generating pgp keys for kernel development

links.txt

https://github.com/mricon/patatt
https://www.kernel.org/doc/html/latest/process/maintainer-pgp-guide.html?highlight=gpg
https://github.com/lfit/itpol/blob/master/protecting-code-integrity.md#generating-and-protecting-your-certification-key
https://docs.github.com/en/authentication/managing-commit-signature-verification/generating-a-new-gpg-key
https://korg.docs.kernel.org/mail.html#adding-a-kernel-org-uid-to-your-pgp-key

pgpkeys.sh

$ sudo apt install paperkey gpg2

$ gpg2 --quick-generate-key 'Nick Desaulniers <ndesaulniers@google.com>' ed25519 cert
$ gpg2 --list-keys
gpg: checking the trustdb
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: next trustdb check due at 2025-08-23
/usr/local/google/home/ndesaulniers/.gnupg/pubring.kbx
------------------------------------------------------
pub   ed25519 2023-08-24 [C] [expires: 2025-08-23]
      2F039E1D60DAC7E78944BCEB6DD7F2FC6A0D1CE8
uid           [ultimate] Nick Desaulniers <ndesaulniers@google.com>
$ gpg --quick-set-expire 2F039E1D60DAC7E78944BCEB6DD7F2FC6A0D1CE8 1y
$ gpg --export-secret-key 2F039E1D60DAC7E78944BCEB6DD7F2FC6A0D1CE8 | paperkey -o /tmp/key-backup.txt
<print /tmp/key-backup.txt and write passphrase on it then store it somewhere secure>
$ gpg --quick-add-key 2F039E1D60DAC7E78944BCEB6DD7F2FC6A0D1CE8 ed25519 sign
$ gpg --list-keys                                                          
/usr/local/google/home/ndesaulniers/.gnupg/pubring.kbx
------------------------------------------------------
pub   ed25519 2023-08-24 [C] [expires: 2025-08-23]
      2F039E1D60DAC7E78944BCEB6DD7F2FC6A0D1CE8
uid           [ultimate] Nick Desaulniers <ndesaulniers@google.com>
sub   ed25519 2023-08-24 [S]

; The S for signing is important.
$ gpg --send-key 2F039E1D60DAC7E78944BCEB6DD7F2FC6A0D1CE8

$ pip3 install patatt