Skip to content

GnuPG cannot import sq exported subkey

When I export subkey using sq key subkey export, and use gpg --import, gpg says it has bad signature. Example:

$ sq key list --cert-email=ljkgpxs@gmail.com
 - E2CE591A215497F7F2879F27FCF0ED6E8C4619CA
   - user IDs:
     - ljkgpxs <ljkgpxs@gmail.com> (authenticated)
     - ljkgpxs <ljkgpxs@outlook.com> (authenticated)
     - uasoft <uasoft@yeah.net> (authenticated)
   - created 2025-05-08 06:01:22 UTC

   - 2562258F030932FECEED07208BA86B4A5EF7A432
     - created 2025-05-08 06:01:22 UTC
     - usable for signing and decryption
     - @softkeys/E2CE591A215497F7F2879F27FCF0ED6E8C4619CA: available, locked
   - 9F8E18838D6C2C194A07D7520F88D7E954FFC2D5
     - created 2025-05-08 06:04:08 UTC
     - usable for signing and decryption
     - @softkeys/E2CE591A215497F7F2879F27FCF0ED6E8C4619CA: available, locked

$ sq key subkey export --cert=E2CE591A215497F7F2879F27FCF0ED6E8C4619CA --key=2562258F030932FECEED07208BA86B4A5EF7A432 | gpg --import
gpg: key FCF0ED6E8C4619CA: 1 bad signature
gpg: key FCF0ED6E8C4619CA: "ljkgpxs <ljkgpxs@gmail.com>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

sq and gpg version:

$ gpg --version
gpg (GnuPG) 2.4.7-unknown
libgcrypt 1.9.4-unknown
Copyright (C) 2024 g10 Code GmbH
License GNU GPL-3.0-or-later <https://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Home: /c/Users/ljkgpxs/.gnupg
Supported algorithms:
Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSA
Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
        CAMELLIA128, CAMELLIA192, CAMELLIA256
Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
Compression: Uncompressed, ZIP, ZLIB, BZIP2

$ sq version
sq 1.3.1
using sequoia-openpgp 2.0.0
with cryptographic backend Nettle 3.10 (Cv448: true, OCB: true)

Is there something wrong with my operation or is sq bug? How to fix this?

Edited by ljkgpxs
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information