5 ms·
That is incorrect: you can extract the key _once_ when generated on the device (at least with the OpenPGP applet) and hand it to e.g. paperkey for safekeeping.
by lvh 9y ago
That is incorrect: you can extract the key _once_ when generated on the device (at least with the OpenPGP applet) and hand it to e.g. paperkey for safekeeping.
- AbacusAvenger 9y agoCan you explain how to do this? I've never seen this functionality before.
- osh5qQK9G 9y agodo you have a source that private PGP keys are exportable? A statement in a blog-post by YubiKey: > Note that moving usage of an OpenPGP key to a new YubiKey NEO requires that you have saved a backup copy of the private key on the card as there is no way to retrieve the private key from any YubiKey, including the YubiKey NEO. https://www.yubico.com/2015/04/yubikey-neo-openpgp-security-bug/ https://www.yubico.com/2015/04/yubikey-neo-openpgp-security-...
- lvh 9y agoI have done this myself several times. That comment is accurate, but it's referring to the general case, post key generation.