[Pki-clean-room-devel] Consider Keysafe

Jonathan McDowell noodles at earth.li
Tue Nov 29 09:28:38 UTC 2016


On Mon, Nov 28, 2016 at 03:13:54PM -0700, Sean Whitton wrote:
> Hello PGP clean room devs,
> 
> Possibly there has been a discussion of this somewhere, but I'd like to
> suggest you consider Keysafe for the USB backup of master keys.  Here's
> a blog post from the Keysafe author about how it can be used in this
> way: https://joeyh.name/blog/entry/keysafe_with_local_shares/
> 
> Keysafe is available from Debian experimental.  It won't be unstable
> until it's gone through a security audit, and a lot more development.  I
> don't know what your timescale is for this project, but hopefully
> Keysafe is at least worth considering.

There's also libgfshare (and libgfshare-bin) which is in jessie but only
handles the local copies situation.

http://www.digital-scurf.org/software/libgfshare

J.

-- 
... 101 things you can't have too much of : 45 - Toblerone.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pki-clean-room-devel/attachments/20161129/6a9b058c/attachment.sig>


More information about the PKI-Clean-Room-Devel mailing list