---
name: "kaya-rekey"
section: "1"
platform: "linux"
package: "kaya"
version: "0.4.4-6.2"
release: "Debian 8 (Jessie)"
platforms: ["linux"]
url: "https://new.carta.tech/kaya-rekey"
---

# kaya-rekey(1)

Binary key regeneration for kaya web applications

## NAME

kaya-rekey - Binary key regeneration for kaya web applications

## SYNOPSIS

**kaya-rekey** *FILE1 \[FILE2 \[...\]\]*

## DESCRIPTION

**kaya-rekey** gives all Kaya binaries specified on the command line a new application secret key

The application secret key makes webapps and CGI programs secure, by encrypting the state transfers. If you receive a webapp or CGI binary from someone else, or you believe someone untrusted has had read access to your binary, you can use the kaya-rekey application to generate a new application secret key without needing a recompile.

Binary distributors of Kaya applications are strongly recommended to use 'kaya-rekey' as part of the installation process.

Prior to Kaya 0.3.0 this utility was called rekey

## OBTAINING

The latest release of Kaya can be obtained from \<http://kayalang.org/download\>

Development versions can be obtained using **[darcs(1)](/darcs/1.md)** from \<http://kayalang.org/darcs/\>

## SECURITY

**kaya-rekey** will use /dev/random to generate the new key if possible. If /dev/random is unavailable (Windows without MinGW, for example), the new key will be generated pseudo-randomly. This may allow an attacker to easily guess the new key. In environments where security is a concern, therefore, we strongly recommend recompiling with **[kayac(1)](/kayac/1.md)** rather than using **kaya-rekey** if /dev/random is unavailable.

**kaya-rekey** will give a warning when rekeying if /dev/random is unavailable.

## BUGS

Please report bugs in kaya-rekey to \<kaya@kayalang.org\>

**kaya-rekey** cannot rekey Kaya binaries generated with a compiler older than the switch to AES256 encryption (i.e. older than 0.2.0 final version)

In rare cases,  **kaya-rekey** may not be able to successfully rekey a file and will print an error instead. You must recompile in this case to get a new application key.

## LICENSE

**kaya-rekey** is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License (version 2 or any later version) as published by the Free Software Foundation.

## SEE ALSO

**[kayac(1)](/kayac/1.md)**