Coldkey: A Post-Quantum Age Key Generator with Printable Paper Backup via QR Codes
By
pike00
Kettled twice. Extra chewy, extra trustworthy.
Summary
Coldkey is a tool that generates post-quantum age encryption keys (ML-KEM-768 + X25519) and creates single-page printable HTML backups with QR codes. It addresses the critical problem of losing age encryption keys by providing a physical paper backup solution that can be printed, laminated, and stored in a fireproof safe. The tool offers interactive mode, hardened mode via Docker for defense-in-depth during key generation, and ensures secrets survive even if all digital copies are lost.
Key quotes
· 5 pulledYour age encryption keys are one disk failure away from total loss.
If you use age or sops to encrypt secrets, losing your private key means losing access to everything it protects -- forever.
coldkey generates post-quantum (ML-KEM-768 + X25519) age keys and produces single-page printable HTML backups with QR codes.
Print it, laminate it, store it in a fireproof safe.
Your secrets survive even if every digital copy is gone.
You might also wanna read
Anthropic Releases Free Security Plugin for Claude Code Terminal to Detect Vulnerabilities
Anthropic has released a free security-guidance plugin for its Claude Code terminal tool that autonomously reviews code edits, model outputs
cybersecuritynews.com·9h ago
wolfCOSE: A Lightweight COSE + CBOR Library for Embedded Systems with PQC and FIPS 140-3 Support
wolfCOSE is a lightweight C library implementing CBOR (RFC 8949) and COSE (RFC 9052/9053) for embedded systems, using wolfSSL as the crypto
github.com·1d ago
Anthropic launches Claude Security beta for codebase vulnerability scanning
Anthropic has released Claude Security, a defensive security tool within Claude Code on the web, from closed preview to beta for Claude Ente
thenewstack.io·1d ago
How LinkedIn's 2012 Breach Exposed the Dangers of Unsalted Password Hashes
This article examines the 2012 LinkedIn breach where attackers cracked millions of passwords using fast, unsalted hashes like MD5 and SHA-1.
hendryadrian.com·1d ago
AI-Generated npm Package Leaks Its Own GitHub Token, Exposing Malware Operator
A malicious npm package named mouse5212-super-formatter, identified by OX Security, was caught leaking its own hardcoded GitHub token. This
infosecurity-magazine.com·2d ago
How a botnet abused my open source project's cloud version to phish 14,000 people
The author, who runs an open source project management tool called Kaneo, discovered that a botnet had abused the hosted cloud version of th
andrej.sh·2d ago