ENTRY
[ESC]New Year new GPG key
Good late evening cyberspace!
Do you too enjoy the painful process of rolling your GPG subkeys?
About a year ago, i got a hardware key because heck there neat little things!
So for for the people who are casually browsing "the space".
Lets describe public cryptography in simple normal people not turbo nerd terms.
So lets say i ask you to come up a random number in your head.
now we do a little math and make derivatives of that number that is mathematically improbable and basically impossible to do the math in reverse to figure out your first generated number.
and we take the new number and make 3 more off your origin number.
we take the 3 unique numbers and do the trap door equation again.
so we have 3 pairs all from a separate origin number.
3 of these pairs originally are derived from your "master number" and these 3 "sub master" numbers each make a "least master number"
people then can use the "least master" numbers for many purposes.
for example taking a message or file and then using the "least master" number to make it unreadable to people who dont have the corresponding "sub master" number.
This is what gpg is!
the correct terms are public keys (the one you give to all your friends and people you meet) and the private key (the one you never share, but kept to decrypt)
Its very interesting and i have spent MANY MANY hours trying to wrap my noodle around how it works.
Its one of the best ways to communicate! Apps like signal use it under the hood and many websites and online services use it for many things.
So enough explaining how the talking sand makes numbers.
I got a nitrokey a year ago and really didnt know how it works, but ive slowly learned how to use it. And i got to say, it comes in handy. If i want to drop a file to my friend on some online service thats says "we dont snoop" but you dont trust that. Then GPG is your friend.
I dont know if my nitrokey has something wrong with it?!?!
so from reading lots of blogs and people alot smarter than me.
Basically people set there key to expire in a set amount of time, and a user then can decide to extend the expiration date. Or regenerate your subkeys, Now lots of people don't recommend rolling your keys yearly. And only to really reroll your keys if they have been compromised or a new better algorithm has come out.
So i decided, well its been a year and i want to reroll my E key (encryption)
So i try to reroll it, it fails and my nitrokey gives a solid red light (meaning theres an error)
And i then tried deleting the old key and just making a new one.
RED LIGHT!
it deleted my encryption key just fine but wont regenerate it! So i just factory reset the key wiping it all. They key i used really was only used by like 4 people i know, so its not earth shattering. But is very annoying because i really wanted to keep my signatures on my masterkey!
Anybody else have this issue?
What are other GPG users setups? Yubikey, solokey?
I very much see the use of a security key but my nitrokey has been nothing but headaches involving gpg and key generation.
I dont think its a fluke either, i have a second one and it does the same thing!
Also if anybody wants to talk via email with gpg my profile has the new key added! (thanks khan for that feature!)
Join the conversation