Got the OpenPGP certification demo working end-to-end 🔐
Starting from Thurin Labs’ published public key, I generate a QR containing the actual OpenPGP key + User ID + self-certification packets.
The device independently parses the OpenPGP object, verifies the UID self-cert, derives the fingerprint itself, shows it on the trusted display, requires physical approval + a local PIN, and signs with the removable NeoPGP card.
The resulting standard OpenPGP certification packet comes back over QR, and stock GnuPG verifies it:
gpg: 5 good signatures
This is the architecture I’m exploring toward Keycard Shell as a general-purpose trusted cryptographic interface: not just signing a host-provided hash, but letting the trusted device understand the protocol object and show the human what they’re actually authorizing.
Full demo Video ↓ (excuse the pauses 😅 I’m thinking through a lot of this in real time while I demo it)
Github link:
github.com/0xterricola/keyca…