Public Key (armored)
Message
Ciphertext
Private Key (armored)
Ciphertext
Plaintext
Public Key
Private Key
CLI: Create a server PGP key (GnuPG)
Run on a trusted machine. This makes an Ed25519 primary and an X25519 encryption subkey, then exports the public key.
gpg --quick-generate-key "Server Root <no-reply@yourdomain>" ed25519 default 1y
KEYID="$(gpg --list-keys --with-colons | awk -F: '/^pub/{print $5; exit}')"
gpg --quick-add-key "$KEYID" cv25519 encrypt 1y
gpg --armor --export "$KEYID" > server.pub.asc