PGP #GnuPG #SOP

2024-11-11 09:57:16 UTC

I just released version 0.4.1 of #rsop, a stateless #OpenPGP ("SOP") CLI tool based on @npub1f5g…3gr2:
https://crates.io/crates/rsop/0.4.1
This release adds support for the 'revoke-key' command.
For more on #SOP, see https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/
#PGP #GnuPG #StatelessOpenPGP

2024-09-25 15:41:03 UTC

New release today: #rPGP version 0.14.0 ✨
(#OpenPGP implemented in pure #Rust, permissively licensed)
https://github.com/rpgp/rpgp/releases/tag/v0.14.0
This release brings rather complete support for the excellent new OpenPGP RFC 9580 (also known as "crypto refresh", or "v6")
RFC 9580 standardizes modern cryptographic mechanisms for OpenPGP: AEAD-based encryption, Argon2, and SHA2 fingerprints for the new OpenPGP v6 key format (v4 keys use SHA1).
Thanks @npub1dk0…k0wd for supporting this work!
#RustLang #PGP #GnuPG

2024-09-11 22:46:27 UTC

"Bring Back Free Software Funding: Give Your Feedback to the European Commission" - @npub16xn…g7f8
https://fsfe.org/news/2024/news-20240911-02.html