News for hackers. Stuff that matters.
Re:Strategies for offline PGP key storage by brandmeyer on Thursday October 05, 2017 @12:28PM (#15410445)
The GPG private key should be password-protected. Its basically symmetric encryption keyed off of the password using something akin to scrypt.
Re:Strategies for offline PGP key storage by digikata on Thursday October 05, 2017 @12:33PM (#15410490)
Oh, then a printer secretly storing that representation of the key doens't matter, correct?
Re:Strategies for offline PGP key storage by Fire-Dragon-DoL on Thursday October 05, 2017 @04:52PM (#15412494)
Can't you buy a 50 printer, print it and destroy it after that?
Re:Strategies for offline PGP key storage by Grollicus on Thursday October 05, 2017 @04:25PM (#15412321)
Of course, because that drastically reduces the key space.

Before: 2^2048, After: 256^20 = 2^160 (when using a 20 key password. Obviously you could use looong random generated passphrases, but then you could just base64encode your key?)

Re:Strategies for offline PGP key storage by palunon on Thursday October 05, 2017 @06:55PM (#15413187)
2^160 is still a massive key space for symetric encryption.

Symetric and asymmetric encryption don't have the same key length standards.

Re:Strategies for offline PGP key storage by oh_sigh on Thursday October 05, 2017 @01:48PM (#15411026)
What's the point of encrypting it? It seems like just another thing to mess up, and much more likely that you'll forget the password versus someone breaks into your house, goes into your safe, and knows what a private key is.