GnuPG improperly storing YubiKey private key in GPG Keychain
Hello!
I am creating a PGP 4096 bit key using the command gpg2 --card-edit then generate, and the private key gets stored in the GPG Keychain.
Why is that happening? Isn't the whole point of a YubiKey to not have the private keys accessible?
Comments are currently closed for this discussion. You can start a new one.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
Support Staff 1 Posted by Luke Le on 07 Jul, 2018 05:00 PM
Hi dean,
could you please add some details what version of gpg2 you are using by running:
At one point gpg keys were always created offline and only later copied onto the card, but I don't think this should be the case any longer.
Steve closed this discussion on 20 Sep, 2018 04:22 PM.