Aegis: Use openPgP for encryption
May be it adds some work now, but it might simplify the code (as encryption is delegated) and it would make users need to remember just one password. (and only for decryption as encryption does not need a password).
eloyesp
All 4 comments
it might simplify the code (as encryption is delegated)
This would have to be a separate option in addition to the ones we already have as I don't expect every user to understand how to use PGP.
alexbakker
on 29 May 2019
It would also be nice to have one key secured with the existing mechanism and one key with openPGP. The reason I say that is that I currently have a sweet setup with a GPG key on a Yubikey which I use for decrypting stuff on my phone. Part of that setup involves using Pass to store my passwords, so I need my Yubikey to unlock stuff on my phone anyway.
However, I'd like to not be locked out should I lose my Yubikey. Thus, my passwords are encrypted to multiple GPG keys - one which is on my Yubikey and another one which never leaves my laptop. This means I never lose access to my passwords and also don't have to store a private key on my phone.
In the case of Aegis, that redundancy plan would take the form of having an additional backup passphrase in addition to using my Yubikey-based GPG key as a primary unlock mechanism.
From what I understand, the vault already supports multiple keys, so this should be easy, but just wanted to put that out there in case there were thoughts of fully replacing the existing mechanism with GPG.
chiraag-nataraj
on 6 Jun 2019
Additionally, there's an option in andOTP to backup data encrypted with PGP (via OpenKeychain). Currently, there's no way to import such backup in Aegis.
MuntashirAkon
on 25 Apr 2020
Closing this issue as we don't have plans to implement this. If someone wants to take responsibility of implementing this, feel free to restart this discussion.
michaelschattgen
on 4 Jul 2020
Related issues
chiraag-nataraj
路
5Comments
DaVoodoo
路
3Comments
alexbakker
路
3Comments
3xploiton3
路
3Comments
Stefan1200-de
路
5Comments
Most helpful comment
It would also be nice to have one key secured with the existing mechanism and one key with openPGP. The reason I say that is that I currently have a sweet setup with a GPG key on a Yubikey which I use for decrypting stuff on my phone. Part of that setup involves using Pass to store my passwords, so I need my Yubikey to unlock stuff on my phone anyway.
However, I'd like to not be locked out should I lose my Yubikey. Thus, my passwords are encrypted to multiple GPG keys - one which is on my Yubikey and another one which never leaves my laptop. This means I never lose access to my passwords and also don't have to store a private key on my phone.
In the case of Aegis, that redundancy plan would take the form of having an additional backup passphrase in addition to using my Yubikey-based GPG key as a primary unlock mechanism.
From what I understand, the vault already supports multiple keys, so this should be easy, but just wanted to put that out there in case there were thoughts of fully replacing the existing mechanism with GPG.