Let’s reflect on some of my recent work that started with understanding Trisquel GNU/Linux, improving transparency into apt-archives, working on reproducible builds of Trisquel, strengthening verification of apt-archives with Sigstore, and finally thinking about security device threat models. A theme Continue reading How To Trust A Machine→| Simon Josefsson's blog
I’ve used hardware-backed OpenPGP keys since 2006 when I imported newly generated rsa1024 subkeys to a FSFE Fellowship card. This worked well for several years, and I recall buying more ZeitControl cards for multi-machine usage and backup purposes. As a Continue reading OpenPGP master key on Nitrokey Start→| Simon Josefsson's blog
The Debian operating system is what I have been using on my main computer for what is probably around 20 years. I am now in the process of installing the hopefully soon released Debian 11 “bullseye” on my Lenovo X201 Continue reading OpenPGP smartcard with GNOME on Debian 11 Bullseye→| Simon Josefsson's blog
Debian buster is almost released, and today I celebrate midsummer by installing (a pre-release) of it on my Lenovo X201 laptop. Everything went smooth, except for the usual issues with smartcards under GNOME. I use a FST-01G running Gnuk, but Continue reading OpenPGP smartcard under GNOME on Debian 10 Buster→| Simon Josefsson's blog
Below I describe how to generate an OpenPGP key and import its subkeys to a FST-01G device running Gnuk. See my earlier post on planning for my new OpenPGP key and the post on preparing the FST-01G to run Gnuk. Continue reading Offline Ed25519 OpenPGP key with subkeys on FST-01G running Gnuk→| Simon Josefsson's blog
The FST-01G device that you order from the FSF shop runs NeuG. To be able to use the device as a OpenPGP smartcard, you need to install Gnuk. While Niibe covers this on his tutorial, I found the steps a Continue reading Installing Gnuk on FST-01G running NeuG→| Simon Josefsson's blog
I’m the process of migrating to a new OpenPGP key. I have been using GnuPG with keys stored on external hardware (smartcards) for a long time, and I’m firmly committed to that choice. Algorithm wise, RSA was the best choice Continue reading Planning for a new OpenPGP key→| Simon Josefsson's blog
2024-04-20| www.fsij.org
19 x 31 = 589 >= 587| www.gniibe.org
2023-09-05| www.fsij.org
2023-09-05| www.fsij.org