From d7a6641ffaf2c68f640885885102c753dc0f46b2 Mon Sep 17 00:00:00 2001 From: Roman Zeyde Date: Mon, 24 Oct 2016 19:48:47 +0300 Subject: [PATCH] gpg: update screencasts --- README-GPG.md | 58 ++++----------------------------------------------- 1 file changed, 4 insertions(+), 54 deletions(-) diff --git a/README-GPG.md b/README-GPG.md index 893f496..48a420c 100644 --- a/README-GPG.md +++ b/README-GPG.md @@ -20,61 +20,11 @@ $ pip install --user git+https://github.com/romanz/trezor-agent.git # Quickstart -[![asciicast](https://asciinema.org/a/88teiuljlxp8w0avvn7oorr4s.png)](https://asciinema.org/a/88teiuljlxp8w0avvn7oorr4s) +## Identity creation +[![asciicast](https://asciinema.org/a/c2yodst21h9obttkn9wgf3783.png)](https://asciinema.org/a/c2yodst21h9obttkn9wgf3783) -# Initialization -``` -$ ./scripts/gpg-init "John Doe " -2016-10-22 22:36:23,952 INFO creating new ed25519 GPG primary key for "John Doe " [__main__.py:56] -2016-10-22 22:36:23,952 INFO please confirm GPG signature on Trezor for "John Doe "... [device.py:39] -2016-10-22 22:36:26,307 INFO please confirm GPG signature on Trezor for "John Doe "... [device.py:39] -gpg: keybox '/home/roman/.gnupg/trezor/pubring.kbx' created -gpg: /home/roman/.gnupg/trezor/trustdb.gpg: trustdb created -gpg: key 7482BAFD9AFE0C94: public key "John Doe " imported -gpg: Total number processed: 1 -gpg: imported: 1 -Marking 0x7482BAFD9AFE0C94 as trusted... -``` - -# Usage examples: - -## Start the TREZOR-based gpg-agent: -``` -$ ./scripts/gpg-shell -gpg: key 7482BAFD9AFE0C94 marked as ultimately trusted -gpg: checking the trustdb -gpg: marginals needed: 3 completes needed: 1 trust model: pgp -gpg: depth: 0 valid: 1 signed: 0 trust: 0-, 0q, 0n, 0m, 0f, 1u -/home/roman/.gnupg/trezor/pubring.kbx -------------------------------------- -pub ed25519 2016-10-22 [SC] - 74D5CDA3387022810BC97B257482BAFD9AFE0C94 - Keygrip = 78DDB30A6A9A7573606BAEDDC0D4065610831B6B -uid [ultimate] John Doe -sub cv25519 2016-10-22 [E] - Keygrip = 182A7F215C98CA29CF8A8A92B92D4A4F8BBEE1FD - -Starting GPG-enabled shell... -``` - -Note: this agent intercepts all GPG requests in the current shell, and will be killed after this shell is closed. - -## Sign and verify GPG messages: -``` -$ echo "Hello World!" | gpg2 --sign | gpg2 --verify -2016-10-22 22:36:38,088 INFO please confirm GPG signature on Trezor for "John Doe "... [device.py:39] -gpg: Signature made Sat 22 Oct 2016 10:36:37 PM IDT -gpg: using EDDSA key 7482BAFD9AFE0C94 -gpg: Good signature from "John Doe " [ultimate] -``` -## Encrypt and decrypt GPG messages: -``` -$ date | gpg2 --encrypt -r John | gpg2 --decrypt -2016-10-22 22:36:43,820 INFO please confirm GPG decryption on Trezor for "John Doe "... [device.py:52] -gpg: encrypted with 256-bit ECDH key, ID 4BE3A7CA55CEB3DE, created 2016-10-22 - "John Doe " -Sat Oct 22 22:36:43 IDT 2016 -``` +## Sample usage (signature and decryption) +[![asciicast](https://asciinema.org/a/7x0h9tyoyu5ar6jc8y9oih0ba.png)](https://asciinema.org/a/7x0h9tyoyu5ar6jc8y9oih0ba) ## Git commit & tag signatures: Git can use GPG to sign and verify commits and tags (see [here](https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work)):