A live raspberry pi 3 image to generate gpg key securely and import it to yubikey.

The live image has been generated using buildroot with this latest release 2020.11.1, released December 27th, 2020.

• gpg
• yubikey-manager
• yubikey-personalization -> not working

Do the first generation of the key :

• Generates master pgp key
• Creates Sign Encrypt Authenticate subkey certified by the master key
• Copy the public key to the usb key
• backup private keys in encrypted luks container and copy it to a usb key

/!\ Before running the script you should plug in the rpi the yubikey and a usb key

Renew subkeys on the yubikey

/!\ Before running the script you should plug in the rpi the yubikey and a usb key with the backup luks volume

• make scripts more user friendly
• trng support
• fix yubikey-personalization package
• add paperkey package ?

follow this guide.