@Enki Hi Sovit! I forked keytr and made passkey support for Pubky using your NIP-K2 spec. After some feedback, it has come to my attention that using KiH is actually quite insecure.

Please look at this discussion for details: https://pubky.app/post/cg991c3itgsgbqj34uoisy8gf7a5oinsw76xxek6outsfu577fro/003575G34P5W0

here is my repo if you'd like to take a look!
https://codeberg.org/opensourcery/pubky-passky

I am looking into alternatives. I am thinking a potential solution could be for the user to provide a passphrase which will then encrypt the key and the encrypted key will be placed in the user.id

Please let me know your thoughts!