-
|
I'm posting this since I've seen this asked a lot. |
Beta Was this translation helpful? Give feedback.
Replies: 4 comments 37 replies
-
|
Right now we are supporting PIV in addition to FIDO2. PIV fulfills most if not all of the functions of PGP. We aren't against PGP, but figured PIV would be more efficient for us, and we can focus on making our open source framework very clean and modular. This will help making future apps (like OpenPGP) easier. We hope to work with the community to start a OpenPGP app that is based on our Trussed framework. |
Beta Was this translation helpful? Give feedback.
-
|
I saw a commit it disables PIV by default. solokeys/solo2@672f2d8 |
Beta Was this translation helpful? Give feedback.
-
From Gnupg manual: "GnuPG has support for PIV cards (“Personal Identity Verification” as specified by NIST Special Publication 800-73-4). This section describes how to initialize (personalize) a fresh Yubikey token featuring the PIV application (requires Yubikey-5)." Ref: https://gnupg.org/documentation/manuals/gnupg/gpg_002dcard.html |
Beta Was this translation helpful? Give feedback.
-
|
You mean the FIPS 201 PIV, which is for the US government and not civilians right? |
Beta Was this translation helpful? Give feedback.
-
|
I think it is the general PIV, that one can be used from open doors to login on computers. |
Beta Was this translation helpful? Give feedback.
-
|
Just had a look and |
Beta Was this translation helpful? Give feedback.
-
Can I use real OpenPGP keys (eg offline primary [C] key with [S][A][E] subkeys) added to the device via The YubiKey, NitroKey and OnlyKey all work flawlessly, but it seems like this is simply not implemented for Solo v2? |
Beta Was this translation helpful? Give feedback.
-
|
I want this feature too, but I think it will be implemented in the future
with a new firmware release. As you said, NitroKey supports it, and IIRC,
the firmware base is almost identical.
Marcos Alano
…On Tue, Nov 9, 2021, 22:30 Jonathan Cross ***@***.***> wrote:
PIV fulfills most if not all of the functions of PGP.
Can I use real OpenPGP keys (eg offline primary [C] key with [S][A][E]
subkeys) added to the device via gpg --cardedit?
The YubiKey, NitroKey and OnlyKey all work flawlessly, but it seems like
this is simply not implemented for Solo v2?
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
<#26 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ABN66R4AHNT4U5K2DXVDI2TULHDNDANCNFSM4WUET2XA>
.
|
Beta Was this translation helpful? Give feedback.
-
|
It's been a long time... is this still a possibility? |
Beta Was this translation helpful? Give feedback.
and others
Right now we are supporting PIV in addition to FIDO2. PIV fulfills most if not all of the functions of PGP.
OpenPGP is more complex and difficult for us to test and ensure works well enough for initial launch.
We aren't against PGP, but figured PIV would be more efficient for us, and we can focus on making our open source framework very clean and modular. This will help making future apps (like OpenPGP) easier. We hope to work with the community to start a OpenPGP app that is based on our Trussed framework.