SQ(1) SQ(1) (NAME) sq-key-generate - (SYNOPSIS) sq key generate [OPTIONS] (DESCRIPTION) . . . . ( ) . . `--rev-cert` . . `--expiration` . `sq key generate` `--time` . (binding) . (OPTIONS) (Subcommand options) --allow-non-canonical-userids (canonical) `Name (Comment) ` . --can-authenticate () --can-encrypt=PURPOSE [: universal] (transport) (storage) (universal) . [ : transport, storage, universal] --can-sign () --cannot-authenticate --cannot-encrypt --cannot-sign --cipher-suite=CIPHER-SUITE `key.generate.cipher-suite` . [: cv25519] [ : rsa2k, rsa3k, rsa4k, cv25519, cv448, mldsa65-ed25519, mldsa87-ed448] --email=ADDRESS () --encryption-algorithm=ALGORITHM . (cipher suite) . [ : rsa2k, rsa3k, rsa4k, elgamal2k, elgamal3k, cv25519, x25519, x448, nistp256, nistp384, nistp521, brainpoolp256, brainpoolp384, brainpoolp512, mlkem768-x25519, mlkem1024-x448] --expiration=EXPIRATION EXPIRATION ISO 8601 . `N[ymwds]` . `never` . [: 3y] --name=NAME --new-password-file=PASSWORD_FILE . --no-userids --output=FILE (key store) . --own-key (fully trusted introducer) . --profile=PROFILE OpenPGP OpenPGP . OpenPGP . sq RFC9580 RFC4880 . RFC4880 . RFC9580 sq . `key.generate.profile` . [: rfc4880] [ : rfc9580, rfc4880] --rev-cert=FILE FILE $HOME/.local/share/sequoia/revocation-certificates . `--output` `--rev-cert` . `--output` `-` `-` . --shared-key . . . . . --signing-algorithm=ALGORITHM . . (cipher suite) . [ : rsa2k, rsa3k, rsa4k, dsa2k, dsa3k, cv25519, ed25519, ed448, nistp256, nistp384, nistp521, brainpoolp256, brainpoolp384, brainpoolp512, mldsa65-ed25519, mldsa87-ed448, slhdsa128s, slhdsa128f, slhdsa256s] --userid=USERID (comment) `--allow-non-canonical-userids` . . `--name` `--email` . --without-password (Global options) sq(1) . (EXAMPLES) . sq key generate --own-key --name Alice --email \ alice@example.org . sq key generate --own-key --name Alice --email \ alice@example.org --output alice-priv.pgp --rev-cert \ alice-priv.rev (SEE ALSO) sq(1), sq-key(1). . (VERSION) 1.4.0 Sequoia PGP 1.4.0 SQ(1)