Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 2 down vote favorite

I created a public/secret key using Seahorse (GNOME managing tool for encryption keys). I haven't had issues encrypting and decrypting files from the computer the keys are located in but I'd like to be able to decrypt and encrypt in other computer. What is a secure way to transfer public and private keys in this case?

I ultimately copied my .gnupg directory to the second computer and Ubuntu's key manager detected both keys so after typing my passphrase I was able to open my file but I'd like to know what is a secure/proper way to do it?

share|improve this question

2 Answers

up vote 2 down vote accepted

There's no better way, really (at least if you did the copy with an eavesdropping-resistant medium, e.g. through a SSH tunnel, or with a USB key). The key files being stored as files on the hard disks of both systems, this is a simple data transfer issue.

Ultimately, your private keys are protected by your passphrase.

(Of course, public keys can be transfered by any way you see fit, without any security issue: they are public.)

share|improve this answer
Thanks. Another question. If someone gets a copy of my private key, he wouldn't be able to read my encrypted files but he would be able to impersonate me? Is that right? – Robert Smith Aug 21 '12 at 4:57
If the files are encrypted using a surrogate key protected by your private key, they'll be able to read them. – Polynomial Aug 21 '12 at 5:50
Transferring public keys doesn't need confidentiality unless you're concerned about privacy, but you still need to ensure integrity. It's less of a risk in practice, but it is a security issue. – Gilles Aug 21 '12 at 7:09
up vote 2 down vote

Encrypt your public and private key before you transfer them to another computer. Use a 30 character random password. Decrypt the file on the other computer with the same password.

share|improve this answer
Thanks for your answer. Then other than encryption, this is the best way available. – Robert Smith Aug 21 '12 at 4:55

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.