Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

are there smartcards that handle 4096-bit keys supported both by GPG and Enigmail (PAM would be additional benefit)? Preferably on USB.

share|improve this question
up vote 1 down vote accepted

I'm quoting somebody else here:

Actually the OpenPGP Card / Crypto Stick can handle 4k keys as well but GnuPG is not able to handle 4k keys of smart cards. To use 4k keys either GnuPG needs to be patched

4096 support in smart cards is relatively rare, the common size is currently 2048 for RSA (cards do have EC support though). The CryptoStick claims to support 3k RSA keys but apparently only because that's the limit for GnuPG, the card should be able to do more.

share|improve this answer
Any information where can I find a patch? – Maciej Piechotka Dec 21 '10 at 21:31
None that I know of. Are you sure you need 4k keys? – martin Dec 22 '10 at 8:19
Hi there. I've patched this, see the last thread of :-) – Chris Boyle Apr 5 '11 at 9:45

Not sure if you can get cryptocards that support 4096-bit keys, but as long as they're a PKCS11 smartcard, you'll find they'll work with most things. I formatted an unused Aladdin eToken as a standard PKCS11 token, and had it working with OpenSSH and Firefox. Getting it working with GPG, Enigmail and PAM would be trivial, I suspect.

Have a look at some of the stuff that uses OpenSC - that tends to support many different kinds of tokens and cryptocards.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .