GnuPG and hardware token

[Atlantis]

Is it possible to use some kind of USB hardware token with GnuPG, to
safely store private key?

[George Orwell]

Post by Atlantis
Is it possible to use some kind of USB hardware token with GnuPG, to
safely store private key?

Of course. You can accomplish this as simply as configuring your gpg.conf
to point to your token as a default keyring location. When the token is
absent it will (I believe) use $HOMEDIR/.gnupg/ (or the Windows
equivalent). So you'll have two sets of keys... an "empty" set and the
one on your dongle.

I use this "trick" with Truecrypt, both on a thumb drive and by way of
smaller encrypted volumes. In a nutshell, I set up encrypted containers
to mount to $HOMEDIR/.gnupg, so that when they're mounted they're used
automatically without any gpg.conf messiness. I also do the same with all
my SSH keys.





Il mittente di questo messaggio|The sender address of this
non corrisponde ad un utente |message is not related to a real
reale ma all'indirizzo fittizio|person but to a fake address of an
di un sistema anonimizzatore |anonymous system
Per maggiori informazioni |For more info
https://www.mixmaster.it

[Atlantis]

Post by George Orwell
Of course. You can accomplish this as simply as configuring your gpg.conf
to point to your token as a default keyring location. When the token is
absent it will (I believe) use $HOMEDIR/.gnupg/ (or the Windows
equivalent). So you'll have two sets of keys... an "empty" set and the
one on your dongle.

Can you tell me something about those tokens? Is it normal PenDrive or
much more sophicticated device? How many keys could be stored on such
device? Could it hold entire keyring (my private key and all public keys)?

Can I use one device for storing both: GnuPG and TrueCrypt keys?