Do not cache smart card PIN

Alexander Paetzelt | Nitrokey alex at nitrokey.com
Mon Sep 4 19:02:13 CEST 2017


Hello Justin,

this is not possible right now.

I did a similar feature request here https://dev.gnupg.org/T3362

Maybe you have something to add.

Kind regards
Alex


On 08/28/2017 03:12 AM, Justin Chiu wrote:
> Hi,
>
> Is it possible to instruct a smart card to not cache its PIN or have
> GnuPG forcibly clear the PIN cache?
>
> My understanding is that the PIN is cached internally [1] unless if you
> enable "forcesig" (which only applies to signing operations). If this
> caching by the smart card cannot be turned off for encryption and
> authentication as well, then perhaps it is possible to configure GnuPG
> to clear the smart card's PIN cache after every operation?
>
> Thanks,
> Justin
>
> [1] https://lists.gnupg.org/pipermail/gnupg-users/2006-September/029321.html
>
>
>
> _______________________________________________
> Gnupg-users mailing list
> Gnupg-users at gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20170904/b426360a/attachment.html>


More information about the Gnupg-users mailing list