Migrating to Smartcards

Martin Gollowitzer gollo at fsfe.org
Wed Aug 31 20:29:51 CEST 2011


* Werner Koch <wk at gnupg.org> [110831 08:45, 
  mID <877h5uozaa.fsf at vigenere.g10code.de>]:

> On Tue, 30 Aug 2011 20:40, gollo at fsfe.org said:
> 
> > AFAIR, 3072 bit keys have to be generated on the card. If you use
> > off-card generation, you are limited to 2048 bits.
> 
> Really? That would be a bug.

I had this problem back in 2009. 

> In case it really does not work the workaround is to first create a key
> with 3072 bits on the card and then overwrite it by importing a 3072 bit
> key.  The background is that we need to switch the card into an n-bit
> mode before we generate or import a key.

This sounds like a good reason for what I experienced. If I find the
time, I'll try it out and maybe switch to bigger subkeys. 

Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 490 bytes
Desc: not available
URL: </pipermail/attachments/20110831/209a1c32/attachment.pgp>


More information about the Gnupg-users mailing list