Tag: yubikey

Working on YubiKey support through GnuPG to enable working with Crypt4GH containers protected by private key stored in a trusted device, it seemed like a natural extension to keep the key locally and use it remotely - for example on a high-performance computing server.

Faced with the requirement of computing symmetric key from the result of Elliptic-Curve Diffie-Hellman key exchange according to a specification, the primary ingredient for such calculation is the result itself. Read on to see how Interesting things you may find if you need to use YubiKey's OpenPGP Card application as a foundational component of any solution.

In a previous blog two months ago we have shown an ongoing progress on improving protection of secret keys in rclone configuration. On 8th September 2024 new version 1.68 has been released which finally contains all the building blocks for implementing such protection in a very user-friendly manner. Let us see the important new features of this version.

The well-known rclone tool for accessing and synchronizing cloud-based storage can have its configuration encrypted using a symmetric cipher with password-derived key. However some elaborate work is needed to provide a higher protection of the configuration secrets - for example using the YubiKey 5 security token. There is alredy some development under way to streamline such usage.