Hello, On Wed, Aug 30 2017, Marc Haber wrote: > People keep mentioning to store the private key on a LUKS-encrypted > device. Why? Is the private key encryption that happens inside GnuPG > itself when you protect your private key with a passphrase not > sufficient? You can pass the --iter-time option when creating a LUKS partition that makes a brute force take much longer (at the cost of it taking slightly longer to decrypt and mount the partition). You can't do that with the encryption gpg does with your passphrase, AFAIK. -- Sean Whitton
Attachment:
signature.asc
Description: PGP signature