Gpg

Import public keys^[1]: $ gpg --import keys.txt

Check the file's signature^[2]: $ gpg --verify foo.sig foo

gpg --card-status

opensc-tool --list-readers

pcsc_scan

ykinfo -a

Delete keys: gpg --delete-keys

Delete secret keys: gpg --delete-secret-keys

List key: gpg --list-keys

List secret-keys: gpg --list-secret-keys

Create master key:

gpg2 --full-gen-key

Create subkey:

gpg --edit-key <e-mail>

gpg2 --expert --card-edit

cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksFormat keys.ext4.luks

sudo cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksOpen keys.ext4.luks gpg_vault

Resources


	https://riseup.net/en/security/message-security/openpgp/best-practices#how-to-use-this-guide
	http://ekaia.org/blog/2009/05/10/creating-new-gpgkey/
	https://spin.atomicobject.com/2013/11/24/secure-gpg-keys-guide/