Niibe Yutaka

Gnuk is the USB security token implementation. It is supported by GnuPG 2.1 very well. In this BoF, we discuss current status of Gnuk, and how it's useful to Debian Developers and Users. URL: https://www.fsij.org/gnuk/

I will explain about HOWTO Ed25519 / X25519 (the new ECC). GnuPG 2.1 (in Stretch) supports Ed25519 signature and X25519 encryption. The key is short, crypto computation is fast, and strength is considered good enough. In Debconf 15, I was asked about how to generate Ed25519/X25519 keys and wrote an article: https://www.gniibe.org/memo/software/gpg/keygen-25519.html It is also supported by OpenSSH. (Although we can't put ssh-ed25519 keys to Alioth, yet.) Sure, it is supported by Gnuk Token, and it's quite useful because it's faster than RSA.

In this short talk, basic organization of GnuPG 2.1 will be explained by demonstration, so that people can understand better. The intended audience is general Debian users. Crypto expert also could enjoy the demonstration about separation of data management, but detail of crypto algo or implementation will not be explained. GnuPG 2.1 is now in Debian Stretch. While it comes with new features like ECC support, most important change is its architecture; In GnuPG 2.1, it consists of sub components (gpg command line front end, gpg-agent, dirmngr, scdaemon, etc.), and each component has its own role. Focusing major use cases (encryption, decryption, signing, checking signature, and OpenSSH authentication), we will demonstrate the basic organization of GnuPG 2.1 by our family members. Cast plan (not yet decided, will be changed): gpg: Ayumi (daughter) gpg-agent: Hitoe (wife) dirmngr: Hiroshi (son) scdaemon: gniibe (me)

Gnuk is software implementation of a USB token for GNU Privacy Guard. Gnuk supports OpenPGP card protocol version 2, and it runs on STM32F103 processor. Gnuk supports RSA 2048-bit key and it takes a second and a half for computation of digital signing. Gnuk Token is useful for GnuPG users and Debian developers. The talk explains current status of Gnuk and its future, supported boards, and how to use Gnuk with GnuPG and OpenSSH.