[Script Info] Title: [Events] Format: Layer, Start, End, Style, Name, MarginL, MarginR, MarginV, Effect, Text Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Hello, everyone. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,This presentation is about\NGnuk + GnuPG; Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,The title is Gnuk + GnuPG\NExplained for Debian Developers Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,and Users. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Last year, we did a similar\Npresentation in Montreal, Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,but the demonstration\Nwas at the end. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And I realized that when\Npeople watching the video later, Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,they just watched\Nthe first part. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,So, this time I do the\Ndemonstration at the first part. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Here's are some contents. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,So, this figure explains\Nabout the GnuPG components. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,We have multiple processes,\NGPG, GPG agent Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,ST demo, and ping entry. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,When user asks GPG for\Nsignature generation, Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,all those-- PNPG, GPG agents\Nand SG demo works together. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And today, our family\Ndemonstrates how those Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,processes interact. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And here is Ayumi-san. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,So please come, my family and\NYabuki-san. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Yabuki-san will represent\NGPG user. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Because he daily uses GPG\Nas a Debian developer. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And she, she represents\NGPG. Her name is Ayumi. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,She's my daughter.\NShe represents GPG. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,It is a GPG protend.\NAnd she manages public Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,key operations. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And the most important\Nthing is that GPG agent. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And she is the mother.\NHer name is Hitoe. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And she handles\Nprivate key operations. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And then, he-- this time he\Nis very much important. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,He is Ashidamon.\NAssistant stands for smart card. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And he controls access to\Nthe token and the ORE card. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,This time, this represent\Nthe nuke token. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,This metal box. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Yes? Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Actually, we have another\Nthing that is ping entry. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Today, this dumper baby\Nrepresent ping entry. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Yes, let's see. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,So, suppose a user\Nhave a file Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,and he asks GPG to\Ngenerate signature Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,of this file. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,So, Yabuki-san asks her,\N"Please make signature." Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Then she says, "Yes sir." Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Then she generate cache\Nof the file. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Actually, it's the...\N Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,It's the chopsticks\Nfolder yesterday. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Uh, in Japanese we say\Nhashi so it sounds like hash. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,(laughter) Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Then she ask GPG agent. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,This represents\Npipe or socket. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,So then usually she\Nhas a key in the file system. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,But today, as I represent here... Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Usually, the private key\Nis in here. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Or in this box. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,But this time, my private\Nkey is inside this token. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Yes. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,This is my private key. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,It's securely stored \Ninside a Gnuk token. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Then GPG agent forwards\Na request to ST demo. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Actually, it is in Japanese\Nnow, but it is special Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,protocol between\NGPG agent and SG demo. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Then SG demo asks passphrase\Nfor Gnuk token. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,But-- pass it here. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,She asks passphrase. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Then ping entry spawned\Nfrom GPG agent. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Then ping entry\Ngoes to user-- Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,pops up windows to user,\Nand he asks passphrase. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Yes. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Then, he knows the passphrase\Nback to GPG agent. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And the passphrase\Ngoes through GPG agent Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,to SG demo\Nthrough token. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Then he shakes Gnu token. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Then he generate signature. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Then signature go back\Nthrough GPG agent Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,and GPG. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And lastly GPG gives\Nsignature to user. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,That's an interaction\Nof how GPG works when Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,user asks generating\Na signature. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Thank you for\Nthe demonstration. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And thank you for\Nmy family and Yabuki-san. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,A little bit about Gnuk token. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,The Gnuk token is a \Nspecial hardware Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,dedicated for GnukPG,\Nand its specialty is, Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,"I design and implement\Nthis for user's freedom." Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And the firmware is\Ncalled Gnuk. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,It is free software. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And here is a prototype\Nof a FST-01. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,It is a reference-free\Nhardware design. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,The reason why implement\Nand I put my info on Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Gnuk token is that to control\Nour crypto computation. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And my purpose is to\Nminimize the attack surface Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,as small as possible. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,One of the goal is that\Nit can be reproduced Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,by others, not only me. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,All technical documentation\Nis available. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,And I only use free too.