Collaborate Disseminate
The whole issue is caused by my usage openpgp cards I have 3 cards where I am using one as a Master card with Certify key on it and the second one as a daily runner. The third card was meant to be backup Master for geographically removed b… Continue reading PGP certify key redundancy
How do GPG smart card devices (such as a Yubikey) handle large GPG operations? Such as signing binary programs.
My first 2 pet theories are:
There’s some way to chunk up GPG operations or use some magic to stream data into and out of the … Continue reading How do GPG smart card devices handle large GPG operations?
I am trying to utilize the SafeNet eToken 5110CC, which basically has the IDPrime 940MD with the applet 4.4.2.A., to generate ECC keys with lengths 384bits and 521bits to no avail.
The product brief says that ECDSA and ECDH of 384/521bits … Continue reading SafeNet eToken 5110CC w/ IDPrime 940MD: Generating ECC384/521 Errors + ICC/CVC Authentication
The error I get from pkcs11-tool.exe is "No slots."
My server has a hardware security module (Nitrokey HSM 2) that becomes inaccessible once I connect to my server via Windows Remote Desktop.
Note: this is NOT for logging in with… Continue reading How do I get my server HSM working while connected via RDP? (Win 2019)
My PGP primary key is only used for certification—I use a separate subkey for signing. Like this:
sec rsa4096/0x891781D0EDC66456 … Continue reading Move signing subkey to authentication slot on YubiKey (OpenPGP card)?
I want to buy a smart card to store a gpg private key (I have never used any before).
However all options seem quite expensive. If you look for ISO 7816 in AliExpress there are much more affordable options. Same thing for Java cards.
Can I… Continue reading Using smart card for gnupg
We are using a PIV smartcard that has biometric information (fingerprint) of the user encoded on the card to login into our application. We have the capability to read the fingerprint from a reader and extract and build the minutiae data f… Continue reading How/What to prompt user for fingerprint login using smartcard?
When using gpg 2.2.28 & gpg-agent to decrypt a ciphertext that has been encrypted for (any one of) multiple ‘receivers’, the default behaviour is that it tries to find and use private keys in some deterministic (governed by what, I’m n… Continue reading GPG – use cached key before prompting for other cards when multiple receivers?
I want to implement Chip Authentication for ePassport documents, and wish to validate my understanding of it.
I’ve managed to get it up and running by using the JMRTD library, specifically the function doEACCA(). When inspecting the code o… Continue reading ePassport Chip Authentication – how to verify?
I’m trying to debug a smartcard with the OpenPGP applet using gpg and scdaemon. In order to enable debugging for scdaemon, I created
~/.gnupg/gpgagent.conf:
disable-scdaemon
and ran:
/usr/lib/gnupg/scdaemon –daemon –debug-level advanced… Continue reading Instruct gpg-agent to use specific scdaemon – Starting scdaemon with debugging enabled