mvayngrib

Yubikey + GPG + Github + Keybase

The following guide are steps that can be used to generate GPG keys on a YubiKey, use the gpg keys to sign github commits, and publish the public gpg key to Keybase.

Why is this a good idea?

1. Generating and storing GPG keys on a YubiKey allows the private key to be protected and ported between physical machines.
2. Signing git commits adds an extra layer of verification that code changes originated from an trusted source.
3. Using a YubiKey + touch-to-sign requires a physical presence to use the GPG signing key.
4. GitHub supports restricting commits to a repo to only those that are signed.
5. Putting a physical stamp on your code commits invokes a feeling of pride.

mvayngrib

Keybase proof

I hereby claim:

• I am mvayngrib on github.
• I am tenaciousmv (https://keybase.io/tenaciousmv) on keybase.
• I have a public key whose fingerprint is 5855 5CD6 28D0 3F83 8E04 8162 FAB7 7750 42E2 AA65

To claim this, I am signing this object:

mvayngrib

0x289780C9fE66AeFb6961795a5A9bDb73D6d760d8

mvayngrib

0x00e17a3ecbd94b15d49361b47d3173721ea33111

mvayngrib

0x00f284b7f8023060fead21f84e261cf35c1e8b5d

mvayngrib

### Captured Output

Command Used: `ios beta_fabric`
<details><summary>Output/Log</summary>

```

Successfully loaded Appfile at path '/Users/tenaciousmv/Code/tradle-app/iOS/fastlane/Appfile'
- app_identifier: 'io.tradle.dev.tim'
- apple_id: 'ios-dev@tradle.io'

mvayngrib

# GOALS
#
# 1. Support multiple identities per party.
#    - Achieved by having separate Ethereum accounts (addresses)
# 2. The ability to change keys, while preserving the identity
#    - Achieved by changing Ethereum accounts and transfering ownership to the new account
# 3. Identity theft/loss mitigation
#    - Multiple custodianship of identity can be easily added (e.g. with incremental multisig)
# 4. Identity attributes - public attribuets you might see on a social profile.
#    - Each identity has a key->value store of arbitrary size

mvayngrib

/*  Copyright (C) 2012-2013  Kurt Milam - http://xioup.com | Source: https://gist.github.com/1868955
 *   
 *  Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
 *  The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
 *
 *  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TO

mvayngrib

Credits

All credit to @sahrens for sharing fb's internal implementation.

Setup

• clone rocksdb from https://github.com/facebook/rocksdb.

• edit MakeFile inside rocksdb. Search for Platform-specific compilation around line 1122. Make th next few lines to look like this:

ifeq ($(PLATFORM), IOS)
# For iOS, create universal object files to be used on both the simulator and

mvayngrib

### Keybase proof

I hereby claim:

  * I am mvayngrib on github.
  * I am tenaciousmv (https://keybase.io/tenaciousmv) on keybase.
  * I have a public key whose fingerprint is FAEE 4838 6782 5965 5B6A  9ED0 5C5D 183A 4655 5CD5

To claim this, I am signing this object: