Timeline for Where does signing/decrypting take place on a YubiKey 5 for PGP private key?
Current License: CC BY-SA 4.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 26, 2023 at 9:10 | comment | added | fgrieu♦ | Strictly speaking, the Yubikey does not sign the outgoing message, which it can't receive for performance reasons. It receives a hash of that message (what the question calls fingerprint), computed externally. Then there is the question of if the Yubikey yields a signature of the outgoing message, or a signature of the hash of the outgoing message. For ECDSA, if the signature is that of the outgoing message (which I do not know for sure), then the Yubikey can't actually sign per ECDSA, but with a hashless variant thereof. EdDSA has an Ed25519ph variant to solve that issue. | |
| Mar 26, 2023 at 2:51 | vote | accept | AlexVal | ||
| Mar 26, 2023 at 2:51 | comment | added | AlexVal | Very clear and thanks for the link. | |
| Mar 26, 2023 at 0:25 | history | edited | knaccc | CC BY-SA 4.0 |
added 392 characters in body
|
| Mar 26, 2023 at 0:18 | history | edited | knaccc | CC BY-SA 4.0 |
added 392 characters in body
|
| Mar 26, 2023 at 0:13 | history | edited | knaccc | CC BY-SA 4.0 |
added 392 characters in body
|
| Mar 26, 2023 at 0:07 | history | answered | knaccc | CC BY-SA 4.0 |