Changes between Version 3 and Version 4 of gpgOnYubiKey4

Timestamp:

07/24/17 23:17:19 (7 years ago)

Author:

jorrit

Comment:

--

gpgOnYubiKey4

@@ -117 +117 @@
 uid                      Jorrit Jorritsma <jsj@xs4all.nl>
 }}}
+
+== Generating the encryption subkey ==
+
+The next step is to create an encryption subkey. I chose to generate the encryption key using GnuPG, rather than with the Yubikey because private keys that are generated on the Yubikey cannot be removed from the Yubikey. This has a benefit that the private key is never physically on the computer, but it also has the disadvantage that access to all encrypted data is lost if the Yubikey is ever stolen or lost or a new key is generated.
+
+{{{
+gpg2 --edit-key 94D49EC738E0D9519BCDE7D9C2D3C98C511F9CF8
+gpg (GnuPG) 2.1.15; Copyright (C) 2016 Free Software Foundation, Inc.
+This is free software: you are free to change and redistribute it.
+There is NO WARRANTY, to the extent permitted by law.
+
+Secret key is available.
+
+sec  rsa3072/C2D3C98C511F9CF8
+     created: 2017-07-24  expires: 2018-07-24  usage: C   
+     trust: ultimate      validity: ultimate
+[ultimate] (1). Jorrit Jorritsma <jsj@xs4all.nl>
+
+gpg> addkey
+Please select what kind of key you want:
+   (3) DSA (sign only)
+   (4) RSA (sign only)
+   (5) Elgamal (encrypt only)
+   (6) RSA (encrypt only)
+Your selection? 6
+RSA keys may be between 1024 and 4096 bits long.
+What keysize do you want? (2048) 
+Requested keysize is 2048 bits
+Please specify how long the key should be valid.
+         0 = key does not expire
+      <n>  = key expires in n days
+      <n>w = key expires in n weeks
+      <n>m = key expires in n months
+      <n>y = key expires in n years
+Key is valid for? (0) 1y
+Key expires at di 24 jul 2018 23:15:08 CEST
+Is this correct? (y/N) y
+Really create? (y/N) y
+Please enter the passphrase to unlock the OpenPGP secret key:
+"Jorrit Jorritsma <jsj@xs4all.nl>"
+3072-bit RSA key, ID C2D3C98C511F9CF8,
+created 2017-07-24.
+
+Passphrase: 
+We need to generate a lot of random bytes. It is a good idea to perform
+some other action (type on the keyboard, move the mouse, utilize the
+disks) during the prime generation; this gives the random number
+generator a better chance to gain enough entropy.
+
+sec  rsa3072/C2D3C98C511F9CF8
+     created: 2017-07-24  expires: 2018-07-24  usage: C   
+     trust: ultimate      validity: ultimate
+ssb  rsa2048/ED815E1D36A718D2
+     created: 2017-07-24  expires: 2018-07-24  usage: E   
+[ultimate] (1). Jorrit Jorritsma <jsj@xs4all.nl>
+
+gpg> save
+}}}