Pkeygen

It is part of the suite (which also includes rnpgpg , rnpkeys , and rpki ). RNP aims to be a high-performance, easy-to-integrate OpenPGP library used by projects like Mozilla Thunderbird and ProtonMail Bridge .

In this post, we’ll dive into what pkeygen is, how it differs from traditional methods, and why you might want to add it to your crypto toolkit. Unlike the interactive wizards of GnuPG, pkeygen is designed to be non-interactive and data-driven . It reads a simple JSON configuration file (or string) and outputs a binary or armored OpenPGP keyring. pkeygen

{ "params": [ { "type": "EDDSA", "curve": "Ed25519" } ], "userid": "DevOps Bot <ci@example.com>" } Then run: It is part of the suite (which also

pkeygen --config ephemeral.json --output build-key.gpg sign-commit --key build-key.gpg # Destroy after use Store your key config in a Git repo, then: Unlike the interactive wizards of GnuPG, pkeygen is

pkeygen --config key-config.json --output my-private-key.gpg To generate a public key only (for distribution):

pkeygen --config key-config.json --output public-key.gpg --public You’ll get a binary OpenPGP keyring. Convert it to ASCII armor if needed: