使用 Homebrew, apt, MacPorts, Nix 安装 gokey

项目链接

• 主页
• 上游文档
• 软件包管理器页面

命令和别名

• gokey

项目历史

The repository begins in October 2016 with an initial release. The README describes simple password derivation, seed-file mode, and support for output types including passwords, raw bytes, ECC keys, RSA keys, x25519, and ed25519.

Early history focused on random-generation internals and command behavior. Later history includes release-binary automation, dependency updates, imported deterministic key-generation logic from Go's crypto packages, and seed unwrap testing.

采用历史

gokey's adoption is mostly that of a compact security utility: it is useful to users who do not want to store, back up, or synchronize a password vault. The README emphasizes that generated passwords are available wherever the user can provide the same master password and realm.

The input package facts list Homebrew, Debian, MacPorts, Nix, and Ubuntu package names, which indicates distribution through both macOS-focused and Linux distribution channels.

使用方式

In simple mode, a user runs gokey with a master password and a realm such as a resource URL. Changing the realm derives a different output while keeping the same master password.

For higher-entropy passwords or private keys, the README documents seed-file mode: generate an encrypted seed file, protect it with the master password, and derive passwords or keys from the seed plus realm. Seed paths are command inputs rather than a fixed credentials-file location.

为什么软件包爱好者会关心

gokey matters to package nerds because it is a small, auditable-feeling security CLI with no vault service, database daemon, or sync dependency. Its packaging footprint is a single Go command, but its security model lives in deterministic derivation choices.

It is also a useful contrast with mainstream password managers: packaging the tool is easy, while the hard part is documenting the operational warning that losing the master password or seed file loses the derived outputs.

时间线

• 2016: Repository begins with an initial release.
• 2016: Early commits change random-generation internals and output conditioning.
• 2022: Release-binary publishing through GitHub Actions is added.
• 2023: Deterministic key-generation logic from Go crypto packages is imported.
• 2026: v0.2.1 tag appears with public KeyGen RNG member work.

Related projects

• Go's crypto packages are related through key-generation behavior referenced in repository history.
• Deterministic password managers are the broader tool family; gokey's distinguishing feature is combining password and private-key derivation in a Go CLI.
• Cloudflare is the upstream organization that publishes the repository.

来源

• https://github.com/cloudflare/gokey
• https://github.com/cloudflare/gokey#readme
• https://github.com/cloudflare/gokey/releases