gpg --card-status
Felix E. Klee
felix.klee at inka.de
Sat Dec 30 23:30:39 CET 2023
Example output with line numbers:
01 Reader ...........: Yubico YubiKey CCID 00 00
02 Application ID ...: D2760001240103040006186980150000
03 Application type .: OpenPGP
04 Version ..........: 3.4
05 Manufacturer .....: Yubico
06 Serial number ....: 18698015
07 Name of cardholder: [not set]
08 Language prefs ...: [not set]
09 Salutation .......:
10 URL of public key : [not set]
11 Login data .......: [not set]
12 Signature PIN ....: not forced
13 Key attributes ...: rsa4096 rsa4096 rsa4096
14 Max. PIN lengths .: 127 127 127
15 PIN retry counter : 3 0 3
16 Signature counter : 0
17 KDF setting ......: off
18 Signature key ....: 7A0F E73D DB74 4F0F 9734 1DA7 1BE3 49D1 1B6E
D589
19 created ....: 2023-06-29 03:50:43
20 Encryption key....: DBBD 3239 D0F1 4326 808D FC8F 7CC0 2D68 D2E3
1736
21 created ....: 2023-06-29 03:50:43
22 Authentication key: 7A0F E73D DB74 4F0F 9734 1DA7 1BE3 49D1 1B6E
D589
23 created ....: 2023-06-29 03:50:43
24 General key info..: pub rsa4096/1BE349D11B6ED589 2023-06-29
Felix E. Klee (YubiKey) <yubikey at f76.eu>
25 sec> rsa4096/1BE349D11B6ED589 created: 2023-06-29 expires:
never
26 card-no: 0006 18698015
27 ssb> rsa4096/7CC02D68D2E31736 created: 2023-06-29 expires:
never
28 card-no: 0006 18698015
29 ssb# rsa4096/32B106F6877CC64B created: 2023-11-22 expires:
never
Lines 18, 20, 22: Fingerprint. I read somewhere that this a hash of the
key. But of which one? The public key? The private key? What hash
function?
Line 25: “sec>” means secret primary key. Where does the key ID come
from? Is it read from the card? Or it read from the public key ring on
disk?
Line 27: “ssb>” means secret sub key.
Line 29: “ssb#” means secret sub key, but without the matching secret
key on the card. This I just learned from Ingo Klöcker in another
thread.
If there is any authoritative documentation, please let me know! So far,
I’ve puzzled the info together, piece by piece from various resources on
the web.
More information about the Gnupg-users
mailing list