Doesn't work with GPG key

[Midar]

I'm getting

NonceError: Could not find nonce in bucket 202.
    at findNonces (/home/js/hs-airdrop/bin/hs-airdrop:275:17)
    at async createKeyProofs (/home/js/hs-airdrop/bin/hs-airdrop:328:17)
    at async main (/home/js/hs-airdrop/bin/hs-airdrop:761:8)

However, I did have more than 15 followers and GitHub says the key was

Added on 22 Apr 2018

so, should be old enough.

Does this not work with GPG keys? I'd like to avoid giving it my SSH key, as that has access to so many things that I just cannot risk it.

Also, can you claim with any of the keys you have, or can you claim with each? As in, is this per key or per account?

[pinheadmz]

The key you passed to hs-airdrop is not in the airdorp snapshot, I can not help you understand why. Either it's the wrong key or you didn't qualify on the snapshot date. It works with GPG and SSH keys, if you think you had another key in your Github account at that time, try it. All your keys at the time of the snapshot are included in the airdrop tree but each user can only claim one airdrop (it will then invalidate the remaining keys)

[Midar]

Well, I did easily have more than 15 followers in 2018/2019. And as per GitHub, you see when the key was added, so it was there. So, the airdrop snapshot must be broken then.

[pinheadmz]

Is it possible your key was not an acceptable type? There are some restrictions on the readme and more details here: #35 (comment)

[Midar]

The key in question is an Ed25519 key, whch is unsupported by GNUPG 1. Might that be the reason?

[pinheadmz]

Hmm no that should be ok:

https://github.com/handshake-org/hs-airdrop#accepted-key-algorithms

[Midar]

Is there a way to check if a key's in there with just the public key? Then I'll iterate over all my keys.

[pinheadmz]

The only way to check is to run hs-airdrop. It can be done on an air gapped machine if you prefer but it must search the hs-tree-data for the nonce.

[Midar]

Hmm, I'm reluctant to try it on my main SSH key that I use ~ everywhere for years now. How can I be sure the private key is not leaked into the base64 output from hs-airdrop?

[pinheadmz]

You can audit the code, rotate your 3-year-old keys out so they aren't important anymore, or simply do not claim the airdrop. There are lots of other ways to get involved in HNS