# Install

Download for macOS

Download for Windows

Download for Linux

Or the command line only.

# What is it?

Using the desktop app to encrypt a message from gabriel@github to multiple recipients.

WARNING

This project is in development and has not been audited.

# Why?

Key management is hard. We need tools, libraries, apps, services and documentation to help us.

# How does it work?

The default key is a Ed25519/X25519 key capable of signing and encryption.

We can link this key to your identity on Github, Twitter, Reddit, etc, by creating a signed statement and publishing it both there and on your sigchain. (You can either revoke the sigchain statement or remove the signed statement to "unlink".)

You can search for keys by user name and service (e.g. gabriel@github, gabrlh@twitter), or lookup a user by a key identifier using a REST API.

The Saltpack format is used for signing and encryption, providing authenticity, repudability and anonymity.

The Noise Protocol is used to create a secure connection (Wormhole) between 2 computers/keys.

Key identifiers are Bech32 format, encode the type of key and public key bytes, and include a checksum with error correction.

Your keys and secrets are protected by a keyring which is secured by both the OS and a user supplied password.

The app and command line utility connect to a keysd daemon thats runs as a gRPC service on your computer.

keys pull gabriel@github
kex1mnseg28xu6g3j4wur7hqwk8ag3fu3pmr2t5lync26xmgff0dtryqupf80c

> echo "hi 🤓" | keys encrypt -a -r gabriel@github
BEGIN SALTPACK ENCRYPTED MESSAGE. kcJn5brvybfNjz6 D5ll2Nk0Z2co0as ...

The above example pulls the public key for the Github user gabriel, verifies it and creates an encrypted saltpack message.

# What else?

# Go Libraries

All the features in the app are available through Go libraries.

See some examples

# Similarities/Differences