Crypto stick not working w/ gnupg 2.1.x?

Albrecht Dreß albrecht.dress at arcor.de
Sun May 22 19:46:46 CEST 2016


Hi all,

I use a 'Nitrokey Pro' crypto stick to store my private key securely, configured according to [1].  It works perfectly with gnupg 1.4.x and 2.0.x, but fails with 2.1.x (I tried 1.4.20, 2.0.30, 2.1.11 and 2.1.12).

Trying to decrypt a message from the command line w/ 2.1.x, I get

<snip>
$ gpg2 -d some-file.asc
gpg: encrypted with RSA key, ID 00000000
gpg: encrypted with RSA key, ID 00000000
gpg: decryption failed: No secret key
</snip>

whereas 2.0 says

<snip>
gpg: anonymous recipient; trying secret key xxxxxxxx ...
gpg: anonymous recipient; trying secret key xxxxxxxx ...
gpg: anonymous recipient; trying secret key xxxxxxxx ...
gpg: anonymous recipient; trying secret key xxxxxxxx ...
gpg: okay, we are the anonymous recipient.
gpg: encrypted with RSA key, ID 00000000
gpg: encrypted with RSA key, ID 00000000
</snip>

Likewise, it is not possible to use gpg2 through gpgme in my MUA (which is my primary use).  I noticed that 'gpg2 --list-secret-keys' emits the message

gpg: error computing keygrip

before printing the information about the key on the crypto stick (which neither 1.4 nor 2.0 do).

Any idea ho I can fix this?

Thanks in advance
Albrecht.

[1] <https://wiki.fsfe.org/TechDocs/CardHowtos/CardWithSubkeysUsingBackups>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 465 bytes
Desc: not available
URL: </pipermail/attachments/20160522/641b31e8/attachment.sig>


More information about the Gnupg-devel mailing list