gpg 2.0.27 is updating the trustdb constantly, and taking minutes to do it

I upgraded my GNUPG form 1.4.x to 2.0.27. I kept the configuration, public and private keyrings. I have recreated the trustdb from scratch, trying to solve this, with no success (using "--export-ownertrust"). My pubring.gpg is 34MB in size and I usually create local signatures via --lsign". My pr

SSH CA and OpenPGP card

Hello, I am trying to use the OpenPGP card as a SSH CA (see ssh-keygen and i.e. https://blog.habets.se/2011/07/OpenSSH-certificates). ssh-keygen by default uses an ssh (private) key to sign a public key of a server or of an individual. I managed to successfully use the OpenPGP card for SSH authe

Re: Enabling and using ECC keys (any reason not to?)

On 26.03.2015 18:40, Pete Stephenson wrote: > > People have raised concerns about the NIST curves, but they are part > of the RFC 6637 standard so compliant programs must implement P-256, > may implement P-384, and should implement P-521. > > To address potential concerns with the NIST curves, Gn