From 6ceb3419fc5513e03f68fceeae2611bbab04e0d1 Mon Sep 17 00:00:00 2001 From: Ahmed Abdelhalim Date: Thu, 23 Jul 2026 13:38:40 +0200 Subject: Update README to include install/restore GPG --- README.md | 72 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++---- 1 file changed, 68 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 8766770..e087d48 100644 --- a/README.md +++ b/README.md @@ -55,19 +55,83 @@ Configure the app settings as follow: `sudo dd if=/path/to/tails.img of=/dev/diskX bs=4M status=progress` + Boot the `tails` live image from a bootable USB -### Setup GPG SmartCard +### Generate GPG Keys ```bash +gpg --expert --full-generate-key +Please select what kind of key you want: + (1) RSA and RSA (default) + ... + (10) ECC (sign only) + (11) ECC (set your own capabilities) + (12) ECC (encrypt only) + ... +Your selection? 11 +Possible actions: Sign Certify Authenticate +Current allowed actions: Sign Certify + (S) Toggle the sign capability + (A) Toggle the authenticate capability + (Q) Finished +Your selection? Q +Please select which elliptic curve you want: + (1) Curve 25519 + (2) Curve 448 + (3) NIST P-256 + ... +Your selection? 1 + +gpg --expert --edit-key +gpg> adduid +gpg> addkey +Please select what kind of key you want: + (1) RSA and RSA (default) + ... + (10) ECC (sign only) + (11) ECC (set your own capabilities) + (12) ECC (encrypt only) + ... +Your selection? 11 +Possible actions: Sign Authenticate +Current allowed actions: Authenticate + (S) Toggle the sign capability + (A) Toggle the authenticate capability + (Q) Finished +Your selection? Q +gpg> addkey +Please select what kind of key you want: + (1) RSA and RSA (default) + ... + (10) ECC (sign only) + (11) ECC (set your own capabilities) + (12) ECC (encrypt only) + ... +Your selection? 12 ``` -### Restore GPG on SmartCard +### Backup GPG Keys ```bash -# Restore GPG keys from backup +gpg --export-secret-keys --armor > private.asc +gpg --export --armor > pubic.asc +cat private.asc | qr > private.png +cat public.asc | qr > public.png +gpg --delete-secret-and-public-keys +``` + +### Restore GPG Keys + +```bash +# Restore GPG key from camera zbarcam -1 --raw > key.asc +# Restore GPG key from file +zbarimg -1 --raw key.png > key.asc +``` +### Import GPG Keys to SmartCard + +```bash # Import the GPG key on smartcard -gpg --import key.asc +gpg --import private.asc gpg --edit-key --expert gpg> trust gpg> keytocard -- cgit v1.2.3