Comment 3 for bug 78120

A work-around: Instead of using 'addcardkey', use first 'addkey' and then 'keytocard'. This worked flawlessly for me.

Some notes:
- use 1024 bit RSA (encrypt only), for the encryption key
- use 1024 bit RSA (sign only), for the signature and auth keys
- select the new sub key before 'keytocard' -- otherwise you'll end up putting your master key on the card