Protected named identities
This release improves identity-key generation while preserving the Qarmor v3 envelope format and compatibility with files encrypted by v0.3.0.
Highlights
- Private ML-KEM-1024 identities are passphrase-protected by default.
qarmord keygen --name gojo_qarmor --out-dir ~/.qarmorcreatesgojo_qarmorandgojo_qarmor.pub, creating the directory when needed.- Interactive key generation asks for the private-key passphrase twice.
- Non-interactive key generation requires
QARMORD_PASSPHRASE; use--no-passphraseonly when you deliberately need an unprotected key. - New identity directories use
0700and private keys use0600on Unix. - Invalid identity names and traversal paths are rejected.
Install or upgrade
curl -fsSL https://qarmor.jesed.dev/install.sh | shThe installer downloads the Linux x86_64 archive and verifies it against SHA256SUMS.
Verify a downloaded archive
sha256sum --ignore-missing --check SHA256SUMSFull changes: CHANGELOG.md