[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: wanted: educate us please on key dongles


On Wed, Aug 30 2017, Marc Haber wrote:

> People keep mentioning to store the private key on a LUKS-encrypted
> device. Why? Is the private key encryption that happens inside GnuPG
> itself when you protect your private key with a passphrase not
> sufficient?

You can pass the --iter-time option when creating a LUKS partition that
makes a brute force take much longer (at the cost of it taking slightly
longer to decrypt and mount the partition).

You can't do that with the encryption gpg does with your passphrase,

Sean Whitton

Attachment: signature.asc
Description: PGP signature

Reply to: