Skip to content

Comment on Ed25519-CLI – command-line interface for the Ed25519 signature system (2024)parent

Comments

I'm curious, what do you actually use it for?

FTA:

These tools allow lib25519 to be easily used from shell scripts.

I've never used ed25519-cli, but not having to use a library is nice for someone who isn't a programmer.

The Venn diagram of "not a programmer" and "can safely use Ed25519" is two non-overlapping circles.

"this app needs me to generate a key and point to it in config" is plenty of overlap

If you just want a raw ed25519 private key then `head -c32 /dev/urandom` does the job. But usually you want a DER/PEM wrapper or similar, which the openssl cli tools handle nicely.

I don't consider myself a programmer and I can use Ed25519 safely. I do however understand computing fairly well.

I consider myself a programmer and ed25519-understander, but the idea of using it directly within a shell script terrifies me.

Simply combine this tool with `openssl enc` and your shell script is as secure as any shell script could be

Someone writing shell scripts is a programmer, for better or worse.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.