Change OpenPGP Smartcard PIN retry counter
Borden
borden_c at tutanota.com
Wed Nov 19 22:04:47 CET 2025
Thank you for the response. I'm still a bit confused.
> What we're discussing here is how to increase the number of PIN retries that are allowed before that locking happens. The counter still protects from brute forcing.
>
> The default is 3 attempts, but I think 5 is still reasonable and a bit "safer" in terms of not accidentally locking yourself out.
>
What's the control on this to stop a bad actor from stealing an OpenPGP card and setting the reset count to 99999? I know you alluded to hardware implementation, but does the spec require the level 2 password to change this, if it can?
More information about the Gnupg-users
mailing list