What key curation can be applied to a personal gpg keypair over a period of time (e.g. 10 years) if I also want to use the keypair for professional use? What are the measures that I need to take to protect my keys? What are the risks that I may have to mitigate?
-
opinion 1: Use subkeys separated from the main key... keep the main key off line and undistributed... make a backup paperkey of the main key. And keep the paperkey in a safe somewhere. Risks : loss of passphrase, loss of key material, compromise of main key, sunset of main key algorithm... etc...– RubberStampDec 26, 2018 at 15:12
-
I agree with you, but is there any difference in curation of keys if the key expiration date changes ? for example at first i will consider key expiration for 10 years next is in 15 years so the curation remains same isn't ?– ThinkerDec 26, 2018 at 15:17
-
I'm not sure I understand what you mean by "key curation"... please add more detail regarding your key management plan...– RubberStampDec 27, 2018 at 14:46
-
how to safe guard gpg private key for many years– ThinkerDec 27, 2018 at 16:29
-
You've made a distinction between 10 or 15 years... so... no, there's no difference in methods of safe guarding cryptographic material for 15 years versus 10 years. I highly recommend paperkey for long term storage of key material. And, I would recommend the use of Curve25519 / ED25519 keys ... however, your question is quite broad and the answer truly depends on which attacks you expect to protect your keys from... There are many Q/As regarding the aging of key material... Here's a good one– RubberStampDec 27, 2018 at 16:38
|
Show 3 more comments