Kleopatra: Add hint to filename of secret team key exports with signing key
Testing, NormalPublic

Assigned To
Authored By
timegrid
Jan 13 2026, 1:03 PM

Description

"Save Secret Team Key" with and without signing key results in the same filename. To minimize the chance to accidentally share a team key with signing key, the filename should better include some hint, that the signing key is included, e.g. :

  • without signing key: team kyber_0x9499F81486CBBEDE_SECRET_TEAM_KEY.asc
  • with signing key: team kyber_0x9499F81486CBBEDE_SECRET_TEAM_KEY_WITH_SIGNING.asc

Details

Version
gpg4win-5.0.0-beta479 @ win11

Event Timeline

timegrid triaged this task as Normal priority.Jan 13 2026, 1:03 PM
timegrid created this task.
timegrid created this object with edit policy "Contributor (Project)".

or maybe for the fist one "_ENC_ONLY"

ikloecker moved this task from Backlog to WIP on the gpd5x board.
ikloecker changed the task status from Open to Testing.Jan 14 2026, 4:44 PM

Done.

The suffixes _ENCRYPT_SIGN and _ENCRYPT are used to differentiate the two export results.

ikloecker mentioned this in Unknown Object (Maniphest Task).Jan 19 2026, 9:04 AM

Looks good to me on gpg4win-5.0.2-beta2 @ win11:

team_0x98563292D0590F05_public.asc                       # export
team_0x98563292D0590F05_SECRET.asc                       # backup secret key
team_0x98563292D0590F05_SECRET_TEAM_KEY_ENCRYPT.asc      # save secret team key without signing:
team_0x98563292D0590F05_SECRET_TEAM_KEY_ENCRYPT_SIGN.asc # save secret team key with signing
timegrid edited projects, added gpd5x (gpd-5.0.2); removed gpd5x.