keybase-issues icon indicating copy to clipboard operation
keybase-issues copied to clipboard

PGP decrypt: automatically wrap with "BEGIN PGP MESSAGE" when no header is specified

Open Nowaker opened this issue 8 years ago • 2 comments

Many tools that output PGP messages (e.g. Terraform's aws_iam_access_key) skip the header. Rather than printing this:

-----BEGIN PGP MESSAGE-----
Version: Keybase OpenPGP v2.0.73
Comment: https://keybase.io/crypto

wc903ksdf98032idso903= (not actual data)
-----END PGP MESSAGE-----

They'll print this instead:

wc903ksdf98032idso903= (not actual data)

The latter is quite hard to decrypt with Keybase. I tried numerous ways of getting this decrypted (e.g. piping with base64 -d, etc) and it seems the only way to get it done is to wrap the string with the header. It applies both to keybase pgp decrypt and https://keybase.io/decrypt.

It'd be great if Keybase could automatically wrap the encrypted message with the header to avoid the hassle of doing it manually. (Or having to pass multi-line strings that are error-prone when pasting around)

Nowaker avatar Aug 22 '17 19:08 Nowaker

Checking in a couple years later - this still seems like a problem, specifically for inline decryption and for the terraform use case mentioned by OP. Is there any update or workaround available?

aaronsteers avatar Mar 05 '20 00:03 aaronsteers

checking 5 years later.. still a problem. any update?

rizary avatar Jan 31 '25 03:01 rizary