[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: xz backdoor



Pierre-Elliott Bécue <peb@debian.org> wrote on 31/03/2024 at 14:31:37+0200:
> Wookey <wookey@wookware.org> wrote on 31/03/2024 at 04:34:00+0200:
>
>> On 2024-03-30 20:52 +0100, Ansgar 🙀 wrote:
>>> Yubikeys, Nitrokeys, GNUK, OpenPGP smartcards and similar devices.
>>> Possibly also TPM modules in computers.
>>> 
>>> These can usually be used for both OpenPGP and SSH keys.
>>
>> Slightly off-topic, but a couple of recent posts have given me the
>> same thought:
>>
>> Can someone point to good docs on this?  I've had a yubikey for 3/4 of
>> a year now but have not yet worked out how I put my GPG key in it. (or
>> if it should be another key, or a subkey, or whatever). So I'm not
>> actually using it yet.
>>
>> PEB also described what sounded like a very sensible way to manage
>> keys (using subkeys) in one of these threads but I don't know how to
>> do that myself.
>
> I have started (and never finished) a blog article on how I use my
> YubiKey and what config I put in it. I'll definitely try to get it out
> before the end of next week. I'll probably extend it to mention the
> creation of GPG subkeys etc.
>
> I would also be happy if it helps my fellow DDs to try making an article
> about some basic crypto concepts regarding PGP, RSA et al. But not in
> the same piece I guess.

Hello,

For those interested in: I've published two articles:

 1. One on PGP subkeys https://pe.becue.phd/openpgp-subkeys
 2. One on the OpenPGP module of YubiKeys:
    https://pe.becue.phd/yubikey-workfow-openpgp

I'm happy to receive any kind of constructive feedback.

-- 
PEB

Attachment: signature.asc
Description: PGP signature


Reply to: