qarmord v0.3.1

Protected named identities

This release improves identity-key generation while preserving the Qarmor v3 envelope format and compatibility with files encrypted by v0.3.0.

Highlights

• Private ML-KEM-1024 identities are passphrase-protected by default.
• qarmord keygen --name gojo_qarmor --out-dir ~/.qarmor creates gojo_qarmor and gojo_qarmor.pub, creating the directory when needed.
• Interactive key generation asks for the private-key passphrase twice.
• Non-interactive key generation requires QARMORD_PASSPHRASE; use --no-passphrase only when you deliberately need an unprotected key.
• New identity directories use 0700 and private keys use 0600 on Unix.
• Invalid identity names and traversal paths are rejected.

Install or upgrade

curl -fsSL https://qarmor.jesed.dev/install.sh | sh

The installer downloads the Linux x86_64 archive and verifies it against SHA256SUMS.

Verify a downloaded archive

sha256sum --ignore-missing --check SHA256SUMS

Full changes: CHANGELOG.md

qarmord v0.3.0

Qarmor v3

qarmord 0.3.0 is a breaking release that adopts the interoperable Qarmor v3 envelope format.

What's new

• Recipient encryption now uses ML-KEM-1024, HKDF-SHA-256, and ChaCha20-Poly1305.
• Envelope headers are authenticated and original filenames are encrypted with the payload.
• Prebuilt Linux x86_64 archives are included, together with a SHA256SUMS file for verification.

Upgrade notice

Version 0.3.0 emits and accepts only QARMORv3 envelopes. Decrypt qarmord/Qarmor v2 files before upgrading if you need to retain their contents.

Install

curl -fsSL https://qarmor.jesed.dev/install.sh | sh

Or install the pinned source release:

cargo install --git https://github.com/jesedv/qarmord --tag v0.3.0 qarmord

Verify a downloaded archive

sha256sum -c SHA256SUMS

Read the full changelog and CLI documentation.

qarmord v0.2.0

qarmord v0.2.0

The first public release of qarmord: a developer-focused, post-quantum hybrid encryption CLI for files and encrypted dotenv workflows.

Included

• ML-KEM-768 + X25519 hybrid key encapsulation
• Passphrase and identity-based file encryption
• In-memory .env.qarmor decryption with qarmord run
• Structured --json output for automation

Linux x86_64

Download qarmord-v0.2.0-x86_64-unknown-linux-gnu.tar.gz, verify it with the accompanying .sha256 file, then extract and place qarmord on your PATH.

Documentation

• CLI README
• Full changelog
• Web application