Unattended generation of GnuPG / OpenPGP keys w/ ECC

gpg-gen-ecc.sh

#!/bin/sh

NAME='John Doe'
EMAIL='jdo@example.com'

export GNUPGHOME="$(mktemp -d)"
cat >$TMPDIR/gpg-gen.tmpl <<EOF
     %echo Generating an OpenPGP key
     Key-Type: eddsa
     Key-Curve: ed25519
     Key-Usage: sign
     Subkey-Type: ecdh
     Subkey-Curve: cv25519
     Subkey-Usage: encrypt
     Name-Real: $NAME
     Name-Email: $EMAIL
     Creation-Date: $(date +"%Y0101T000000")
     Expire-Date: 455d
     Passphrase: abcXYZ
     # Do a commit here, so that we can later print "done" :-)
     %commit
     %echo done
EOF
gpg --batch --expert --full-gen-key $TMPDIR/gpg-gen.tmpl
gpg -a --command-fd 0 --pinentry-mode loopback --export-secret-keys > ./$EMAIL.asc <<EOF
abcXYZ
EOF
cp $GNUPGHOME/openpgp-revocs.d/*.rev ./$EMAIL.asc.rev

mkdir -p ./openpgpkey
gpg --list-options show-only-fpr-mbox  -k $(echo $EMAIL | sed 's/^.*@/@/g') | gpg-wks-client -v --install-key