vanitasvitae/openpgp-notes
1
0
Fork 0
mirror of https://codeberg.org/openpgp/notes.git synced 2024-11-23 16:12:05 +01:00
Code Issues Projects Releases Packages Wiki Activity

ch5: outline sketch

Browse source
This commit is contained in:
Heiko Schaefer 2023-09-23 17:35:22 +02:00
parent 61d5b010f8
commit e5500ac6f8
No known key found for this signature in database
GPG key ID: 4A849A1904CCBD7D
1 changed files with 21 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
book/source/05-private.md
View file

@ -1,8 +1,25 @@
(private_key_chapter)= (private_key_chapter)=
# Private key material # Private keys
``` ```
- Consistently consider private key material as a separate thing from Certificates? (like in pkcs#11?) - Consistently consider private key material as a separate thing from Certificates? (like in pkcs#11?)
- consider KOpenPGP attack
- For TSKs: Best practices S2K + S2K migration?
``` ```
## Transferable secret keys
https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto-refresh-10.html#name-transferable-secret-keys
## Private key operations
The core of private key operations doesn't require access to the whole certificate. A private key subsystem only needs to handle the cryptographic key material.
### OpenPGP card for private keys
[OpenPGP card](https://en.wikipedia.org/wiki/OpenPGP_card) devices are a type of hardware security device. They are one popular way to handle OpenPGP private key material. These devices do not store the full OpenPGP certificate.
## Advanced topics
### TSKs: Best practices S2K + S2K migration?
### The KOpenPGP attack