[Enigmail] Kickstarting smart cards

Olav Seyfarth olav at enigmail.net
Mon Mar 16 11:48:50 CET 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Anne,

> I've had an FSFE smartcard for around 3 years, without a clue about how to
> use it.

I use it every day, in fact this messages is signed by it. Did you try to find
out how to use it? There is some documentation, both on FSFE and on GnuPG side:

http://fsfe.org/fellowship/card.en.html
https://www.gnupg.org/howtos/card-howto/en/smartcard-howto-single.html

If you need assistance, feel free to contact me off-list. It will be easier to
phone actually since there are considerations that should be discussed first.
Ideally, you would provide a writeup afterwards that we could use on our site.


Apart from that, I asked Joey what the difference between his card and Werner's
OpenPGP Smartcard (which is the FSFE card). He replied (but did not add the
answer to the FAQ on kickstarter):

  It differs in a couple of ways. The g10 card is a contact-only interface; this
  card is dual interface, which means it could potentially work with NFC devices
  like Android tablets and smart phones. The g10 card is also not open source.
  This card is open source, written for the JavaCard platform, and the code is
  openly available here: https://github.com/josecastillo/OpenPGP-Card

  Having said that, the g10 card does offer one feature that this card does not.
  The g10 card supports adjustable key sizes; this card only supports 2048-bit
  keys. I wrote about the rationale behind this in the project FAQ, but it is
  important to mention because if you have a key larger than 2048 bits, this
  won't work for you.

  Having said that, the g10 card has been out of stock at kernelconcepts since
  last June, and if you click the link on the page you sent, their store is
  currently down. I'm not aware of any other sources for the g10 card at this
  time.

I checked KernelConcepts: their site yields
  The shop will is temporarily closed. If you have an urgend need of OpenPGP
  cards or Gemalto Shell token card reader, feel free to contact us.
So, basically, write them an E-Mail and you'll get it anyway.

Concerning "The g10 card is also not open source.", I cannot comment on. But the
spec is available at http://g10code.com/p-card.html

Olav
- -- 
The Enigmail Project - OpenPGP Email Security For Mozilla Applications
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: Dies ist eine elektronische Signatur - http://www.enigmail.net/
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=Jg9D
-----END PGP SIGNATURE-----



More information about the enigmail-users mailing list