Yes agreed. Private keys should not be shared. For the sake of simplicity and for demonstration purposes, I copied the entire crypto-config folder. Please checkout https://github.com/hyperledger/fabric-samples/tree/release-1.3/fabric-ca on how to generate crypto material without cryptogen utility. Hyperledger fabric has also introduced Idemix ( https://hyperledger-fabric.readthedocs.io/en/release-1.2/idemix.html) to enhance privacy using ZKP (zero-knowledge proofs). I am working on to create a more detailed tutorial on how to exchange credentials across organizations in hyperledger fabric.