Received: by 2002:a05:6a10:6744:0:0:0:0 with SMTP id w4csp35983pxu; Wed, 14 Oct 2020 19:22:30 -0700 (PDT) X-Google-Smtp-Source: ABdhPJzM57rPYP887AfomLTmxmKiRckPzkgsLaXwmE56lxsIdnKqOQC0N4toszgcKKoZGDc1p8xc X-Received: by 2002:a05:6402:176c:: with SMTP id da12mr2086740edb.28.1602728550106; Wed, 14 Oct 2020 19:22:30 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1602728550; cv=none; d=google.com; s=arc-20160816; b=V1v3OLcn1A2dcoIw7ebittEzL8kcX8NCvoBqEzl9CgLgcR9BhAO155GZkBTi05KMJ1 c+vFGg35ICBR8MgdSuWChkH5MVYicWyWQN+jgfaLPH9n9rmBOtyijPKgeFXEFtlf3Vg0 O8Qm7gO9oqzT3R/I8nqdPNhLEVCvoBKr4SQc3q11y14mb0nR+Xt1pE8QUHeM539MRjJF H8+owwwLcqnfrG6W0m2stuUtP634+CtbuIIp2IgPfRt2BPb1ElbfGnYxPaeqTsAq2Bef Pw/TPM2HKBB6fg5eTfXMUkgnIWf3y2vnyQaIpv3vF4HgiuUrUnQ6YogwLqG4AOWEdrYe ixsw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:organization:content-disposition:mime-version :message-id:subject:cc:to:from:date:ironport-sdr:ironport-sdr; bh=+gOywXdOLlwp6VzN49smqNxxBniMBfL2vY4Z2Tym6hc=; b=1Kn5Lq4nEF5OyzUd0ktpnZiJlA14W6Ars53S9v0CVAqY/mUqBT+JOa6yWytzq/zmkD WUIezwytVWIIOZlRAQ4loOfaRhbnb7ILdvNShc8CEouCzUHitxkbWimIfzVsl9Ax8RVr LtiLqioZ5d1vxzIV4dnqCeraeqRw8vgg5nv7W+bjeSegK42V9RB3mHGN2fZEgyVK2/eO AjwWlLshKgoXkzhwd1sUBqmVE2Rn7zMwLpiha1A9Ed5glM5T07+ImbjjrDVDJLcv2Hty wTDtycsLIPZnUOEKPNtxLJe6TNprfSrsL0kCuBRNwv/z/O0p6tDMfj8YRVb6z6reIKIX ooUA== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id h17si1058244ejf.88.2020.10.14.19.22.08; Wed, 14 Oct 2020 19:22:30 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1730816AbgJNVeO (ORCPT + 99 others); Wed, 14 Oct 2020 17:34:14 -0400 Received: from mga09.intel.com ([134.134.136.24]:38647 "EHLO mga09.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726484AbgJNVeO (ORCPT ); Wed, 14 Oct 2020 17:34:14 -0400 IronPort-SDR: 6gK3BuNwnZiwIetnG8/SVVc+/ykuai45W9kufI16kvlWgJDeyMixQyF7GFl3KcNSLLP7ieBvKP U8hIs0xCYcHg== X-IronPort-AV: E=McAfee;i="6000,8403,9774"; a="166318477" X-IronPort-AV: E=Sophos;i="5.77,376,1596524400"; d="scan'208";a="166318477" X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga004.jf.intel.com ([10.7.209.38]) by orsmga102.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 14 Oct 2020 14:34:11 -0700 IronPort-SDR: rOHH2s/plb6wYNVJ8lblp0P0nyOJJnYBb7ixCTLY+e+2L7+qNHQyYNq+XYXAl1NgTytfMdl60x Qv6jLZWB5+Pw== X-IronPort-AV: E=Sophos;i="5.77,376,1596524400"; d="scan'208";a="464034099" Received: from wydrak-mobl.ger.corp.intel.com (HELO localhost) ([10.249.35.67]) by orsmga004-auth.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 14 Oct 2020 14:34:08 -0700 Date: Thu, 15 Oct 2020 00:34:06 +0300 From: Jarkko Sakkinen To: Konstantin Ryabitsev Cc: "Alexander A. Klimov" , Miguel Ojeda , linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Backing up the PGP master key Message-ID: <20201014213406.GA7622@linux.intel.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Organization: Intel Finland Oy - BIC 0357606-4 - Westendinkatu 7, 02160 Espoo Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Konstantin, writing to you based on 'git blame' :-) The maintainer guide recommends using paperkey for the PGP master key, which is a prefectly sane method. I was just wondering that isn't a backup to a USB stick a reasonable option? E.g. get a few USB sticks (new, unweared), store your master key to each of them and put to safe. /Jarkko