Accessing the private DOs of the smartcard

Sven Radde email at sven-radde.de
Wed Apr 9 12:46:17 CEST 2008


Hello GnuPG users,

Is there a convenient way to access the data objects of the OpenPGP 
smartcard? The best thing I know is to use "gpg --card-edit" to get at 
the PIN-protected DOs, which is cumbersome and does not give a very 
machine-friendly output...

What I am thinking of is the following:
The card with its PIN counters represents a protection against brute 
force attempts, that is not available to other software-only crypto 
applications like EncFS, Truecrypt etc. Consequently, the card PIN can 
be shorter than the overlong passphrases needed to secure those 
applications.
Now, it would be really nice to store a long passphrase into one of the 
PIN-protected data objects and have the possibility to pipe that to one 
of those applications.
This way, e.g., a Truecrypt volume would be protected by a very long 
passphrase, while the owner has the convenience of "unlocking" that 
passphrase using his/her shorter smartcard PIN.

Can this be accomplished using some scripting? Or may I suggest to add 
"--card-do1" through "--card-do4" as new commands to GnuPG which would 
print the respective string to standard output after asking for the PIN 
when applicable?

Thanks for listening :-)
  Sven



More information about the Gnupg-users mailing list