GNU Privacy Guard (GnuPG or GPG) is an open source implementation of PGP, a file encryption and signature tool widely used for emails

learn more… | top users | synonyms (1)

1
vote
1answer
11 views

Why doesn't the number of bytes required by GnuPG generating the key decrease?

I ran a gpg --gen-key on a remote machine connected with SSH and left it to do its job. It finished successfully, however during the execution time it asked to perform random actions to collect more ...
2
votes
1answer
40 views

GPG armor output ending with == followed by four characters

Is there a reason why GPG output always ends with == followed by 4-characters? Here are the last few lines of my GPG public key: ... OOr8IiqHUQhVk8JosOWrUMbkIuaQCngYloRLkaxAtBpQcDO3iAEWF+gGP6Du3yU4 ...
2
votes
1answer
25 views

Establishing trust between a device and a developer, TLS signal vs X.509, GnuPG (or both)

Let's say you wanted to implement a "secure sideloading" mechanism for your embedded device so that the device could establish trust with authorized 3rd party developers. Developers would have local ...
0
votes
0answers
18 views

GPG4Win + Enigmail = The key ID <email address> configured for the current identity does not yield a usable OpenPGP key. How to resolve? [migrated]

I am setting up a Windows computer with PGP - GPG4Win, Thunderbird, Enigmail. Everything works successfully, until I am trying to encrypt a message. This error message appears: The key ID ...
0
votes
1answer
25 views

When updating a subkey's expiration date, do old backups of my private master key become invalid?

In GnuPG I have a master key that doesn't expire, with separate subkeys with one year expiration time for encryption, authentication, and signing. If I update the expiration dates of my subkeys, will ...
0
votes
0answers
13 views

gnupg: Use specific key for symmetric encryption of stdin [migrated]

I'm looking for a way to use gpg2 to symmetrically encrypt stdin and send it to stdout. echo "Unencrypted" | gpg2 -d -symmetric klgkljfgkls... [encrypted] I could not figure out how to specify ...
0
votes
3answers
31 views

How do you check the signature of a signing program (ex. GnuPG) if there is no native version installed? [Catch 22]

If you downloaded a version of a signature verification program that might have been modified, you naturally check its signature. But what if you have none such program to check it (whose signature ...
1
vote
1answer
34 views

What's the difference between trusting a key and signing it?

What's the difference of meaning between trusting (trust command) a key and signing (sign command) it?
2
votes
1answer
18 views

Are expired keys eligible default keys?

From GnuPG's man page: [...] the default key is the first key found in the secret keyring. Are expired keys eligible default keys? Or should I manually set the default key in gpg.conf? I'm ...
1
vote
1answer
25 views

How to create a ring signature?

While reading the Off-the-Record-Messaging paper by Nikita Borisov, Ian Goldberg and Eric Brewer, I came across the idea for "ring signatures" which allow a member of a group to sign a message in the ...
1
vote
1answer
18 views

How to raise a key to ultimate trust on another machine?

I have created a master key with two subkeys: one for signing and the other for encryption. Finally, I have exported the two subkeys to a new machine. How can I tell the new machine to consider the ...
8
votes
1answer
531 views

Should I recreate Git tags after revoking a signing key?

Let's say my signing key has been compromised and I have to revoke it. What happens to the changesets and tags already signed? Should I rewrite them with the new signing key?
0
votes
0answers
11 views

How to change GPG4Win default program alghoritms? [migrated]

How to change all 3 default algorithms in GPG4Win? I mean Symmetric cipher for AES256, Compression to ZIP and Digest algorithm. But not in keys - in program defaults using cmd. Please provide exact ...
0
votes
0answers
16 views

PGP not decrypting when using gpg4win [migrated]

I have set up the GPGTools on OS X 10.11 and they work perfectly fine in Apple Mail, as I have verified by testing with two of my email addresses. Even in Outlook 2016 with the gpg4win plugin on my ...
5
votes
1answer
43 views

Sending GPG private key to myself

I recently started to use GPG and I wanted to import my secret key from another computer. I was thinking about sending it to myself by email or using an USB storage device. Question : Is it safe ? ...
3
votes
1answer
20 views

Creating subkeys for an existing OpenPGP key

I have an existing OpenPGP key which has been used infrequently. All capabilities appear to be bound to the master key, there are no subkeys. /home/user/.gnupg/pubring.gpg ---------------------------...
0
votes
1answer
39 views

How do I know which subkey GitHub is using for signing?

I added my gpg subkey to GitHub today and noticed that regardless of which subkey I export, the PUBLIC KEY BLOCK is the same. I have since found this post, that explains why: is-it-possible-to-export-...
4
votes
0answers
39 views

How does the security of a GPG2 hybrid-encrypted file compare to a LastPass vault?

While discussing LastPass, a colleague told me about trousseau, a GPG-based method of sharing key-value stores between developers on shared sites/cloud drives/etc. How do the two compare in terms of ...
1
vote
1answer
35 views

How can I check the integrity of a file with GPG?

I plan on running several servers with bitcoind and other things. How can I do file check with GPG key? I did the following: first I downloaded the file I want to check over a secure connection: ...
2
votes
1answer
64 views

How to manage employee OpenPGP keys?

I am trying to create a secured policy for storing and maintaining keys between users of my company. I am rather new to OpenPGP and thus need some advice. Currently, the idea is: Generate a master ...
2
votes
0answers
69 views

Yubikey with gpg2

I recently purchased a Yubikey 4, which is working great for U2F and a static password, but I'd like to use the PGP Smartcard functionality as well, so I connected the Yubikey to my computer and ...
4
votes
1answer
58 views

Explanation of modern PGP?

wikipedia states that OpenPGP is currently defined with RFC 4880 which defines a very simple process that doesn't seem like it represents modern RSA + AES encrypted email: The sender creates a ...
0
votes
1answer
29 views

Using virtual server for backing up files

I've purchased a virtual server which I need to run some custom tools every once in a while. I actually don't use any server features of my virtual server, I really just need a Linux machine which is ...
1
vote
1answer
31 views

Create revocation certificate for all user IDs

My OpenPGP key consists of three identities and two subkeys. I now would like to create a revocation certificate for the master key. pub 4096R/2J9F2349 2016-05-10 [expires: 2016-11-06] uid ...
0
votes
1answer
41 views

Do I need to use GPG subkeys for my backups?

I'm reading a lot about the need to separate the master key from additional encrypting or signing keys, like these links: GPG subkey layout. Separate keys for C, S and E? https://alexcabal.com/...
0
votes
1answer
40 views

Unsecure FTP with Encrypted file and Wireshark leakage

Hi i was wandering if it is possible to have a password leaked to an encrypted file on an anon ftp server with r-x-w permissions. So for example i have a file encrypted using gpg and when opened on ...
0
votes
2answers
60 views

Replacing files with infected files on anonymous ftp server

I am creating a new question as i now have another question which was raised from a previous answered question post. What im trying to figure out is would this scenario be possible. I have an ...
1
vote
1answer
27 views

NTRUEncrypt in SSL and GPG encryption

Commonly used cryptosystems like RSA or ECC, on the other hand, will be broken if and when quantum computers become available. - https://tbuktu.github.io/ntru/ How can we introduce NTRU in GPG and ...
1
vote
1answer
67 views

Virus/Trojan attached to GnuPG encrypted file

Is it possible to infect a file encrypted using GnuPG? For example, if I had an encrypted file on an unsecured public ftp server, would someone be able to copy that file and attach a virus/trojan ...
2
votes
1answer
83 views

Is storing passwords encrypted with GnuPGP on an anonymous FTP server safe?

I would like some advice on a method of storing passwords to a database on my anonymous FTP server. Basically I have login details for a few trusted users to a database server stored in a text file ...
3
votes
1answer
25 views

Does it matter what version of GnuPG I use to create revocation certificates?

Today I am about to create a bunch of revocation certificates for all of my emails. Why? Because it already happened to me in the past, that I lost my private key, or my computer was compromised. It ...
1
vote
1answer
23 views

Why does the revocation sent to the OpenPGP keyservers not show up?

I have created a new OpenPGP key pair. So I wish to revoke the former I used. Here's what I managed to do so far: This way I found that email's ID = 3C76732B gpg --search burian.vlastimil2@gmail....
1
vote
1answer
40 views

What is the Purpose of placeholders (e.g. %k, %f) in some GnuPG options?

In some GnuPG options (--cert-notation, --sig-notation, --photo-viewer and others) there can be used certain placeholders (for instance %k, %f etc.). What is the purpose of using that placeholders? ...
2
votes
1answer
38 views

What is the purpose and meaning of the --sig-notation and --cert-notation options in GnuPG?

What is the purpose of the --sig-notation and --cert-notation options in GnuPG? What are the intended use cases? In the first part the a @ character is used, so I guess the options are for providing ...
1
vote
1answer
15 views

Uids in GnuPG — 3 fields or 1

gpg2.1 allows me to do gpg2 --quick-adduid old_id new_id. There's no options to specify realname, email, and comment separately like in the interactive adduid. Also, in listings, the three fields (...
2
votes
1answer
32 views

How to import primary secret key from backup into GnuPG?

I've seen "Re-import secret primary key in GnuPG" which is pretty much the issue I'm seeing, but I haven't had any luck with GnuPG 1.4.20 (from GPGTools) or GnuPG 2.1. Even if I delete my entire ~/....
2
votes
2answers
86 views

Restore GPG key after exported to a smartcard

After exporting my private key, I moved my private key on a smart card using keytocard. This worked fine, and I could sign and use GnuPG as expected. Now I would like to go back to have the private ...
2
votes
2answers
239 views

Is the RSA private key useless without the password?

I notice whenever I generate a new gpg key (using pgp) I always have to assign a password to it, which makes perfect sense. But if I'm not mistaken, gpg is based on prime numbers. How is this ...
1
vote
1answer
54 views

Spam protection for public GPG keys?

Public keys published to a server almost always contain emails. Is there any sort of protection against bot harvesters that will use that email for spam?
2
votes
1answer
41 views

Revoking signing keys: do they still work afterwards?

Scenario: I have multiple signing subkeys, each for every portable device (i.e laptop). None of them have private master key (it is deleted following the tips in Alex Cabal's post. One of the devices ...
0
votes
1answer
53 views

PGP/GPG: Do I need more encrypton subkeys?

As far as I know after reading several tutorials, it's reasonable to create one subkey for signing per each device I use, especially one that can be stolen, like laptop. However, having multiple ...
2
votes
2answers
82 views

How does GnuPG encrypt secret keys?

When creating a secret key with GnuPG, you are asked for a password to protect it. Which encryption algorithm is used to achieve this? The handbook only says that a symmetric encryption algorithm is ...
1
vote
2answers
38 views

Would saving GPG and SSH keys as another user improve security?

Since e.g. SSH keys under Linux are owned by the user who created them, any applications running as the user, e.g. a web browser, should be able to read them from the ~/.ssh folder. Say that there is ...
3
votes
2answers
101 views

Is there any benefit to encrypting messages with PGP that will be trasmitted over SSL to a REST server?

Would there be any benefit at all to encrypting a message using PGP before sending it to a REST server over SSL, or is this completely redundant and a waste of processing time? For example, could a ...
1
vote
0answers
39 views

gpg 2.0 command line option to create UTF-8 data

With echo text | gpg2 --sign --textmode -a I can create messages with a one pass signature containing a Literal Data packet in TEXT ('t') format. If I skip the --textmode option it will generate ...
3
votes
2answers
105 views

Why does my private OpenPGP key look different between devices?

Something I noticed, when I use gpg --export-secret-keys -a on different computers: My private key looks different, even though they are the same key pair. Is that normal or does this indicate ...
2
votes
2answers
72 views

Does Thunderbird Enigmail plugin decrypt attached files?

From my research I have found out that you can easily send encrypted messages to one another using Enigmail. If first I encrypted a file,then attached it to an email, sending it through Enigmail to a ...
4
votes
3answers
218 views

How to decrypt a file encrypted under multiple public keys GPG

According to https://www.gnupg.org/gph/en/manual/x110.html To decrypt a message the option --decrypt is used. You need the private key to which the message was encrypted. Similar to the ...
3
votes
2answers
80 views

GnuPG does not verify signature while decrypting

I have signed file 1.txt, result file is 1.txt.asc. I changed content in file 1.txt.asc (signed content, not signature). Then I verify signature in 1.txt.asc and I get information that signature is ...
3
votes
1answer
24 views

How to get GnuPG fingerpints only for specified key name, not for substring matches?

I have few GnuPG keys: test, test2, some test. When I invoke gpg --fingerprint test, fingerprints of all keys are listed. When I run gpg --fingerprint test2, only test2 key fingerprint is printed. How ...