2020-10-15 02:22:30

by Jarkko Sakkinen

[permalink] [raw]
Subject: Backing up the PGP master key

Konstantin, writing to you based on 'git blame' :-)

The maintainer guide recommends using paperkey for the PGP master key,
which is a prefectly sane method.

I was just wondering that isn't a backup to a USB stick a reasonable
option? E.g. get a few USB sticks (new, unweared), store your master key
to each of them and put to safe.

/Jarkko


2020-10-17 16:09:01

by Konstantin Ryabitsev

[permalink] [raw]
Subject: Re: Backing up the PGP master key

On Thu, Oct 15, 2020 at 12:34:06AM +0300, Jarkko Sakkinen wrote:
> Konstantin, writing to you based on 'git blame' :-)
>
> The maintainer guide recommends using paperkey for the PGP master key,
> which is a prefectly sane method.
>
> I was just wondering that isn't a backup to a USB stick a reasonable
> option? E.g. get a few USB sticks (new, unweared), store your master key
> to each of them and put to safe.

Sure, it's an option as well. I believe the guide recommends three
different backups:

1. thumb drive within reach for regular access
2. another drive in case the first one goes bad
3. paperkey backup in the vault

There's no reason why #2 above can't go into the vault as well, if
you're inclined. I wouldn't skip paperkey, since I'm generally wary of
putting anything long-term onto electronic media due to things like
charge decay, cosmic rays, or other weird phenomena resulting in flipped
bits.

-K