(untitled)

Is there a way to be able to prove my identity online and the authenticity of what im uploading regardless of where i am on the internet or what website im uploading on? something similar to signing a file with an ssh key , or clearsign ascii-armored pgp message, but isnt? i mean some form of stegnography or watermark that doeant need much effort from the observer to verify, so they dont need to know something like pgp i also want it to be private, as in i dont want to reveal my personal info for it to work, so no email or ip, and no ties to a specific server like a social media or a keybase or keyoxide is that possible or am i just daydreaming?

>>28148 Yeah, that's called digital id, and it's incoming.

ML-DSA signatures are a few kilobytes long and can easily be embedded in, say, an I-generated "photo" saved as an unnecessarily large PNG image, using one of many LSB steganography tools. You would distribute your public signing key as well as the stegranographic key. The main issue is always going to be your second requirement, that it doesn't take any technical knowledge to verify. Anyone who wants to verify your identity will need to know that the message is signed, how it is signed, and your public key. Existing tools to do this fail your discreetness requirement since they add public image metadata. Therefore I think you have to change your requirements if you want something good.

>>28150 fine ill compromise it would be possible granted the tool used to both sign and verify is easy to use ascii armor is already intuitive enough but verifying files is a can of worms when it comes to user experience regardless if its pgp or ssh i would rather pick ssh because its already preinstalled on practically every machine (even windows) and a useablw ssh public key is around 67 characters long (without including the identity (email/username) or key type), thats small enough to fit on the bio of basically any social media bio, unlike compressed pgp key which i was able to get down to a whopping 272 characters but still annoying that there is nothing close to ascii-armored messages that can be verified by simply copy pasting without the need to provide a seperate sig file, unless i can combine them and make my own makeshift ascii where the user can just copy and import the plaintext and the sig manuall, but that would defeat the point of convenience idk, feels like its one of these problems where ill only figure out the answer after i take a nap >>28149 kek, saving this one fo sho

>>28151 minisign is pretty simple and avoids many of the pitfalls of PGP, and there is a GUI that works on Windows and *nix. It uses ECDSA like ssh does so the keys and signatures are also quite short.

>>28148 What's so complex about PGP? I wonder how it can get simpler...

>>28158 pgp is quite hated by cryptographers for being the "jack of all trades, master of none", which is considered dangerous in the world of cryptography https://www.latacora.com/blog/2019/07/16/the-pgp-problem/

>>28152 minisign is good, but the fact that the gui is outdated and doesnt work is a problem for usability, sure the pubkey is around 58 characters which is the shortest ive seen so far i still feel like its not as easy to use just due to the fact that its a cli tool which involve opening a terminal or a powershell alternatively (and this could be a bad idea) i just found out that the official monero gui allows the use of monero addresses and subadresses to sign and verify text and files, which is great for practicality and ease of use, and the fact that doing so requires zero xmr and is completely free (and with the added bonus of the address being used for payment which i think is great for anonymous artists) this could open a whole window of verifiable private and/or anonymous identities WITH the addition of allow monetary support at the same time all packaged in a somewhat mainstream tool