4 ms·
This reminds me to move to passwordstore with a gpg key on an Yubikey.
by jopsen 9y ago
This reminds me to move to passwordstore with a gpg key on an Yubikey.
- rurban 9y agoI hope you remember that GPG keys created on a Yubikey are unsafe, due to an overly simply RSAlib implementation there for their Infinion chips.
- JshWright 9y agoKeys created on _some_ Yubikeys (it's easy enough to check).
- xelxebar 9y agoI've had a really hard time finding information on this. What exactly is potentially broken and how do I check my key?
- Gnewt 9y agoI had an affected YubiKey -- Yubico shipped out a replacement immediately. It's inconvenient if you have an old YubiKey, but the replacement process is simple. Additionally, you can always generate GPG keys on your machine, transfer them to the YubiKey, and then delete the keys from the local machine. It depends if that's an acceptable exposure for your threat model, but for me, having the keys locally for a couple minutes is fine.
- jopsen 9y agoI generated on livecd, and exported it to multiple yubikeys + backup. That way I don't have deal with different subkeys and other complications that just makes everything hard to understand :)