How do you use your OpenPGP card ?
Joachim Breitner
mail at joachim-breitner.de
Sun Jan 9 21:43:17 CET 2005
Hi,
your primary key should definately go to the Signature Key slot, since
it is used to sign your subkeys, your friends' keys and, unless you have
a dedicated signature subkey, your messages. The Authentication Key slot
is for keys that you use to log in somewhere, for example using Moritz'
libpam-poldi or maybe some kind of ssh daemon.
HTH,
nomeata
Am Sonntag, den 09.01.2005, 19:30 +0100 schrieb Dany Nativel:
> I've been able to generate my primary RSA signing key off-card as well
> as an encryption RSA key.
>
> When I execute the "keytocard" command it asks me where I want to store
> the Primary key :
>
> (1) Signature Key
> (3) Authentication Key
>
> I tried both and they work and I wondering what it the best practice out
> there.
> What's behind the Authentication Key ?
>
> Dany
>
> ---------------------------------------------------------------------------------------------------------------------------------
> sec 1024R/48D72CFD created: 2005-01-09 expires: never
> ssb 1024R/7E360C43 created: 2005-01-09 expires: never
> (1) NUMBER5
>
> Command> keytocard
> Really move the primary key? (y/N) y
> gpg: detected reader `GemPC410 0 0'
> Signature key ....: 8422 DA92 7A7F 6BAB 608F D3AF 6E35 E902 3186 D0DD
> Encryption key....: A1D1 CE23 AAC1 1135 1742 5C0C A953 9748 7FFB 5067
> Authentication key: 7CBB 67EA 4845 9535 4F3A F188 61A6 A1A2 504D 2B68
>
> Please select where to store the key:
> (1) Signature key
> (3) Authentication key
> Your selection?
>
>
>
> _______________________________________________
> Gnupg-devel mailing list
> Gnupg-devel at gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-devel
--
Joachim "nomeata" Breitner
mail: mail at joachim-breitner.de | ICQ# 74513189 | GPG-Key: 4743206C
JID: joachimbreitner at amessage.de | http://www.joachim-breitner.de/
Debian Developer: nomeata at debian.org
Please avoid sending me Word or PowerPoint attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html
More information about the Gnupg-devel
mailing list