Re: restoring SmartCard key with off-card copy

2011-10-06 Thread Achim Cloer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear all, dear Peter, Restore the given file to a card. This command may be used to restore a backup key (as generated during card initialization) to a new card. In almost all cases this will be the encryption key. You should use this command

Re: restoring SmartCard key with off-card copy

2011-10-06 Thread Peter Lebbing
I succeeded to write back this encryption key to the card. But PGP is writing the same key to two positions in the card. So now I have a Card with the same key in encryption and signature. A bit odd. I hope it will not give problems. My suggestion: let the card generate a new signature key

Re: restoring SmartCard key with off-card copy

2011-10-06 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 05-10-2011 6:21, Peter Lebbing escribió: On 05/10/11 08:15, Faramir wrote: Would Paperkey be useful to do that? I guess no, since it encodes the private key somehow... but maybe tweaking it? IMHO, if you want to have a backup that also

Re: restoring SmartCard key with off-card copy

2011-10-05 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 28/09/11 15:50, Werner Koch wrote: There is no feature for it. You may use gpgsplit to manually construct a key from such a backup. You need to take the keybinding signature etc from the matching public key. I have not tried, it though.

Re: restoring SmartCard key with off-card copy

2011-10-05 Thread Peter Lebbing
On 05/10/11 08:15, Faramir wrote: Would Paperkey be useful to do that? I guess no, since it encodes the private key somehow... but maybe tweaking it? IMHO, if you want to have a backup that also allows you to use the key without the card, the following procedure is by far the easiest: -

Re: restoring SmartCard key with off-card copy

2011-10-05 Thread Laurent Jumet
Hello Peter ! Peter Lebbing pe...@digitalbrains.com wrote: AFAIK, if you create a smartcard key with backup file, this is pretty much equivalent: the key is created off-card by GnuPG, and uploaded to the card. Only when you choose the option to create a smartcard key without backup file

Re: restoring SmartCard key with off-card copy

2011-10-05 Thread Robert J. Hansen
On 10/5/2011 5:31 AM, Laurent Jumet wrote: In my opinion, a key-to-card key should *never* have an existent backup. Never is one of those words that's best used sparingly. Purpose of cards is one man/one card, as the card is supposed to identify the man for all purposes. This is one

Re: restoring SmartCard key with off-card copy

2011-10-05 Thread Peter Lebbing
On 05/10/11 13:17, Robert J. Hansen wrote: On 10/5/2011 5:31 AM, Laurent Jumet wrote: In my opinion, a key-to-card key should *never* have an existent backup. There are many other use cases similar to this in which it makes good sense to have certificates on hard drives as well as

Re: restoring SmartCard key with off-card copy

2011-09-28 Thread Werner Koch
On Mon, 26 Sep 2011 23:11, achim.cl...@cloer.de said: we are planing to deploy PGP in our team with Smartcards. I assume you mean GnuPG, which has - like PGP - an implementaion of the OpenPGP standard. During generating the keys, the pgp card is also generating a off-card copy. But we fail

Re: restoring SmartCard key with off-card copy

2011-09-28 Thread Achim Cloer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thank you Werner! Am 28.09.2011 09:15, schrieb Werner Koch: The backup file only contains the parts of the key which will be stored on the card. After the --edit-key prompt is shown, enter the command bkuptocard and follow the instructions. If

Re: restoring SmartCard key with off-card copy

2011-09-28 Thread Werner Koch
On Wed, 28 Sep 2011 12:09, achim.cl...@cloer.com said: Is there any possibility to import the off-card-backup into a normal keyring in GPG without using a SmartCard? There is no feature for it. You may use gpgsplit to manually construct a key from such a backup. You need to take the

Re: restoring SmartCard key with off-card copy

2011-09-28 Thread Peter Lebbing
On 28/09/11 15:50, Werner Koch wrote: There is no feature for it. You may use gpgsplit to manually construct a key from such a backup. You need to take the keybinding signature etc from the matching public key. I have not tried, it though. I'm fairly sure I tried it and it worked. It's a

restoring SmartCard key with off-card copy

2011-09-27 Thread Achim Cloer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear Users on this list, we are planing to deploy PGP in our team with Smartcards. Currently we are testing and learning... We found the following problem: During generating the keys, the pgp card is also generating a off-card copy. But we fail to

restoring SmartCard key with off-card copy

2011-09-27 Thread Achim Cloer
Dear Users on this list, we are planing to deploy PGP in our team with Smartcards. Currently we are testing and learning... We found the following problem: During generating the keys, the pgp card is also generating a off-card copy. But we fail to import this backup into OpenPGP. The error

Re: restoring SmartCard key with off-card copy

2011-09-27 Thread Peter Lebbing
On 26/09/11 23:11, Achim Cloer wrote: During generating the keys, the pgp card is also generating a off-card copy. But we fail to import this backup into OpenPGP. It's been a while since I played with it, but it worked then. From the man page, under --edit-key: bkuptocard file Restore the

Fwd: bulk an achim.cl...@cloer.de restoring SmartCard key with off-card copy

2011-09-27 Thread Achim Cloer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear Users on this list, we are planing to deploy PGP in our team with Smartcards. Currently we are testing and learning... We found the following problem: During generating the keys, the pgp card is also generating a off-card copy. But we fail to