A live raspberry pi 3 image to generate gpg key securely and import it to yubikey.
The live image has been generated using buildroot with this latest release 2020.11.1, released December 27th, 2020.
- gpg
- yubikey-manager
- yubikey-personalization -> not working
Do the first generation of the key :
- Generates master pgp key
- Creates Sign Encrypt Authenticate subkey certified by the master key
- Copy the public key to the usb key
- backup private keys in encrypted luks container and copy it to a usb key
/!\ Before running the script you should plug in the rpi the yubikey and a usb key
Renew subkeys on the yubikey
/!\ Before running the script you should plug in the rpi the yubikey and a usb key with the backup luks volume
- make scripts more user friendly
- trng support
- fix yubikey-personalization package
- add paperkey package ?
follow this guide.