Pozdrav,
To ni res. Ključ se generira na kartici. Možno je narediti novi ključ.
Personalised for you
The Fellowship crypto card has a unique design that is personalised for you with your name and fellowship number.There are three OpenPGP subkeys on the crypto card:
* A signature subkey, used to sign email, documents and other data. * An encryption subkey, used to decrypt incoming data and mail. * An authentication subkey, not used for normal GnuPG operation, which allows other tools like SSH or PAM modules to use the Fellowship crypto card for authentication and (remote) logins.
https://fellowship.fsfe.org/card.html
Zdaj, če se ključ res generira na kartici in ga iz nje ni mogoče prepisati, je zadeva OK. Če pa temu ni tako, pa personalizacija pomeni, da ima lahko tisti, ki je kartico personaliziral dostop do private keyev...
Te zadeve ne poznam toliko, ampak pri mojem Gemalto USB tokenu lahko jaz svoje privatne ključe (zgenerirane na računalniku) zapišem na kartico.
Res je pa, da lahko kartico inicializiraš in daš gor povsem svoje ključe.
lp, M.