0
$\begingroup$

Both PGP and Signify (or Minisign) are capable of generating ED25519 detached signatures. Is it possible to convert a PGP-generated ED25519 signature into a signify-compatible format?

$\endgroup$
  • $\begingroup$ The data signed by the signature probably contains some PGP formatting data, and Signify signatures are probably supposed to sign some Signify formatting data, so I wouldn't expect that you could convert an existing signature from one to the other. $\endgroup$ – Macil Oct 18 '19 at 19:11
  • $\begingroup$ It might be possible to reuse a private key between both programs, but reusing keys between programs or protocols that aren't built for it can sometimes leak critical data. A better path would be to just PGP sign a message containing your Signify public key. $\endgroup$ – Macil Oct 18 '19 at 19:11
  • $\begingroup$ Hmm.. that's true, I totally forgot that PGP adds the date and full PGP fingerprint into the data being signed. Thanks for pointing me in the right direction. $\endgroup$ – mricon Oct 18 '19 at 19:32
  • 1
    $\begingroup$ Why do you want to do this? $\endgroup$ – Squeamish Ossifrage Oct 18 '19 at 20:50
  • $\begingroup$ @SqueamishOssifrage main reason is because there are hardware devices like Nitrokey that are able to do ED25519 crypto on the chip using OpenPGP protocol, while there aren't any that can do the same for signify/minisign, so the private key has to be stored on the system disk. $\endgroup$ – mricon Oct 19 '19 at 16:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.