From 436c0744d02c89ca90bb6004c96c8f6b4cd4267c Mon Sep 17 00:00:00 2001 From: Pol Henarejos Date: Mon, 9 May 2022 19:05:50 +0200 Subject: [PATCH] Added clarification about Gnuk and Pico OpenPGP. Signed-off-by: Pol Henarejos --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index fdbd679..b927ee6 100644 --- a/README.md +++ b/README.md @@ -34,6 +34,8 @@ This project was inspired by [Gnuk](https://wiki.debian.org/GNUK "Gnuk"), a same As a consequence, Pico OpenPGP is designed from zero. Well, not strictly from zero, as it borrows some of the buffering between USB and CCID interfaces from Gnuk. Cryptographic operations are implemented with MBEDTLS library. +Whilst Gnuk is OpenPGP 2.0 with small set of enhancements, Pico OpenPGP aims at being OpenPGP 3.4 compliant, with new features (not present in Gnuk), such as Manage Security Environment (MSE) or UIF. + ## Security considerations All secret keys (asymmetric and symmetric) are stored encrypted in the flash memory of the Raspberry Pico. DEK is used as a 256 bit AES key to protect private and secret keys. Keys are never stored in RAM except for signature and decryption operations and only during the process. All keys (including DEK) are loaded and cleared every time to avoid potential security flaws.