Tuesday, October 29, 2013

[krdedalp] Changing the iterations of a PGP key

How can one change the number of hash iterations of a password-protected already existing private key?  I see gpg --s2k-count but it is unclear exactly what command line invocation I need.

A user may be happy with a rarely used private key taking many minutes to unwrap, still less than the time needed to travel to and start up the air gapped secure computer.

Update: gpg --s2k-cipher-algo AES256 --s2k-digest-algo SHA512 --s2k-mode 3 --s2k-count 65000000 --edit-key <key id>
"When the edit key prompt comes up, enter passwd to change your passphrase. You can enter the same passphrase again and it will re-use it with the new configuration." (from http://nullprogram.com/blog/2012/06/24/ )

No comments :