OCTADE Project Software : Signed Papers Portal

I am hacking on a cryptographic verification web portal. I seek comments and suggestions on the user interface (UX) and feature set.

Accessibility perspectives might be helpful since this involves slightly complex signatures and verification commands.

The server software automatically hashes and signs all files uploaded to the site. The software also generates 'verification bundles' that users may download to verify signatures using 'gnupg' and 'openssl'.

https://files.octade.net/publications/

Feedback would be helpful for improving the software before I release any source code.

#cryptography #cryptology #signatures #DataIntegrity #verification
#keys #gpg #pgp #openssl #crypto

at some point, i'd love to work on an implementation of the #screenreader of NVDA #nvda #remote / #nvdaremote where rather than using a 6-digit key that can be guessed, it uses #asymmetric #cryptography that genrates #encryption #keys using an algorithm like #rsa / #ecc (eliptic curve cryptography) in order to secure the connections. how it would work is you setup your connection. then, you'll get an encryption key for your session unique to that session. then, you give the user of the computer you want to control or who you want to control your computer the key. once both sides disconnect, the key automatically / automagically expires. it would be like a public / private keypare, where the key is stored on the server terminating the remote session (E.G. nv.seedy.cc, poweredge-r720.featherback-firefighter.ts.net) while the private key is stored on the machines connected to it. and optionally, a passfraze for the key to protect access even if that person has the key, sourt of like how #ssh public/private keypares work.
@cryptography

I see some people still using ancient PGP keys. GnuPG offers Linux repositories for updating to the latest versions of GnuPG with new expert features for key generation. Recent versions support both Kyber1024 and Goldilocks448 keys (and more).

Once installed run: :~$ gpg --full-generate-key --expert

New GnuPG Repositories for Debian, Ubuntu, and Devuan: Stable and Development Branches Available

https://www.gnupg.org/blog/20250827-new-repository.html

#PGP #GPG #PQC #GnuPG #Encryption #Cryptography #Privacy #Signatures #Kyber #Goldilocks #ED448 #Keys #PublicKey