Criptografia de Email OpenPGP#
Nota
OpenPGP support was introduced with the 1.4.0 release of the Nitrokey 3 firmware. If you have an older version, update your firmware
Existem dois padrões amplamente utilizados para criptografia de e-mail.
O OpenPGP/GnuPG é popular entre os indivíduos,
O S/MIME/X.509 é utilizado principalmente por empresas.
Se você estiver em dúvida sobre qual escolher, você deve usar o OpenPGP. Enquanto esta página descreve o uso do OpenPGP, S/MIME é descrito aqui.
Por favor familiarize-se primeiro com o conceito geral por detrás do padrão OpenPGP, por exemplo lendo este gráfico informativo da Free Software Foundation.
Geração de chaves#
Se você ainda não tem as chaves OpenPGP, você precisa gerá-las primeiro.
Generate keys on your Nitrokey device - this is the best option if you are unexperienced, but you won’t have a backup of your keys and therefore won’t be able to mitigate the loss of the Nitrokey
Generate keys on your Nitrokey device with different algorithm or key size - this is as secure as the previous option and thus you won’t have a backup as well, but you can change the key attributes (that is the algorithm and key size)
Generate keys locally and copy them to your Nitrokey device - this is the most flexible, expert option, but only secure if your system is not compromised, because you can create a backup key outside your Nitrokey A similar description in french can be found here.
Importação de Chaves Existentes#
If you already have OpenPGP keys you may want to use them with your Nitrokey, instead of generating new ones. Importing existing keys works basically the same as generating keys locally first and copying them to the Nitrokey (see above). Therefore, please have a look at the corresponding instructions. Note that you probably want to generate another subkey for authentication to your existing key. See at the same instructions for subkey generation.
Utilização#
Você pode encontrar mais informações sobre o uso nestas páginas:
to use Claws Mail, an email client (and news reader) for Linux and Windows
to use Evolution, an email client for the Gnome Desktop on Linux systems
to use GPGTools on macOS.