Timeline for Detached Raspberry for secure key generation
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 13, 2017 at 22:09 | vote | accept | Gert-Jan | ||
| Feb 13, 2017 at 22:09 | comment | added | Gert-Jan | I can confirm that our RPi2 still has the hardware RNG, so we're good to go! | |
| Feb 13, 2017 at 15:00 | comment | added | nmaas87 | @Gert-Jan This concept sounds good to me :) | |
| Feb 13, 2017 at 14:48 | comment | added | Gert-Jan | Thanks a lot, I will check if our PI's have a hardware RNG. I'm aware that key management is a problem. We plan to generate RSA key pairs and copy the private keys to a USB-stick that will be stored in a safe place (actually 2 USB-sticks stored in 2 safe places). The public keys will be used for backup encryption so the private keys will only be used when we need to decrypt a backup. Decryption will take place on a secure (air-gapped) computer so I believe that our private key will stay very private. | |
| Feb 13, 2017 at 13:22 | history | answered | nmaas87 | CC BY-SA 3.0 |