FSFE smart card and 4096 bit keys?

Martin Gollowitzer gollo at fsfe.org
Sun Oct 7 14:52:31 UTC 2012


* Daniel Pocock <daniel at pocock.com.au> [121007 14:00, 
  mID <50716EB3.4020700 at pocock.com.au>]:

> I recently received my card, and reading the document here:
> http://fellowship.fsfe.org/card.en.html
> referred me to the instructions here:
> http://www.gnupg.org/howtos/card-howto/en/ch01.html

Unfortunately, this information is not up to date.

> As for choosing a card reader, I came across this page:
> http://www.gnupg.org/howtos/card-howto/en/ch02s02.html
> 
> but it is dated March 2007 - is there any updated advice/suggestions
> available?

Do you want to use a card reader with or without PIN pad? In the first
case, I recommend the SPR532 from ACM (also called pinpad pro). If you
prefer a small one, try the SCM SCR 335.

> I have previously had some correspondence with gooze
> http://www.gooze.eu/
> they are open-source friendly but they have also told me about a year
> ago that they can only supply cards up to 2048 bit (that is now the
> minimum accepted by Debian, for example) but would look for 4096 bit
> cards if there was sufficient interest.

The Fellowship card supports up to 2048 bit keys (for signing keys even
up to 3072 bit keys) because it is an OpenPGP v2.0 card. AFAIK, there
are currently no cards that support 4096 bit RSA keys in the market at
the moment (I might of course be wrong about that).

All the best, 
Martin 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: Digital signature
URL: <http://lists.fsfe.org/pipermail/discussion/attachments/20121007/7a5ae348/attachment.sig>


More information about the Discussion mailing list