Re: OpenPGP smartcard restore

2006-06-14 Thread Tristan Williams
On 13Jun06 16:49, David Shaw wrote: > On Tue, Jun 13, 2006 at 09:17:39PM +0100, Tristan Williams wrote: > > > It works as you suggested. > > > > gpg is now happy with smartB (and longer asks for smartA). The file > > I encrypted with the public key is decrypted correctly. > > gpg now reference

Re: OpenPGP smartcard restore

2006-06-13 Thread David Shaw
On Tue, Jun 13, 2006 at 09:17:39PM +0100, Tristan Williams wrote: > It works as you suggested. > > gpg is now happy with smartB (and longer asks for smartA). The file > I encrypted with the public key is decrypted correctly. > gpg now references smartB not smartA when listing keys. > > So wha

Re: OpenPGP smartcard restore

2006-06-13 Thread Tristan Williams
On 13 Jun 2006, at 20:37, David Shaw wrote: On Tue, Jun 13, 2006 at 02:01:27PM +0100, Tristan Williams wrote: I am experimenting with the OpenPGP smartcard. I have two OpenPGP smart cards (smartA and smartB) and I want to verify that I can restore my on-card generated private key should I lo

Re: OpenPGP smartcard restore

2006-06-13 Thread David Shaw
On Tue, Jun 13, 2006 at 02:01:27PM +0100, Tristan Williams wrote: > I am experimenting with the OpenPGP smartcard. I have two OpenPGP smart > cards (smartA and smartB) and I want to verify that I can restore my > on-card generated private key should I loose the master card > (smartA). I only want t

Re: OpenPGP smartcard restore

2006-06-13 Thread David Shaw
On Tue, Jun 13, 2006 at 06:46:48PM +0100, Tristan Williams wrote: > On 13Jun06 18:07, [EMAIL PROTECTED] wrote: > > On Tue, Jun 13, 2006 at 02:01:27PM +0100, Tristan Williams wrote: > > > I am experimenting with the OpenPGP smartcard. I have two OpenPGP smart > > > cards (smartA and smartB) and I wa

Re: OpenPGP smartcard restore

2006-06-13 Thread zvrba
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 On Tue, Jun 13, 2006 at 06:46:48PM +0100, Tristan Williams wrote: > > Then it makes me wonder what is the purpose of the off card backup > file sk_X.gpg created when the original private key was created via > the on-card method? > Huh, according

Re: OpenPGP smartcard restore

2006-06-13 Thread Ingo Klöcker
On Tuesday 13 June 2006 19:03, markus reichelt wrote: > * markus reichelt <[EMAIL PROTECTED]> wrote: > > Essentially you're saying: no backup of a private key generated > > on/via a smartcard cannot be exported. Because if it could be > > exported, importing the key(s) in question just works. > > S

Re: OpenPGP smartcard restore

2006-06-13 Thread zvrba
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 On Tue, Jun 13, 2006 at 06:55:17PM +0200, markus reichelt wrote: > > I'm not a smartcard user (somehow the concept hasn't been able to > convince me ... yet), but what you write really sounds rather > strange. Essentially you're saying: no backup

Re: OpenPGP smartcard restore

2006-06-13 Thread zvrba
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 On Tue, Jun 13, 2006 at 07:03:42PM +0200, markus reichelt wrote: > > Sorry, that was heat-induced and shall read of course as follows: > No need to apologize :) > > Essentially you're saying: a private key generated on/via a smartcard > cannot

Re: OpenPGP smartcard restore

2006-06-13 Thread Tristan Williams
On 13Jun06 18:07, [EMAIL PROTECTED] wrote: > On Tue, Jun 13, 2006 at 02:01:27PM +0100, Tristan Williams wrote: > > I am experimenting with the OpenPGP smartcard. I have two OpenPGP smart > > cards (smartA and smartB) and I want to verify that I can restore my > > on-card generated private key shoul

Re: OpenPGP smartcard restore

2006-06-13 Thread markus reichelt
* markus reichelt <[EMAIL PROTECTED]> wrote: > Essentially you're saying: no backup of a private key generated > on/via a smartcard cannot be exported. Because if it could be > exported, importing the key(s) in question just works. Sorry, that was heat-induced and shall read of course as follows:

Re: OpenPGP smartcard restore

2006-06-13 Thread markus reichelt
* [EMAIL PROTECTED] wrote: > If you want to have the same private key on several physical cards, > your only option is off-card generation, with import of the key > afterwards. I'm not a smartcard user (somehow the concept hasn't been able to convince me ... yet), but what you write really sounds

Re: OpenPGP smartcard restore

2006-06-13 Thread zvrba
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 On Tue, Jun 13, 2006 at 02:01:27PM +0100, Tristan Williams wrote: > I am experimenting with the OpenPGP smartcard. I have two OpenPGP smart > cards (smartA and smartB) and I want to verify that I can restore my > on-card generated private key shou

OpenPGP smartcard restore

2006-06-13 Thread Tristan Williams
I am experimenting with the OpenPGP smartcard. I have two OpenPGP smart cards (smartA and smartB) and I want to verify that I can restore my on-card generated private key should I loose the master card (smartA). I only want to verify that I can do it - not discuss the merits of on-card vs. off-card