Re: Backing up your PGP key by hand

2022-05-31 Thread Werner Koch via Gnupg-users
On Mon, 30 May 2022 19:52, Matt Borja said: > - Related to this approach: Is the passphrase on a private key not > sufficient encryption strength to store the private key in a secure > cloud > vault for archival purposes; or could it not be paired with a The currently used

Re: Backing up your PGP key by hand

2022-05-30 Thread Matt Borja
> > If you really care about such long preservation, carving the key into > stone or baking it in a clay tablet are the only known methods that can > reliably store data for so long (also because other methods don't exist > for so long). I'm also curious about a couple options I don't think I've

Re: Backing up your PGP key by hand

2022-05-29 Thread vedaal via Gnupg-users
On 5/26/2022 at 12:52 AM, "Robert J. Hansen via Gnupg-users" wrote: So, yeah. I'm going to be solidly on the side of "no, really, paper is a magic technology, just be sure to talk with an archivist first to ensure you're using the right kind of paper." = The other thing to consider is the

Re: Backing up your PGP key by hand

2022-05-29 Thread Johan Wevers via Gnupg-users
On 2022-05-25 22:22, Francesco Ariis wrote: > Paper was first made in the Chinese Empire, around two millennia ago I see that that was indeed considered what we call paper today, unlike the ancient Egyptian papyrus. > Sheets made with high quality pulp survived to this day. Some sheets

Re: Backing up your PGP key by hand

2022-05-25 Thread Robert J. Hansen via Gnupg-users
Since paper as we know it today doesn't even exist so long that can't be true. Maybe you are pointing to the few surviving papyrus texts? Most have not survived. I've personally seen paper ballots from elections in the Senate of ancient Rome. Admittedly, this was 15 years ago so I can no

Re: Backing up your PGP key by hand

2022-05-25 Thread Francesco Ariis
Il 25 maggio 2022 alle 21:13 Johan Wevers via Gnupg-users ha scritto: > On 2022-05-23 5:01, Stuart Longland via Gnupg-users wrote: > > > On the other hand, there are paper recordings that have lasted millennia. > > Since paper as we know it today doesn't even exist so long that can't be > true.

Re: Backing up your PGP key by hand

2022-05-25 Thread Johan Wevers via Gnupg-users
On 2022-05-23 5:01, Stuart Longland via Gnupg-users wrote: > On the other hand, there are paper recordings that have lasted millennia. Since paper as we know it today doesn't even exist so long that can't be true. Maybe you are pointing to the few surviving papyrus texts? Most have not survived.

Re: Backing up your PGP key by hand

2022-05-23 Thread Julian H. Stacey
Stuart Longland via Gnupg-users wrote: > On Tue, 03 May 2022 19:52:21 + (UTC) > Matt Borja wrote: > > > Does exporting your private key (which already comes encrypted and requires > > password authentication) to encrypted USB flash drive then placed under > > lock and key not suffice as an

Re: Backing up your PGP key by hand

2022-05-22 Thread Stuart Longland via Gnupg-users
On Tue, 03 May 2022 19:52:21 + (UTC) Matt Borja wrote: > Does exporting your private key (which already comes encrypted and requires > password authentication) to encrypted USB flash drive then placed under > lock and key not suffice as an offline backup? If the USB flash drive does not

Re: Backing up your PGP key by hand

2022-05-08 Thread Sven Richter via Gnupg-users
> And by reading them, they have powered up and refreshed the charge. The > problem applies to such flash storage devices which have been left > unpowered for longer periods of time. Again, it depends a bit on what > the planned retention period is for the keys and their data. A few months ago I

Re: Backing up your PGP key by hand

2022-05-05 Thread Matt Borja
Sorry for the lame tracking links; that's apparently a setting automatically enabled by SendGrid which I'm using to send out on my custom email domain. Hopefully they're disabled now and below are showing the original URLs as I had pasted them, else I give up, lol. Demo: -

Re: Backing up your PGP key by hand

2022-05-05 Thread Matt Borja
The EEPROM notes are intriguing to me, and if that's an option you're considering, I went ahead and tossed up some old code onto a gist if you're interested. It's a crude example of storing PGP private key in flash (vs. SRAM) using a little PROGMEM hack for the Arduino Uno:

Re: Backing up your PGP key by hand

2022-05-05 Thread Jacob Bachmeyer via Gnupg-users
Lars Noodén via Gnupg-users wrote: On 5/5/22 01:11, Jacob Bachmeyer wrote: > Lars Noodén via Gnupg-users wrote: >> A removable hard drive might be an option, if the storage time >> is less than a decade and there are decent storage conditions >> in regards to chemicals, temperature, humidity,

Re: Backing up your PGP key by hand

2022-05-05 Thread Matt Borja
So I guess all that leaves us with at this point is laser welded inscriptions onto a block of metal, installed backwards as the cornerstone of the next monument being preserved by a historic society. It’ll be the next iteration of 3D printing: MIaaB (Metal Inscriptions as a Backup). Whole

Re: Backing up your PGP key by hand

2022-05-05 Thread Julian H. Stacey
Matthias Apitz wrote: > I think, paper tapes as in the years 70 would be the best media for this > approach. Paper tape had a high error rate (& tear rate). It chaffed & built dirt on reader, & absorbed finger grease & misread whether optical or capacitive readers. Mylar (plastic) was better,

Re: Backing up your PGP key by hand

2022-05-05 Thread Matthias Apitz
I think, paper tapes as in the years 70 would be the best media for this approach. matthias -- Matthias Apitz, ✉ g...@unixarea.de, http://www.unixarea.de/ +49-176-38902045 Public GnuPG key: http://www.unixarea.de/key.pub Peace instead of NATO! Мир вместо НАТО! Frieden statt NATO! ¡Paz en

Re: Backing up your PGP key by hand

2022-05-05 Thread Lars Noodén via Gnupg-users
On 5/5/22 01:11, Jacob Bachmeyer wrote: > Lars Noodén via Gnupg-users wrote: >> A removable hard drive might be an option, if the storage time >> is less than a decade and there are decent storage conditions >> in regards to chemicals, temperature, humidity, and so on. Flash >> memory seems to

Re: Backing up your PGP key by hand

2022-05-04 Thread Jacob Bachmeyer via Gnupg-users
Lars Noodén via Gnupg-users wrote: A removable hard drive might be an option, if the storage time is less than a decade and there are decent storage conditions in regards to chemicals, temperature, humidity, and so on. Flash memory seems to lose its charge rather quickly, measured in months.

Re: Backing up your PGP key by hand

2022-05-04 Thread Lars Noodén via Gnupg-users
On 5/3/22 22:08, Francesco Ariis wrote: [snip] As you probably expect, I agree with (almost) everything you say. My experiment was to document something which — as far as I know — was not documented until now (although probably done numerous times) and a way to spur a discussion on the topic of

Re: Backing up your PGP key by hand

2022-05-03 Thread Matt Borja
Does exporting your private key (which already comes encrypted and requires password authentication) to encrypted USB flash drive then placed under lock and key not suffice as an offline backup? Aside: Private keys aren’t the only thing that should be getting backed up. Revocation certs are

Re: Backing up your PGP key by hand

2022-05-03 Thread Francesco Ariis
Hello Jonathan, Il 02 maggio 2022 alle 13:26 Jonathan Cross via Gnupg-users ha scritto: > Thank you for sharing this Francesco. > > Yes, having a secure, durable offline backup is important. > > Coming from the Bitcoin space, we've already explored many options in an > effort to allow users

Re: Backing up your PGP key by hand

2022-05-02 Thread Ingo Klöcker
On Montag, 2. Mai 2022 13:26:06 CEST Jonathan Cross via Gnupg-users wrote: > I have to say the effort involved in your method seems unrealistic for most > users: > > > Considering a paperkey is less than 150 lines, that means it should take > > 50 sessions, or a little less than 2½ months to get

Re: Backing up your PGP key by hand

2022-05-02 Thread Jonathan Cross via Gnupg-users
Thank you for sharing this Francesco. Yes, having a secure, durable offline backup is important. Coming from the Bitcoin space, we've already explored many options in an effort to allow users easily to back up private keys. I have to say the effort involved in your method seems unrealistic for

Backing up your PGP key by hand

2022-04-24 Thread Francesco Ariis
Hello gnupg-users, I decided to back up my secret gpg key with pencil and paper, documenting the process here http://ariis.it/static/articles/handwritten-pgp-key/page.html It is tangent to gpg but I thought that other gnupg-users might have been interested in the whys and hows of the