On-Device Key Generation and Import

feature requests  opened Aug 6, 2026

1 vote for this feature.
Votes feed the roadmap directly.
anonymous
Aug 6, 2026
This already works for external devices, this request is specific to the host device itself. We can make use of Android's Keystore system to generate and imports keys to TEE or more dedicated secure elements (e.g. Pixel's Titan Security Chip).
anonymous
27d ago
What would be great as well is providing a wrapping key to facilitate secure transfer.
anonymous
24d ago
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I have looked at this enough to give you a straight answer rather than a hopeful one. On Android, Keystore exposes signing and decryption for the algorithms it supports, but never the raw key material, and OpenPGP needs operations Keystore does not offer for the key types PGPony generates. Ed25519 support in Keystore is recent and partial, and the post-quantum composite material has no Keystore representation at all. On iOS the wall is higher still: the Secure Enclave only holds P-256 keys, which OpenPGP barely uses, so a full "master key in the secure element" is not buildable today on either platform. What might be buildable is narrower: a hardware-backed subkey slot for classical algorithms, treated the way card-backed keys are treated now, where the hardware signs or decrypts and the app never sees the secret. Your wrapping-key point fits that shape too, since Keystore's secure import is exactly a wrapped transfer. I have logged it for the Android 4.3.0 and iOS 8.3.0 cycle as a feasibility spike first, commitment after, because I would rather tell you it is hard than promise it and quietly drop it. NorseHorse -----BEGIN PGP SIGNATURE----- Comment: PGPony - PGPony.app wnQEARYIAB0Fgmp8yZgWIQSgy8j2WqzlbxxbdndT+XmOSRneYgAKCRBT+XmOSRne YhvCAPjfQwgmW9VYf3kJXM7pNqWJeMxG96UEkP5+I6DJEUfzAPwILNiUOsIZ7vpG aIuaQEFt3Bx2Nuz6XCGm8fcuERPLCA== =GfqH -----END PGP SIGNATURE-----

Reply.

Sign this reply with your PGP key (optional)

Clearsign the exact text below (in the Playground, in PGPony, or with gpg --clearsign), then paste the signed result and your public key. The nonce expires in 15 minutes.

  back to the board