0
$\begingroup$

Let's say I generate a keypair for a user with go's ed25519 package:

pub, private := ed25519.GenerateKey(nil)

And I want to generate additional child keys as signing identities for my user. Is it more secure to not use that public key created at initial generation and instead derive a new child private key as a signing identity? Or is creating another child key exactly as secure as using the public key created at generation?

Improve this question
$\endgroup$

1 Answer 1

Reset to default
1
$\begingroup$

A general common technique is used in PGP "key rings" or "key chains". You generate a master public-key pair and distribute your master public key. Use this master private key to certify your other generated keys so that you can store your private key securely, probably off-line, and use the other keys for daily usage. With your master public key, the certificates of the other generated keys in the chain can be verified.

Improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.