Gpg
| Import public keys[1] | $ gpg --import keys.txt
|
||
| Check the file's signature[2] | $ gpg --verify foo.sig foo
|
||
| gpg --card-status | |||
| Delete keys | gpg --delete-keys | ||
| Delete secret keys | gpg --delete-secret-keys | ||
| List key | gpg --list-keys | ||
| List secret-keys | gpg --list-secret-keys | ||
| Create master key | gpg2 --full-gen-key | ||
| Create subkey | gpg --edit-key <e-mail> |
opensc-tool --list-readers
pcsc_scan
ykinfo -a
https://wiki.debian.org/Subkeys
:
gpg2 --expert --card-edit
cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksFormat keys.ext4.luks
sudo cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksOpen keys.ext4.luks gpg_vault
Remove private master key:
gpg2 --with-keygrip --list-key 0x<MASTERKEY>
rm -rf $GNUPGHOME/private-keys-v1.d/<KEYGRIPID>.key
all private keys are in private-keys-v1.d/.