This is a sound idea and a good direction to go.  Can the arduino perform the crypto functions?  There would also ideally be a way to back up the private keys and/or accept imports of private keys for users who know what they're doing.