churchkey

Name: churchkey
Availability: InStock
Author: Tomitribe

Parse and export cryptographic keys across PEM, JWK, OpenSSH, and SSH2 formats.

2|Updated Feb 18, 2026

Search Tags:#cryptography #pem #openssh #key-parse #jwk #ssh2

Ready to run

npx skills add https://github.com/tomitribe/claude-plugins --skill churchkey

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: churchkey
Source: https://github.com/tomitribe/claude-plugins/tree/main/plugins/churchkey/skills/churchkey
Command: npx skills add https://github.com/tomitribe/claude-plugins --skill churchkey

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Managing cryptographic keys across multiple formats (PEM, JWK, OpenSSH, SSH2) can be error-prone and slow. Churchkey provides a unified API to parse, validate, and export keys, reducing format friction and inconsistency.

Core Features & Use Cases

Auto-detects key formats and decodes to a common Key object.
Encodes keys into PEM, JWK, OpenSSH, or SSH2 formats; supports RSA, DSA, EC across formats.
Extracts public keys from private keys and wraps standard JCE keys for downstream usage.
Use Case: convert a PEM RSA private key to JWK for web-based API integration, or parse an SSH2 public key for server access controls.

Quick Start

Install churchkey and use Keys.decode to parse a PEM, then access getAlgorithm and getFormat to inspect the key.

Frequently Asked Questions about churchkey

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I convert a PEM private key to JWK format?▼

You can convert a PEM private key to JWK by decoding the PEM file into a common Key object and then encoding it into JWK format. This streamlines web-based API integration by translating standard cryptographic key structures into JSON Web Keys.

What is the best way to parse an OpenSSH public key for server access controls?▼

The best way to parse an OpenSSH public key is using an auto-detecting key decoder that reads the OpenSSH format and outputs a standard Key object. You can then extract the algorithm and format details to properly configure server access controls.

Can I extract a public key from an existing RSA private key?▼

Yes, you can extract a public key from an RSA private key. The API parses the private key material and isolates the public components, allowing you to export the public key independently in PEM, JWK, OpenSSH, or SSH2 formats.

Does this key parsing API support DSA and EC algorithms alongside RSA?▼

Yes, the key parsing API supports DSA, EC, and RSA algorithms. It auto-detects the key format, decodes the cryptographic material, and encodes it across PEM, JWK, OpenSSH, and SSH2 formats regardless of the underlying algorithm.

How do I handle unknown cryptographic key formats when decoding?▼

When handling unknown cryptographic key formats, the API uses auto-detection to identify the structure automatically. It provides encode and decode utilities with built-in error handling to gracefully manage unsupported or malformed key inputs.

Why does my SSH2 key export fail during format conversion?▼

SSH2 key export failures during format conversion usually stem from unsupported algorithms or malformed key material. The API includes error handling during the encoding process to catch these issues, ensuring only valid RSA, DSA, or EC keys are exported.