"gpg --card-edit" with multiple card readers (Yubikey)

Klaus Vink Slott klaus at vink-slott.dk
Mon Jul 24 20:36:37 CEST 2023


On 20.07.2023 kl. 03.47 Michael Richardson wrote:
> 
> Andrew Gallagher <andrewg at andrewg.com> wrote: The yubikey
>      > does not provide any method to copy the private key material back off
>      > that storage..
> 
> So I can generate the key on laptop, copy it to multiple yubikey, and do the
> crypto on the device, and the yubikey won't let the private key out again.
> Once I destroy the copy on my laptop, them I'm good.

Right, although I would recommend to copy key onto two keys, in case you 
loose your primary key or it breaks for some reason.

Another possibility is to keep the "generator pc" on a safe place.

-- 
Klaus



More information about the Gnupg-users mailing list