“Hardware problem” with OpenPGP smart card

Nicolas Boullis nicolas.boullis at ecp.fr
Sat Dec 5 15:20:33 CET 2020


Hi,

I’ve been using GnuPG with my private keys stored in an OpenPGP 
smartcard since year 2014. Suddenly, it stopped working yesterday.

The smartcard is an ID000-cut version 2 OpenPGP smartcard, that I put 
in a Gemalto Shell Token v2 card reader.

Whenever I try to decrypt a file with gnupg, it asks me for the pin 
code, and then fails with:

gpg: public key decryption failed: Hardware problem
gpg: decryption failed: No secret key

But gpg2 --card-status looks fine:

Reader ...........: 08E6:3438:EB846942:0
Application ID ...: D2760001240102000005000028AC0000
Version ..........: 2.0
Manufacturer .....: ZeitControl
Serial number ....: 000028AC
Name of cardholder: Nicolas Boullis
Language prefs ...: fren
Sex ..............: male
URL of public key : https://people.debian.org/~nboullis/882D4468.asc
Login data .......: nboullis
Signature PIN ....: not forced
Key attributes ...: rsa4096 rsa4096 rsa4096
Max. PIN lengths .: 32 32 32
PIN retry counter : 2 0 3
Signature counter : 89
Signature key ....: E255 CB42 FC16 B17E 20CD  18D9 79F1 8F90 CC2B 8435
      created ....: 2014-12-14 00:17:04
Encryption key....: 7D9E A605 E167 A29C 4C0F  8AEA 5BEC 68E0 0D97 34FB
      created ....: 2014-12-14 00:12:11
Authentication key: F2DF B54A 3623 7414 53DD  9461 F203 2B12 D9E8 23FD
      created ....: 2014-12-14 00:19:47
General key info..: sub  rsa4096/79F18F90CC2B8435 2014-12-14 Nicolas Boullis
sec#  rsa4096/D0E94F8D882D4468  created: 2014-12-13  expires: 2021-01-01
ssb>  rsa4096/5BEC68E00D9734FB  created: 2014-12-14  expires: never     
                                card-no: 0005 000028AC
ssb>  rsa4096/79F18F90CC2B8435  created: 2014-12-14  expires: never     
                                card-no: 0005 000028AC
ssb>  rsa4096/F2032B12D9E823FD  created: 2014-12-14  expires: never     
                                card-no: 0005 000028AC


Has anyone experienced such a problem?
Any suggestion how I can sort this out?


Cheers,

-- 
Nicolas



More information about the Gnupg-users mailing list