Skip to content

qarmord v0.3.1

Latest

Choose a tag to compare

@jesedv jesedv released this 03 Aug 07:25

Protected named identities

This release improves identity-key generation while preserving the Qarmor v3 envelope format and compatibility with files encrypted by v0.3.0.

Highlights

  • Private ML-KEM-1024 identities are passphrase-protected by default.
  • qarmord keygen --name gojo_qarmor --out-dir ~/.qarmor creates gojo_qarmor and gojo_qarmor.pub, creating the directory when needed.
  • Interactive key generation asks for the private-key passphrase twice.
  • Non-interactive key generation requires QARMORD_PASSPHRASE; use --no-passphrase only when you deliberately need an unprotected key.
  • New identity directories use 0700 and private keys use 0600 on Unix.
  • Invalid identity names and traversal paths are rejected.

Install or upgrade

curl -fsSL https://qarmor.jesed.dev/install.sh | sh

The installer downloads the Linux x86_64 archive and verifies it against SHA256SUMS.

Verify a downloaded archive

sha256sum --ignore-missing --check SHA256SUMS

Full changes: CHANGELOG.md