--export-options export-reset-subkey-passwd in gpg 2.1.x

Werner Koch wk at gnupg.org
Thu Oct 9 21:14:17 CEST 2014

On Thu,  9 Oct 2014 18:26, dkg at fifthhorseman.net said:

> This is a bit confusing, but it makes sense if i read the first sentence
> as "without a passphrase" instead of "with a passphrase" -- is that
> right?  certainly when i look at the output, the exported secret keys

Sure, that is what I meant.

> if the emitted key is passphrase-locked already, then why do i need to
> provide my passphrase in the first place for the export?

gpg-agent does not store the key in the OpenPGP format and thus wee need
a passphrase to convert it back. 

> Would you be open to a patch that does that for 2.1?  I'd be fine if it
> only works for --export-secret-subkey when the subkey is specified
> explicitly.


> To be clear, i'm not proposing that we should implement all of these
> things in gpg-agent -- ssh-agent works for me and matches the workflow

I was just tossing ideas.  Definitely not a goal for 2.1.0.



Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.

More information about the Gnupg-devel mailing list