Non-interactive PIN not accepted, gpg hangs
gniibe at fsij.org
Thu Oct 1 13:07:58 CEST 2015
While the discussion proceeds, I can't determine which post I should
reply. Well, I think I reply to this post.
On 09/30/2015 10:37 PM, Laurent Blume wrote:
> The thing is, I asked around (on some other lists), and had a look at
> HSM's, we even have a hundred thousands € worth of HSM, used for
> something completely different.
> But that's the thing: those very expensive thingies, they come with an
> API and a manual, you «only» need to develop your application around it.
> The NitroKey (and others like it) are both cheaper and easier to deploy
> using off-the-shelf software (at least it looks so on paper).
> That said, maybe the Pro model is not the right one, and I made a
> mistake there out of ignorance.
I think that Nitrokey series would be a right solution, both for
hardware-wise and their perspective.
As Peter suggested, I feel that your use case is not directly related
to OpenPGP. It seems that you just need simple (non-interactive)
public key authentication.
IIUC, I believe that Nitrokey community would be best place for such a
use case. I guess that they are open to diverse use cases other than
OpenPGP, while I have narrow/tight perspective for my Gnuk Token,
specifically limited to OpenPGP.
I think that it is not that technically difficult to write an
application to access Nitrokey (something) for simple non-interactive
public key authentication. If you say you made a mistake, it's just
that it has not been directly supported by existing tool of GnuPG and
> My impression is that there are no middle-ground options between the
> cheap, personal use device and the super-expensive brick.
> If you do have suggestions, they're very welcome. I'm still assessing
> feasibility, and able to change directions.
OpenPGPcard compatible assumes it's users who control their computing.
This can be done by reasonable cost, because there are less conflicts.
Most smartcard/token applications assume that it's a company (or other
entity) who should control "consumers"' computing. This is a
different problem to solve, and some expensive solution is only to be
expected, naturally, --- no wonder.
More information about the Gnupg-users