Card reader success report (openpgp card v2.1)

2015-08-07 Thread Thomas Jarosch
Hello, as my first post to the list I wanted to write a little success report about using the openpgp card v2.1 with various smart card readers. Three readers were tested: - Cherry ST-2000 - SCM SPR332 - Reiner SCT cyberjack go plus gnupg2 versions used: 2.1.6 and git HEAD (5b7a80b) All three

Re: Card reader success report (openpgp card v2.1)

2015-08-12 Thread Thomas Jarosch
On Tuesday, 11. August 2015 12:10:28 NIIBE Yutaka wrote: Three readers were tested: - Cherry ST-2000 - SCM SPR332 - Reiner SCT cyberjack go plus I think that USB vendor ID and product ID are: Cherry ST-2000 046a:003e Please confirm that and please let me know IDs for those

Re: Announcing paperbackup.py to backup keys as QR codes on paper

2017-02-22 Thread Thomas Jarosch
Hi Peter, On Wednesday, 22 February 2017 13:56:22 CET Peter Lebbing wrote: > Oh, as an aside, the advantage of paperkey is that it is > self-describing. I've tried paperkey with Gnupg 2.1.13 and it had trouble parsing the secret key data. May be the internal packet format changed or needs

Re: smartcard reader

2016-10-22 Thread Thomas Jarosch
Am 22.10.2016 um 00:26 schrieb Gregor Zattler: >> I've posted a "success report" about card readers a year ago: >> https://lists.gnupg.org/pipermail/gnupg-users/2015-August/054102.html >> >> The Reiner cyberJack Go "plus" (USB id 0c4b:0504) works fine, >> not sure about the version with "plus"

Re: smartcard reader

2016-10-21 Thread Thomas Jarosch
Am 19.10.2016 um 13:01 schrieb Werner Koch: [list of card readers] >> SCM SPR 532 >> USB ID: 04e6:e003 >> PC/SC reader name: SPRx32 > > .. > >> Reiner cyberJack Go >> USB ID: 0c4b:0504 > > Does not work. I've posted a "success report" about card readers a year ago:

Re: [Announce] GnuPG 2.1.19 released

2017-03-03 Thread Thomas Jarosch
On Wednesday, 01 March 2017 20:27:00 CET Werner Koch wrote: > Noteworthy changes in version 2.1.19 > > > .. > > * scd: Support for multiple card readers. > > * scd: Improved detection of card inserting and removal. thanks for the new release! The support

Re: How U2F works

2017-03-03 Thread Thomas Jarosch
On Tuesday, 28 February 2017 00:28:21 CET NIIBE Yutaka wrote: > Anyhow, it would be possible for Gnuk to add U2F support (somehow > limited, because of available resource on board). regarding limited resources, the Yubikey people did a fine trick: There is no per-website data stored on the

Re: GnuPG card && using the backup secret key

2017-06-13 Thread Thomas Jarosch
Am 13.06.2017 um 12:20 schrieb Matthias Apitz: >> AFAIK the "backup process" during key creation for the OpenPGP smartcard >> is a bit different: There is no interface / function on the card to >> export a key. Therefore, if you decide to create a backup, a key is >> first created on the host and

Re: GnuPG card && using the backup secret key

2017-06-13 Thread Thomas Jarosch
Hi Matthias, Am 12.06.2017 um 20:12 schrieb Matthias Apitz: > > Please note: I have changed the Subject: of the thread to match better > the real problem. > > During generating the keys on the GnuPG card, one can (and should) > create some backup of the secret key into a file. It is totally

[How-to] Use multiple smartcards simultaneously

2018-02-23 Thread Thomas Jarosch
Hello, here's a quick howto for using multiple smartcards at the same time on Fedora 26 with gnupg 2.2.4. To access multiple card readers simultaneously, the internal CCID driver of gnupg must be used. Steps: 1. Allow normal users to access the card readers: Create a "hwdb" file in

Re: gnupg SmartCard V3.3

2018-03-01 Thread Thomas Jarosch
Hello Klaus, On Thursday, 01 March 2018 10:08:14 CET Klaus Römer wrote: > This is my target device because it is build-in in our Laptops, > i found this ct 2017-10 (german computer magazine) Article, > where they claim the reader to be working with the openpgp smartcard Version > 2.1 by

gpgme_op_verify regression with gnupg 2.2.6?

2018-04-11 Thread Thomas Jarosch
Hello together, after updating from gnupg 2.2.5 to 2.2.6, I'm facing a possible regression. We use the gpgme 1.8.0 library to verify the integrity of our update packages. Two valid signatures need to be present on the checked file. One unit test checks a file that is signed by two known keys +

Re: gpgme_op_verify regression with gnupg 2.2.6?

2018-04-12 Thread Thomas Jarosch
On Wednesday, 11 April 2018 10:03:42 CEST Thomas Jarosch wrote: > Error output from gpgme_op_verify(): > > gpgme_op_verify error: General error thanks to Werner's hint with GPGME_DEBUG in another gpgme related thread, I was able to generate a short log file for gnupg 2.2.5 and gn

Re: gpgme_op_verify regression with gnupg 2.2.6?

2018-04-12 Thread Thomas Jarosch
Hi Werner, On Thursday, 12 April 2018 11:53:33 CEST Werner Koch wrote: > I think I will fix it in GnuPG. Attached is an already pushed fix. with that fix applied on top of gnupg 2.2.6 vanilla, one gpgme 1.10.0 unit test fails: t-verify.c:239: GnuPG: General error FAIL: t-verify Sorry for

Re: gpgme_op_verify regression with gnupg 2.2.6?

2018-04-12 Thread Thomas Jarosch
On Thursday, 12 April 2018 12:56:30 CEST Thomas Jarosch wrote: > Hi Werner, > > On Thursday, 12 April 2018 11:53:33 CEST Werner Koch wrote: > > I think I will fix it in GnuPG. Attached is an already pushed fix. > > with that fix applied on top of gnupg 2.2.6 vanilla, &g

Re: gpgme_op_verify regression with gnupg 2.2.6?

2018-04-16 Thread Thomas Jarosch
Hello Werner, On Friday, 13 April 2018 12:16:22 CEST Werner Koch wrote: > On Thu, 12 Apr 2018 15:26, w...@gnupg.org said: > > Please stay tuned for a GPGME fix. I hope that you can test it too. > > I pushed a fix as weel as a new test to the master branch. I may also > release a 1.10.1 to fix

Re: Is signing a file with multiple keys possible

2018-03-24 Thread Thomas Jarosch
Hi Dirk, On 03/24/2018 02:04 AM, Dirk Gottschalk via Gnupg-users wrote: >>> Is it possible to sign a file with multiple keys? >> >> Yes. Slightly lower-level operations than normal signing, but not by >> much, you just need to know about enarmor/dearmor and how signatures >> are >> put together.

openpgp smartcard: ssh auth speed vs. RSA key size

2018-03-01 Thread Thomas Jarosch
Hello together, here's an interesting observation on ssh auth speed when using different key sizes on the openpgp smartcard: RSA 2048 bit key: 0.7s RSA 4096 bit key: 3.1s Card used is an openpgp smartcard V3.3 with gnupg 2.2.4. The ssh key is accessed via gpg-agent. We found this while

Re: gnupg SmartCard V3.3

2018-02-28 Thread Thomas Jarosch
Hello Klaus, On Tuesday, 27 February 2018 01:04:27 CET Klaus Römer wrote: > i bought two V3.3 cards, but can`t get them to work … > the keytocard command does not move the key but copy it and further on the > gpg2 --card-status -> fetch followed by gpg2 --card-status does not create > the stub

Re: gpgsm --gen-key with key on smartcard

2018-02-28 Thread Thomas Jarosch
On Wednesday, 28 February 2018 14:50:39 CET Werner Koch wrote: > If you need this information a small tool to present an enhanced menu > could be written. That tool would then utilize gpgsm and gpg. GPA > might be a candidate to implement this. what do you think about Peter's idea: $ gpg

gpgsm --gen-key with key on smartcard

2018-02-28 Thread Thomas Jarosch
Hello together, gpgsm can be used to create X.509 certificates for existing secret keys on a openpgp smartcard. "gpg2 --card-status" looks like this: * .. Signature key : E642 8DAC 275A 3247 5B59 A16F A3E9 1268 663A 9918 created :