Vamos a crear un par de claves GPG2 basados en cifrado Ed25519. Lo realizaremos en la consola aunque también se puede realizar utilizando "Contraseñas y claves de cifrado".
A continuación, invocamos gpg en la consola con la opción --expert y --full-gen-key.
$ gpg2 --expert --full-gen-key
gpg (GnuPG) 2.1.8; Copyright (C) 2015 Free Software Foundation, Inc. This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.Luego, seleccionamos el 9 para seleccionar la clave principal de ECC y la subclave de cifrado de ECC.
Please select what kind of key you want:
(1) RSA and RSA (default)
(2) DSA and Elgamal
(3) DSA (sign only)
(4) RSA (sign only)
(7) DSA (set your own capabilities)
(8) RSA (set your own capabilities)
(9) ECC and ECC
(10) ECC (sign only)
(11) ECC (set your own capabilities)
Your selection? 9La siguiente es la selección importante. Seleccionamos 1 para seleccionar "Curve25519".
Please select which elliptic curve you want:
(1) Curve 25519
(2) NIST P-256
(3) NIST P-384
(4) NIST P-521
(5) Brainpool P-256
(6) Brainpool P-384
(7) Brainpool P-512
(8) secp256k1
Your selection? 1Verás una ADVERTENCIA, pero es lo que quieres.
gpg: WARNING: Curve25519 is not yet part of the OpenPGP standard.
Use this curve anyway? (y/N) ySe le pregunta sobre la caducidad de la clave.
Please specify how long the key should be valid.
0 = key does not expire
<n> = key expires in n days
<n>w = key expires in n weeks
<n>m = key expires in n months
<n>y = key expires in n years
Key is valid for? (0)
Key does not expire at all
Is this correct? (y/N) y
Luego, pregunta sobre una identidad de usuario.
GnuPG needs to construct a user ID to identify your key.
Real name: keopx
Email address: keopx@keopx.net
Comment:
You selected this USER-ID:
"keopx <keopx@keopx.net>"
Por último, pide confirmación.
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? oEntonces, va así.
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
Pide a la frase de contraseña las claves por ventana emergente y, a continuación, finaliza.
gpg: key D1A0681AAEDE141B marked as ultimately trusted
gpg: directory '/home/user/.gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/home/user/.gnupg/openpgp-revocs.d/4E2A32714B8E5ADAECA181ABD1A0681AAEDE141B.rev'
public and secret key created and signed.
pub ed25519 2019-01-13 [SC]
4E2A32714B8E5ADAECA181ABD1A0681AAEDE141B
4E2A32714B8E5ADAECA181ABD1A0681AAEDE141B
uid keopx <keopx@keopx.net>
sub cv25519 2019-01-13 [E]
Referencia:
Comentarios