Re: Decryption fails with 4096bit key on SmartCard

2015-09-30 Thread Mateusz Zalega
Hi Marcus, > Ok, I'm not sure whether someone from the Nitrokey team is following this > list, so I'll contact them and ask them to reproduce this. The card claims > to support 4096bit and since the key is on the card it should be possible > to use it, too... Fingers crossed... ;) I got a heads-up

Re: Decryption fails with 4096bit key on SmartCard

2015-09-28 Thread Marcus Ilgner
On Mon, 28 Sep 2015 at 09:04 NIIBE Yutaka wrote: > On 09/25/2015 02:55 PM, Marcus Ilgner wrote: > [...] > Thanks for the help, I have a feeling we're making some headway towards a > > solution. > > The error code of 6A88 is a kind of strange for me. If it's > OpenPGPcard v3.x with AES symmetric

Re: Decryption fails with 4096bit key on SmartCard

2015-09-28 Thread NIIBE Yutaka
On 09/25/2015 02:55 PM, Marcus Ilgner wrote: >> You'll see the debug dump of following line: >> >> raw apdu: 00 47 81 00 02 B8 00 00 >> > > Not sure whether that is significant but there were a few zero bytes more: > raw apdu: 00 47 81 00 00 00 02 B8 00 08 00 It is also correct. Short form i

Re: Decryption fails with 4096bit key on SmartCard

2015-09-24 Thread Marcus Ilgner
On Thu, 24 Sep 2015 at 02:46 NIIBE Yutaka wrote: > On 09/22/2015 10:26 PM, Marcus Ilgner wrote: > > Thank you for the hint. I updated the gist at > > https://gist.github.com/milgner/b823685c8a5960f1f13b to include both the > > output of `gpg --card-status` (which works fine) as well as the log fo

Re: Decryption fails with 4096bit key on SmartCard

2015-09-23 Thread NIIBE Yutaka
On 09/22/2015 10:26 PM, Marcus Ilgner wrote: > Thank you for the hint. I updated the gist at > https://gist.github.com/milgner/b823685c8a5960f1f13b to include both the > output of `gpg --card-status` (which works fine) as well as the log for > trying to decrypt with CCID disabled in scdaemon.conf (

Re: Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread Marcus Ilgner
On Tue, 22 Sep 2015 at 16:30 Kristian Fiskerstrand < kristian.fiskerstr...@sumptuouscapital.com> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 09/22/2015 03:26 PM, Marcus Ilgner wrote: > > > > > So, again, thanks for helping to investigate! I hope we can find a > > solution to

Re: Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 09/22/2015 03:26 PM, Marcus Ilgner wrote: > > So, again, thanks for helping to investigate! I hope we can find a > solution to this :) > Not following this thread too closely, but I couldn't see any debug output of the actual failed decryptio

Re: Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread NIIBE Yutaka
On 2015-09-22 at 09:30 +, Marcus Ilgner wrote: > Here you can find the full > log: https://gist.github.com/milgner/b823685c8a5960f1f13b Thank you for the dump. There are fingerprints and timestamps registered on the card. But, it failed decryption with "No Record". Usually, it means there is

Re: Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread Marcus Ilgner
Thank you for the hint. I updated the gist at https://gist.github.com/milgner/b823685c8a5960f1f13b to include both the output of `gpg --card-status` (which works fine) as well as the log for trying to decrypt with CCID disabled in scdaemon.conf (which unfortunately it yields the same error as befor

Re: Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread Marcus Ilgner
Hi Werner, thank you for the quick reply, it's much appreciated! On Tue, 22 Sep 2015 at 11:10 Werner Koch wrote: > On Tue, 22 Sep 2015 08:51, marcus.ilg...@gmail.com said: > > > gpg: public key decryption failed: Missing item in object > > gpg: decryption failed: No secret key > > This is proba

Re: Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread Werner Koch
On Tue, 22 Sep 2015 08:51, marcus.ilg...@gmail.com said: > gpg: public key decryption failed: Missing item in object > gpg: decryption failed: No secret key This is probably in scdaemon. Thus you should add --8<---cut here---start->8--- log-file SOMEFILE verb

Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread Marcus Ilgner
Hello all, I've been using GnuPG for some time now and recently became the proud owner of a NitroKey hardware dongle which includes a SmartCard for key storage. This was straightforward to set up and I created separate subkeys (4096 bit) for encryption, signing and authentication and moved them to