OpenPGP电子邮件加密¶
Compatible Nitrokeys |
|||||||
|---|---|---|---|---|---|---|---|
✓ active |
⨯ inactive |
⨯ inactive |
✓ active |
⨯ inactive |
✓ active |
✓ active |
⨯ inactive |
目前有两种广泛使用的电子邮件加密标准。
OpenPGP/GnuPG在个人中很受欢迎。
S/MIME/X.509大多被企业使用。
If you are in doubt which one to choose, you should use OpenPGP. While this page describes the usage of OpenPGP, S/MIME is described here.
请先熟悉OpenPGP标准背后的一般概念，例如通过阅读自由软件基金会的`这个信息图形<https://emailselfdefense.fsf.org/en/infographic.html>`__。
密钥生成¶
如果你还没有OpenPGP密钥，你需要先生成它们。
`在您的硝基设备上生成密钥<openpgp-keygen-gpa.html>`_
This is the best option if you are inexperienced, but you won't have a backup of your keys and therefore won't be able to mitigate the loss of the Nitrokey
`在您的硝基设备上生成采用不同算法或密钥长度的密钥<openpgp-keygen-on-device.html>`_
This is as secure as the previous option and thus you won't have a backup as well, but you can change the key attributes (that is the algorithm and key size)
`在本地生成密钥<openpgp-keygen-backup.html>`_
Copy them to your Nitrokey device - this is the most flexible, expert option, but only secure if your system is not compromised, because you can create a backup key outside your Nitrokey A similar description in French can be found here.
导入现有的钥匙¶
如果你已经有OpenPGP密钥，你可能想在你的Nitrokey上使用它们，而不是生成新的密钥。导入现有密钥的方法基本上与在本地生成密钥并复制到Nitrokey上的方法相同（见上文）。因此，请看一下`相应的说明<openpgp-keygen-backup.html#key-import>`_ 。请注意，你可能想生成另一个子密钥来验证你现有的密钥。请看`子密钥生成的相同说明<openpgp-keygen-backup.html#subkey-for-authentication>`_ 。
使用方法¶
你可以在这些网页上找到有关使用的进一步信息。