Re: restoring SmartCard key with off-card copy

2011-10-06 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 05-10-2011 6:21, Peter Lebbing escribió: > On 05/10/11 08:15, Faramir wrote: >> Would Paperkey be useful to do that? I guess no, since it >> encodes the private key somehow... but maybe tweaking it? > > IMHO, if you want to have a backup that als

Re: restoring SmartCard key with off-card copy

2011-10-06 Thread Peter Lebbing
> I succeeded to write back this encryption key to the card. But PGP is > writing the same key to two positions in the card. So now I have a > Card with the same key in "encryption" and "signature". A bit odd. I hope it will not give problems. My suggestion: let the card generate a new signature k

Re: restoring SmartCard key with off-card copy

2011-10-06 Thread Achim Cloer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear all, dear Peter, > Restore the given file to a card. This command may be used to > restore a backup key (as generated during card initialization) to a > new card. In almost all cases this will be the encryption key. You > should use this command

Re: restoring SmartCard key with off-card copy

2011-10-05 Thread Peter Lebbing
On 05/10/11 13:17, Robert J. Hansen wrote: > On 10/5/2011 5:31 AM, Laurent Jumet wrote: >> In my opinion, a key-to-card key should *never* have an existent >> backup. > > There are many other use cases similar to this in which it makes good > sense to have certificates on hard drives as well as cer

Re: restoring SmartCard key with off-card copy

2011-10-05 Thread Robert J. Hansen
On 10/5/2011 5:31 AM, Laurent Jumet wrote: > In my opinion, a key-to-card key should *never* have an existent > backup. "Never" is one of those words that's best used sparingly. > Purpose of cards is "one man"/"one card", as the card is > supposed to identify the man for all purposes. This is on

Re: restoring SmartCard key with off-card copy

2011-10-05 Thread Laurent Jumet
Hello Peter ! Peter Lebbing wrote: > AFAIK, if you create a smartcard key with backup file, this is pretty much > equivalent: the key is created off-card by GnuPG, and uploaded to the card. > Only when you choose the option to create a smartcard key without backup > file will it get generated o

Re: restoring SmartCard key with off-card copy

2011-10-05 Thread Peter Lebbing
On 05/10/11 08:15, Faramir wrote: >Would Paperkey be useful to do that? I guess no, since it encodes > the private key somehow... but maybe tweaking it? IMHO, if you want to have a backup that also allows you to use the key without the card, the following procedure is by far the easiest: - Cr

Re: restoring SmartCard key with off-card copy

2011-10-04 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 > On 28/09/11 15:50, Werner Koch wrote: >> There is no feature for it. You may use gpgsplit to manually >> construct a key from such a backup. You need to take the >> keybinding signature etc from the matching public key. I have >> not tried, it t

Re: restoring SmartCard key with off-card copy

2011-09-28 Thread Peter Lebbing
On 28/09/11 15:50, Werner Koch wrote: > There is no feature for it. You may use gpgsplit to manually construct > a key from such a backup. You need to take the keybinding signature etc > from the matching public key. I have not tried, it though. I'm fairly sure I tried it and it worked. It's a

Re: restoring SmartCard key with off-card copy

2011-09-28 Thread Werner Koch
On Wed, 28 Sep 2011 12:09, achim.cl...@cloer.com said: > Is there any possibility to import the off-card-backup into a normal > keyring in GPG without using a SmartCard? There is no feature for it. You may use gpgsplit to manually construct a key from such a backup. You need to take the keybind

Re: restoring SmartCard key with off-card copy

2011-09-28 Thread Achim Cloer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thank you Werner! Am 28.09.2011 09:15, schrieb Werner Koch: > The backup file only contains the parts of the key which will be > stored on the card. After the --edit-key prompt is shown, enter > the command "bkuptocard" and follow the instructions.

Re: restoring SmartCard key with off-card copy

2011-09-28 Thread Werner Koch
On Mon, 26 Sep 2011 23:11, achim.cl...@cloer.de said: > we are planing to deploy PGP in our team with Smartcards. I assume you mean GnuPG, which has - like PGP - an implementaion of the OpenPGP standard. > During generating the keys, the pgp card is also generating a off-card > copy. But we fail

Fwd: bulk an achim.cl...@cloer.de restoring SmartCard key with off-card copy

2011-09-27 Thread Achim Cloer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear Users on this list, we are planing to deploy PGP in our team with Smartcards. Currently we are testing and learning... We found the following problem: During generating the keys, the pgp card is also generating a off-card copy. But we fail to i

Re: restoring SmartCard key with off-card copy

2011-09-27 Thread Peter Lebbing
On 26/09/11 23:11, Achim Cloer wrote: > During generating the keys, the pgp card is also generating a off-card copy. > But we fail to import this backup into OpenPGP. It's been a while since I played with it, but it worked then. From the man page, under --edit-key: bkuptocard file Restore the g

restoring SmartCard key with off-card copy

2011-09-27 Thread Achim Cloer
Dear Users on this list, we are planing to deploy PGP in our team with Smartcards. Currently we are testing and learning... We found the following problem: During generating the keys, the pgp card is also generating a off-card copy. But we fail to import this backup into OpenPGP. The error messa

restoring SmartCard key with off-card copy

2011-09-27 Thread Achim Cloer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear Users on this list, we are planing to deploy PGP in our team with Smartcards. Currently we are testing and learning... We found the following problem: During generating the keys, the pgp card is also generating a off-card copy. But we fail to i