4 ms·

That's okay. RSA-4096 is suitable for long term secrets, but we're talking about authentication: typically signing short challenges, or DH key shares, for immed

• hdhzy 9y ago
  How do you authenticate through NFC PGP on Android? Is that something specific to your company or is there a public app that you're using?
  • xorcist 9y ago
    You can use something called Openkeychain on Android. It uses NFC Yubikeys for both PGP and SSH. Regarding your 4096 bit requirements, normally when you have those security requirements you would keep that key offline and use shorter lived 2048 bit keys for actual authentication. There is 4096 bit support with Yubikey 4 which unfortunately isn't offered with NFC.
    • hdhzy 9y ago
      > You can use something called Openkeychain on Android. It uses NFC Yubikeys for both PGP and SSH. Okay, but open-keychain does not provide GUI to just sign or authenticate a user (you can sign as part of encryption process) so I was wondering if the parent was mentioning some application that interfaces with open Keychain (like k9mail or conversations.im) that gives just that: user authentication.
    • hdhzy 9y ago
      > There is 4096 bit support with Yubikey 4 which unfortunately isn't offered with NFC. Yes, but OTG adapters work pretty well here or one can use Yubikey 4C if the phone has USB-C input.