Commit 0a1a279b authored by Konstantin Ryabitsev's avatar Konstantin Ryabitsev Committed by Jonathan Corbet

maintainer-pgp-guide: update ECC support information

Update ECC sections with the latest details, now that Yubikeys are able
to support ED25519 curves. Tweak a few links to smartcard devices to
reflect the latest URL changes.
Signed-off-by: default avatarKonstantin Ryabitsev <konstantin@linuxfoundation.org>
Link: https://lore.kernel.org/r/20220727-docs-pgp-guide-v2-3-e3e6954affb6@linuxfoundation.orgSigned-off-by: default avatarJonathan Corbet <corbet@lwn.net>
parent 7d61aa2c
...@@ -228,11 +228,9 @@ separate signing subkey:: ...@@ -228,11 +228,9 @@ separate signing subkey::
recommend that you create an ECC signing subkey for your kernel recommend that you create an ECC signing subkey for your kernel
work. work.
If for some reason you prefer to stay with RSA subkeys, just replace Note, that if you plan to use a hardware device that does not
"ed25519" with "rsa2048" in the above command. Additionally, if you support ED25519 ECC keys, you should choose "nistp256" instead or
plan to use a hardware device that does not support ED25519 ECC "ed25519."
keys, like Nitrokey Pro or a Yubikey, then you should use
"nistp256" instead or "ed25519."
Back up your Certify key for disaster recovery Back up your Certify key for disaster recovery
...@@ -438,7 +436,8 @@ functionality. There are several options available: ...@@ -438,7 +436,8 @@ functionality. There are several options available:
- `Yubikey 5`_: proprietary hardware and software, but cheaper than - `Yubikey 5`_: proprietary hardware and software, but cheaper than
Nitrokey Pro and comes available in the USB-C form that is more useful Nitrokey Pro and comes available in the USB-C form that is more useful
with newer laptops. Offers additional security features such as FIDO with newer laptops. Offers additional security features such as FIDO
U2F, among others, and now finally supports ECC keys (NISTP). U2F, among others, and now finally supports NISTP and ED25519 ECC
keys.
`LWN has a good review`_ of some of the above models, as well as several `LWN has a good review`_ of some of the above models, as well as several
others. Your choice will depend on cost, shipping availability in your others. Your choice will depend on cost, shipping availability in your
...@@ -451,7 +450,7 @@ geographical region, and open/proprietary hardware considerations. ...@@ -451,7 +450,7 @@ geographical region, and open/proprietary hardware considerations.
Foundation. Foundation.
.. _`Nitrokey Start`: https://shop.nitrokey.com/shop/product/nitrokey-start-6 .. _`Nitrokey Start`: https://shop.nitrokey.com/shop/product/nitrokey-start-6
.. _`Nitrokey Pro 2`: https://shop.nitrokey.com/shop/product/nitrokey-pro-2-3 .. _`Nitrokey Pro 2`: https://shop.nitrokey.com/shop/product/nkpr2-nitrokey-pro-2-3
.. _`Yubikey 5`: https://www.yubico.com/products/yubikey-5-overview/ .. _`Yubikey 5`: https://www.yubico.com/products/yubikey-5-overview/
.. _Gnuk: https://www.fsij.org/doc-gnuk/ .. _Gnuk: https://www.fsij.org/doc-gnuk/
.. _`LWN has a good review`: https://lwn.net/Articles/736231/ .. _`LWN has a good review`: https://lwn.net/Articles/736231/
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment