CH-J Tools通过 SSH 管理服务器
菜单
全部密钥示例 →

示例 16 · V6 · Ed25519 + X25519

版本 6 密钥(RFC 9580):采用 由 64 个十六进制数字组成的 SHA-256 指纹、加盐签名和现代密钥标志。Sequoia(sq)、基于 rPGP 的工具和其他 RFC 9580 实现均可读取;GnuPG 2.4 及更早版本无法读取 V6 密钥。

密钥概览

密钥版本V6
规范RFC 9580 · post-quantum algorithms: RFC 9980
状态现行标准
主密钥(认证、签名)Ed25519 · RFC 9580 · ID 27
加密子密钥X25519 · RFC 9580 · ID 25
指纹A21B6349C6B29A02A3E83BF225A7F376F4613A1A50BF78E8998F53F23E8A53D0
私钥口令synthetic-key-password

算法与用途

Ed25519: Curve25519 上的 Edwards 曲线签名:体积小、速度快且支持广泛。用于签名和身份验证。

X25519: Curve25519 上的椭圆曲线 Diffie–Hellman 密钥协商,是支持最广泛的现代加密子密钥。

公钥

包含主密钥、加密子密钥及其绑定签名的公开证书。导入后可验证签名,或向此测试身份加密数据。

下载 → 847 字节

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=yj08
-----END PGP PUBLIC KEY BLOCK-----

私钥

由上方所示口令保护的私钥。仅为测试而公开,任何人都可使用。

下载 → 1 089 字节

显示
-----BEGIN PGP PRIVATE KEY BLOCK-----
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=zwsb
-----END PGP PRIVATE KEY BLOCK-----

吊销证书

预先生成的吊销证书。导入后会将密钥标记为已吊销;公开此证书是为了让您测试软件如何处理已吊销的密钥。

下载 → 1 034 字节

显示
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=MHGe
-----END PGP PUBLIC KEY BLOCK-----

test_1MB.bin 的签名

在 CH-J Tools 中使用此密钥生成的 test_1MB.bin 的 ASCII 装甲格式分离签名。请将其保存为 test_1MB.bin.asc,与测试文件放在同一目录。

下载 → 252 字节

-----BEGIN PGP SIGNATURE-----

wogGABsIAAAAKSIhBqIbY0nGspoCo+g78iWn83b0YToaUL946JmPU/I+ilPQBQJq
947xAAAAAO2yECi4fLjtXK/wy2M7frLGZlKrgl/xIq0R5UPgiFmcbQwzxUXXuTod
OALLGfOUiRn0nVFpZFFIxB6cPKVfSHgb89GJ/mX1MHqVvTdCyOcSC30P
=B6ZD
-----END PGP SIGNATURE-----

验证签名

版本 6 的密钥需要 RFC 9580 实现,例如 Sequoia sqop、rsop 或 CH-J Tools。将签名保存为 test_1MB.bin.asc,与测试文件放在同一目录,然后运行:

sqop verify test_1MB.bin.asc pgp-example-16-public.asc < test_1MB.bin

下载 test_1MB.bin →