Browse Source

Ident and anonymize fixes

pull/1/head
Julien Escario 4 years ago
parent
commit
add40e5d47
  1. 64
      ssh/yubibug.md

64
ssh/yubibug.md

@ -23,32 +23,32 @@ Let's make things clear :
Good, let's start with key generation : Good, let's start with key generation :
$ gpg --card-edit
gpg: directory '/home/escario/.gnupg' created
gpg: keybox '/home/escario/.gnupg/pubring.kbx' created
Reader ...........: Yubico YubiKey OTP FIDO CCID 00 00
Application ID ...: D2760001240103040006152800150000
Application type .: OpenPGP
Version ..........: 3.4
Manufacturer .....: Yubico
Serial number ....: 15280015
Name of cardholder: [not set]
Language prefs ...: [not set]
Salutation .......:
URL of public key : [not set]
Login data .......: [not set]
Signature PIN ....: not forced
Key attributes ...: rsa2048 rsa2048 rsa2048
Max. PIN lengths .: 127 127 127
PIN retry counter : 3 0 3
Signature counter : 0
KDF setting ......: off
Signature key ....: [none]
Encryption key....: [none]
Authentication key: [none]
General key info..: [none]
gpg/card> admin
$ gpg --card-edit
gpg: directory '/home/user/.gnupg' created
gpg: keybox '/home/user/.gnupg/pubring.kbx' created
Reader ...........: Yubico YubiKey OTP FIDO CCID 00 00
Application ID ...: D2760001240103040006152800150000
Application type .: OpenPGP
Version ..........: 3.4
Manufacturer .....: Yubico
Serial number ....: 15280015
Name of cardholder: [not set]
Language prefs ...: [not set]
Salutation .......:
URL of public key : [not set]
Login data .......: [not set]
Signature PIN ....: not forced
Key attributes ...: rsa2048 rsa2048 rsa2048
Max. PIN lengths .: 127 127 127
PIN retry counter : 3 0 3
Signature counter : 0
KDF setting ......: off
Signature key ....: [none]
Encryption key....: [none]
Authentication key: [none]
General key info..: [none]
gpg/card> admin
Admin commands are allowed Admin commands are allowed
gpg/card> admin gpg/card> admin
Admin commands are allowed Admin commands are allowed
@ -114,10 +114,10 @@ Good, let's start with key generation :
"Dummy <dummy@dummy.co>" "Dummy <dummy@dummy.co>"
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O
gpg: /home/escario/.gnupg/trustdb.gpg: trustdb created
gpg: /home/user/.gnupg/trustdb.gpg: trustdb created
gpg: key B4A67FB911B1ED6B marked as ultimately trusted gpg: key B4A67FB911B1ED6B marked as ultimately trusted
gpg: directory '/home/escario/.gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/home/escario/.gnupg/openpgp-revocs.d/A157C7E15F3D6C7445B40626B4A67FB911B1ED6B.rev'
gpg: directory '/home/user/.gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/home/user/.gnupg/openpgp-revocs.d/A157C7E15F3D6C7445B40626B4A67FB911B1ED6B.rev'
public and secret key created and signed. public and secret key created and signed.
gpg/card> list gpg/card> list
@ -304,10 +304,10 @@ For comparison, let's try with an NIST P384 key :
"Dummy <dummy@dummy.co>" "Dummy <dummy@dummy.co>"
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? o Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? o
gpg: /home/escario/.gnupg/trustdb.gpg: trustdb created
gpg: /home/user/.gnupg/trustdb.gpg: trustdb created
gpg: key BA792909F5154B7A marked as ultimately trusted gpg: key BA792909F5154B7A marked as ultimately trusted
gpg: directory '/home/escario/.gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/home/escario/.gnupg/openpgp-revocs.d/B591751A56B42EA25C8BEF60BA792909F5154B7A.rev'
gpg: directory '/home/user/.gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/home/user/.gnupg/openpgp-revocs.d/B591751A56B42EA25C8BEF60BA792909F5154B7A.rev'
public and secret key created and signed. public and secret key created and signed.

Loading…
Cancel
Save