new key generator for pkg signing (server/device)