public
/
docs
5
0
Fork 0
Code Issues 5 Pull Requests Packages Projects Releases Wiki Activity

fix: specify smart cards must have openpgp ed25519 support

This commit is contained in:
Anton Livaja 2024-08-04 14:31:08 -04:00
parent 18cbd8ff69
commit 25516fcd7f
Signed by: anton
GPG Key ID: 44A86CFF1FDF0E85
2 changed files with 14 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
quorum-key-management/src/hardware.md
View File

@ -46,12 +46,23 @@ is the following:
Smart Cards are primarily used for storing OpenPGP cryptographic keys which are Smart Cards are primarily used for storing OpenPGP cryptographic keys which are
used as a building block for security controls. These smart cards hold OpenPGP used as a building block for security controls. These smart cards hold OpenPGP
keys which are derived in secure environments. FIPS 140-2 is required but the keys which are derived in secure environments.
end user may choose their manufacturer.
There are two primary requirements for smart cards:
* FIPS 140-2
* Support for Ed25519 OpenPGP
* Touch for enacting operations
Some options include:
* NitroKey 3 - because of its open source approach which helps improve the * NitroKey 3 - because of its open source approach which helps improve the
overall security of the products overall security of the products
* YubiKey 5 - because of the widespread use and battle-tested reliability * YubiKey 5 - because of the widespread use and battle-tested reliability
* Librem Key - because of the manufacturer's approach to hardware supply chain * Librem Key - because of the manufacturer's approach to hardware supply chain
security and verifiable software security and verifiable software

2
quorum-key-management/src/locations.md
View File

@ -50,7 +50,7 @@ standard NATO SDIP-27 Level A
* SHOULD be organizations which are ideally immune to being legally subpoenaed * SHOULD be organizations which are ideally immune to being legally subpoenaed
* SHOULD not be susceptible to being subpoenaed * SHOULD NOT be susceptible to being subpoenaed
## Storage Location ## Storage Location