Find the answer to your Linux question:
Results 1 to 4 of 4
I have a public/private key pair. I have the private key on a hardware AES encrypted USB drive. I can download the encrypted files on any computer, and need to ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Just Joined!
    Join Date
    Jan 2011
    Posts
    7

    Using portable drive with GPG


    I have a public/private key pair. I have the private key on a hardware AES encrypted USB drive. I can download the encrypted files on any computer, and need to be able to open them using the private key on my USB drive (private_key.asc). How can I do this, without importing the key into gpg (i.e. so it can't be used after I remove my USB key)?

    Is there some kind of gpg switch where you select the private key file? Like

    gpg --privatekey usb/private_key.asc --output file1.txt --decrypt file1.gpg

    Thanks!

  2. #2
    Trusted Penguin
    Join Date
    May 2011
    Posts
    4,353
    I don't believe you can do it that way. The concept of a key ring is part of the security. However, you could make a copy of the GPG home dir, and tell gpg to use it with the --homedir option. so you could:

    1. create a GPG tmp home directory (use tmpfs for security), e.g.:
    mkdir /tmp/gpg_home
    2. copy the GPG home dir to this tmp dir
    3. import the public key into this private keyring
    4. call gpg using the tmp dir as the GPG home dir

  3. #3
    Just Joined!
    Join Date
    Jan 2011
    Posts
    7
    Ahh, interesting. So could I copy the gpg home directory from my home computer onto the USB drive, then tell it to use the directory on the USB as the home directory?

  4. $spacer_open
    $spacer_close
  5. #4
    Trusted Penguin
    Join Date
    May 2011
    Posts
    4,353
    yes, but having that private key on anything portable is an inherent risk. as long as you understand those risks, and take all possible precautions to prevent compromise (like hardware encryption...)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •