mvayngrib

Yubikey + GPG + Github + Keybase

The following guide are steps that can be used to generate GPG keys on a YubiKey, use the gpg keys to sign github commits, and publish the public gpg key to Keybase.

Why is this a good idea?

1. Generating and storing GPG keys on a YubiKey allows the private key to be protected and ported between physical machines.
2. Signing git commits adds an extra layer of verification that code changes originated from an trusted source.
3. Using a YubiKey + touch-to-sign requires a physical presence to use the GPG signing key.
4. GitHub supports restricting commits to a repo to only those that are signed.
5. Putting a physical stamp on your code commits invokes a feeling of pride.

mvayngrib

Keybase proof

I hereby claim:

• I am mvayngrib on github.
• I am tenaciousmv (https://keybase.io/tenaciousmv) on keybase.
• I have a public key whose fingerprint is 5855 5CD6 28D0 3F83 8E04 8162 FAB7 7750 42E2 AA65

To claim this, I am signing this object:

mvayngrib

0x289780C9fE66AeFb6961795a5A9bDb73D6d760d8

mvayngrib

0x00e17a3ecbd94b15d49361b47d3173721ea33111

mvayngrib

0x00f284b7f8023060fead21f84e261cf35c1e8b5d

mvayngrib

### Captured Output

Command Used: `ios beta_fabric`
<details><summary>Output/Log</summary>

```

Successfully loaded Appfile at path '/Users/tenaciousmv/Code/tradle-app/iOS/fastlane/Appfile'
- app_identifier: 'io.tradle.dev.tim'
- apple_id: 'ios-dev@tradle.io'

mvayngrib

Credits

All credit to @sahrens for sharing fb's internal implementation.

Setup

• clone rocksdb from https://github.com/facebook/rocksdb.

• edit MakeFile inside rocksdb. Search for Platform-specific compilation around line 1122. Make th next few lines to look like this:

ifeq ($(PLATFORM), IOS)
# For iOS, create universal object files to be used on both the simulator and

mvayngrib

### Keybase proof

I hereby claim:

  * I am mvayngrib on github.
  * I am tenaciousmv (https://keybase.io/tenaciousmv) on keybase.
  * I have a public key whose fingerprint is FAEE 4838 6782 5965 5B6A  9ED0 5C5D 183A 4655 5CD5

To claim this, I am signing this object:

mvayngrib

# GOALS
#
# 1. Support multiple identities per party.
#    - Achieved by having separate Ethereum accounts (addresses)
# 2. The ability to change keys, while preserving the identity
#    - Achieved by changing Ethereum accounts and transfering ownership to the new account
# 3. Identity theft/loss mitigation
#    - Multiple custodianship of identity can be easily added (e.g. with incremental multisig)
# 4. Identity attributes - public attribuets you might see on a social profile.
#    - Each identity has a key->value store of arbitrary size

mvayngrib

Verifying that +tenaciousmv is my Bitcoin username. You can send me #bitcoin here: https://onename.io/tenaciousmv