|
|
|
@ -23,32 +23,32 @@ Let's make things clear : |
|
|
|
|
|
|
|
Good, let's start with key generation : |
|
|
|
|
|
|
|
$ gpg --card-edit |
|
|
|
gpg: directory '/home/escario/.gnupg' created |
|
|
|
gpg: keybox '/home/escario/.gnupg/pubring.kbx' created |
|
|
|
|
|
|
|
Reader ...........: Yubico YubiKey OTP FIDO CCID 00 00 |
|
|
|
Application ID ...: D2760001240103040006152800150000 |
|
|
|
Application type .: OpenPGP |
|
|
|
Version ..........: 3.4 |
|
|
|
Manufacturer .....: Yubico |
|
|
|
Serial number ....: 15280015 |
|
|
|
Name of cardholder: [not set] |
|
|
|
Language prefs ...: [not set] |
|
|
|
Salutation .......: |
|
|
|
URL of public key : [not set] |
|
|
|
Login data .......: [not set] |
|
|
|
Signature PIN ....: not forced |
|
|
|
Key attributes ...: rsa2048 rsa2048 rsa2048 |
|
|
|
Max. PIN lengths .: 127 127 127 |
|
|
|
PIN retry counter : 3 0 3 |
|
|
|
Signature counter : 0 |
|
|
|
KDF setting ......: off |
|
|
|
Signature key ....: [none] |
|
|
|
Encryption key....: [none] |
|
|
|
Authentication key: [none] |
|
|
|
General key info..: [none] |
|
|
|
gpg/card> admin |
|
|
|
$ gpg --card-edit |
|
|
|
gpg: directory '/home/user/.gnupg' created |
|
|
|
gpg: keybox '/home/user/.gnupg/pubring.kbx' created |
|
|
|
|
|
|
|
Reader ...........: Yubico YubiKey OTP FIDO CCID 00 00 |
|
|
|
Application ID ...: D2760001240103040006152800150000 |
|
|
|
Application type .: OpenPGP |
|
|
|
Version ..........: 3.4 |
|
|
|
Manufacturer .....: Yubico |
|
|
|
Serial number ....: 15280015 |
|
|
|
Name of cardholder: [not set] |
|
|
|
Language prefs ...: [not set] |
|
|
|
Salutation .......: |
|
|
|
URL of public key : [not set] |
|
|
|
Login data .......: [not set] |
|
|
|
Signature PIN ....: not forced |
|
|
|
Key attributes ...: rsa2048 rsa2048 rsa2048 |
|
|
|
Max. PIN lengths .: 127 127 127 |
|
|
|
PIN retry counter : 3 0 3 |
|
|
|
Signature counter : 0 |
|
|
|
KDF setting ......: off |
|
|
|
Signature key ....: [none] |
|
|
|
Encryption key....: [none] |
|
|
|
Authentication key: [none] |
|
|
|
General key info..: [none] |
|
|
|
gpg/card> admin |
|
|
|
Admin commands are allowed |
|
|
|
gpg/card> admin |
|
|
|
Admin commands are allowed |
|
|
|
@ -114,10 +114,10 @@ Good, let's start with key generation : |
|
|
|
"Dummy <dummy@dummy.co>" |
|
|
|
|
|
|
|
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O |
|
|
|
gpg: /home/escario/.gnupg/trustdb.gpg: trustdb created |
|
|
|
gpg: /home/user/.gnupg/trustdb.gpg: trustdb created |
|
|
|
gpg: key B4A67FB911B1ED6B marked as ultimately trusted |
|
|
|
gpg: directory '/home/escario/.gnupg/openpgp-revocs.d' created |
|
|
|
gpg: revocation certificate stored as '/home/escario/.gnupg/openpgp-revocs.d/A157C7E15F3D6C7445B40626B4A67FB911B1ED6B.rev' |
|
|
|
gpg: directory '/home/user/.gnupg/openpgp-revocs.d' created |
|
|
|
gpg: revocation certificate stored as '/home/user/.gnupg/openpgp-revocs.d/A157C7E15F3D6C7445B40626B4A67FB911B1ED6B.rev' |
|
|
|
public and secret key created and signed. |
|
|
|
|
|
|
|
gpg/card> list |
|
|
|
@ -304,10 +304,10 @@ For comparison, let's try with an NIST P384 key : |
|
|
|
"Dummy <dummy@dummy.co>" |
|
|
|
|
|
|
|
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? o |
|
|
|
gpg: /home/escario/.gnupg/trustdb.gpg: trustdb created |
|
|
|
gpg: /home/user/.gnupg/trustdb.gpg: trustdb created |
|
|
|
gpg: key BA792909F5154B7A marked as ultimately trusted |
|
|
|
gpg: directory '/home/escario/.gnupg/openpgp-revocs.d' created |
|
|
|
gpg: revocation certificate stored as '/home/escario/.gnupg/openpgp-revocs.d/B591751A56B42EA25C8BEF60BA792909F5154B7A.rev' |
|
|
|
gpg: directory '/home/user/.gnupg/openpgp-revocs.d' created |
|
|
|
gpg: revocation certificate stored as '/home/user/.gnupg/openpgp-revocs.d/B591751A56B42EA25C8BEF60BA792909F5154B7A.rev' |
|
|
|
public and secret key created and signed. |
|
|
|
|
|
|
|
|
|
|
|
|
