Gpg
| Command | |
|---|---|
| Import public keys[1] | $ gpg --import keys.txt
|
| Check the file's signature[2] | $ gpg --verify foo.sig foo
|
| gpg --card-status | |
| Delete keys | gpg --delete-keys |
| Delete secret keys | gpg --delete-secret-keys |
| List key | gpg --list-keys |
| List secret-keys | gpg --list-secret-keys |
| Create master key | gpg2 --full-gen-key |
| Create subkey | gpg --edit-key <e-mail> |
opensc-tool --list-readers
pcsc_scan
ykinfo -a
https://wiki.debian.org/Subkeys
:
gpg2 --expert --card-edit
cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksFormat keys.ext4.luks
sudo cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksOpen keys.ext4.luks gpg_vault
Remove private master key:
gpg2 --with-keygrip --list-key 0x<MASTERKEY>
rm -rf $GNUPGHOME/private-keys-v1.d/<KEYGRIPID>.key
all private keys are in private-keys-v1.d/.