diff options
| author | Ahmed Abdelhalim <[email protected]> | 2026-07-23 13:38:40 +0200 |
|---|---|---|
| committer | Ahmed Abdelhalim <[email protected]> | 2026-07-24 13:17:11 +0200 |
| commit | 6ceb3419fc5513e03f68fceeae2611bbab04e0d1 (patch) | |
| tree | dfb8ecb8c08317bdb14f277bc8226d5790df176b /README.md | |
| parent | 241bdcff8d3da97d195f3c92b6178daac21bb479 (diff) | |
Update README to include install/restore GPG
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 72 |
1 files changed, 68 insertions, 4 deletions
@@ -55,19 +55,83 @@ Configure the app settings as follow: `sudo dd if=/path/to/tails.img of=/dev/diskX bs=4M status=progress` + Boot the `tails` live image from a bootable USB -### Setup GPG SmartCard +### Generate GPG Keys ```bash +gpg --expert --full-generate-key +Please select what kind of key you want: + (1) RSA and RSA (default) + ... + (10) ECC (sign only) + (11) ECC (set your own capabilities) + (12) ECC (encrypt only) + ... +Your selection? 11 +Possible actions: Sign Certify Authenticate +Current allowed actions: Sign Certify + (S) Toggle the sign capability + (A) Toggle the authenticate capability + (Q) Finished +Your selection? Q +Please select which elliptic curve you want: + (1) Curve 25519 + (2) Curve 448 + (3) NIST P-256 + ... +Your selection? 1 + +gpg --expert --edit-key <KEY_ID> +gpg> adduid +gpg> addkey +Please select what kind of key you want: + (1) RSA and RSA (default) + ... + (10) ECC (sign only) + (11) ECC (set your own capabilities) + (12) ECC (encrypt only) + ... +Your selection? 11 +Possible actions: Sign Authenticate +Current allowed actions: Authenticate + (S) Toggle the sign capability + (A) Toggle the authenticate capability + (Q) Finished +Your selection? Q +gpg> addkey +Please select what kind of key you want: + (1) RSA and RSA (default) + ... + (10) ECC (sign only) + (11) ECC (set your own capabilities) + (12) ECC (encrypt only) + ... +Your selection? 12 ``` -### Restore GPG on SmartCard +### Backup GPG Keys ```bash -# Restore GPG keys from backup +gpg --export-secret-keys --armor <KEY_ID> > private.asc +gpg --export --armor <KEY_ID> > pubic.asc +cat private.asc | qr > private.png +cat public.asc | qr > public.png +gpg --delete-secret-and-public-keys <KEY_ID> +``` + +### Restore GPG Keys + +```bash +# Restore GPG key from camera zbarcam -1 --raw > key.asc +# Restore GPG key from file +zbarimg -1 --raw key.png > key.asc +``` +### Import GPG Keys to SmartCard + +```bash # Import the GPG key on smartcard -gpg --import key.asc +gpg --import private.asc gpg --edit-key --expert <KEY_ID> gpg> trust gpg> keytocard |