PKI & Encryption
Public key infrastructure, encryption, key management, certificates, and the trust foundations secure systems depend on.
- Creating a New CA (SHA-512, 4096-bit) with PKCS #11 Smart Card Storage and Subordinate CA
Create a certificate authority with a 4096-bit RSA key, SHA-512 signatures, PKCS #11 smart card key storage, and a subordinate CA.
- Paperkey: How to backup your GnuPG keys on paper
A short field note on exporting GnuPG secret-key material with Paperkey for a printable backup.
- Reset your YubiKey to factory defaults using gpg-connect-agent
A macOS field note on resetting a YubiKey OpenPGP application to factory defaults with gpg-connect-agent.
- Using YubiKey with GPG
My setup notes for using a YubiKey as an OpenPGP smart card to store GPG signing and encryption keys.