This is a guide to using YubiKey as a SmartCard for storing GPG encryption, signing and authentication keys, which can also be used for SSH. Many of the principles in this document are applicable to other smart card devices.
Keys stored on YubiKey are non-exportable (as opposed to file-based keys t...
## WCN Episode Summary: "How to Generate GPG Subkeys for Everyday Use" (2019-02-18)
This World Crypto Network episode provides a practical guide to generating and managing GPG subkeys for enhanced security. The episode walks viewers through the process of creating signing, encryption, and authentication keys under a master GPG key, which is considered a long-term identity.
Main Topics:
- Generating GPG subkeys (signing, encryption, authentication)
- Using `gpg` in expert mode for key creation
- Specifying master key ID
- Creating signing-only keys with 4096-bit length and one-year expiry
- Employing RSA encryption with 4096-bit key length and one-year expiry for subkeys
- Importance of key rotation and security
- Using chaos keys for faster random number generation
- Verifying key identity (name/pseudonym & email)
- Key backup and introduction to User Backup Keys (UBK)
Key Quotes:
- "The master key itself is a long-term identity that should ideally remain unchanged."
- (Implied) Emphasis on using one-year expiry dates for subkeys to promote key rotation.
- (Implied) Importance of specifying the master key ID during subkey creation.
People Mentioned:
- Dr. Drew (guide/presenter)
Bitcoin Price: