s83/YubiKey-Guide
1
0
Fork 0
mirror of https://github.com/drduh/YubiKey-Guide.git synced 2025-05-12 16:17:14 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Rewrite keys generation tutorial

Browse source 
The master key is now created with `--batch` and a configuration script.
The subkeys are created with the quick key manipulation
interface (`--quick-add-key`).

Also provided two configuration scripts as templates for a RSA4096 or a
ED25519 master key.

Signed-off-by: apiraino <apiraino@users.noreply.github.com>
This commit is contained in:
apiraino 2021-08-22 21:21:50 +02:00
parent 31074ac13d
commit 5182d5e3d8
No known key found for this signature in database
GPG key ID: EE6A89440C49992C
3 changed files with 117 additions and 273 deletions
Download patch file Download diff file Expand all files Collapse all files

32
contrib/gen-params-ed25519 Normal file
View file

@ -0,0 +1,32 @@
# GnuPG v2.1.7 or newer
%echo Generating a OpenPGP key
# uncomment the following line to remove asking for a passphrase
#%no-protection
Key-Type: eddsa
Key-Curve: Ed25519
# Key generated is a master key ("certificate")
Key-Usage: cert
# Parameters to generate a subkey
# Subkey-Type: ecdh
# Subkey-Curve: Curve25519
# Choose one of following options
# Subkey-Usage: sign
# Subkey-Usage: auth
# Subkey-Usage: encrypt
# select a name and email address - neither has to be valid nor existing
Name-Real: Dr Duh
Name-Email: <doc@duh.to>
# Do not set the key to expire
Expire-Date: 0
# Do a commit here, so that we can later print "done" :-)
%commit
%echo done

29
contrib/gen-params-rsa4096 Normal file
View file

@ -0,0 +1,29 @@
%echo Generating a OpenPGP key
# uncomment the following line to remove asking for a passphrase
#%no-protection
Key-Type: RSA
Key-Length: 4096
# Key generated is a master key ("certificate")
Key-Usage: cert
# Parameters to generate a subkey
# Subkey-Type: ELG-E
# Subkey-Length: 4096
# Choose one of following options
# Subkey-Usage: encrypt
# Subkey-Usage: sign
# Subkey-Usage: auth
# select a name and email address - neither has to be valid nor existing
Name-Real: Dr Duh
Name-Email: <doc@duh.to>
# Do not set the key to expire
Expire-Date: 0
# Do a commit here, so that we can later print "done" :-)
%commit
%echo done