GNU Privacy Guard (GnuPG or GPG) is an open source implementation of PGP, a file encryption and signature tool widely used for emails

learn more… | top users | synonyms (1)

0
votes
1answer
36 views

Decrypt chunks of pgp encrypted

Suppose I have a very large encrypted .csv file (too large to fit in memory). Is there a way to decrypt N bytes of the cyphertext? My goal is to process each row of the .csv in memory without ever ...
1
vote
2answers
26 views

How to export secret keys from GnuPG including photo IDs?

I'm trying to create an OpenPGP key with a photo ID using GnuPG and then export it, so it can be imported on a different computer. Whatever tests I've done the photo ID never appears after the import ...
2
votes
1answer
17 views

Purpose of secret-subkeys?

Through output of gpg -k und gpg -K it seems that I always have (as well as create) (sub)keypairs. But, if the purpose of the pub and sub is as it is shown below and the purpose of the secretkey is ...
4
votes
1answer
48 views

What does an OpenPGP signature consist of?

I don't understand how OpenPGP signatures work. I have a picture which I want to sign, and a digital certificate which consists of my name and email address and my public key. Additionally, a digital ...
1
vote
1answer
59 views

How is this OpenPGP key displaying in a non hexedecimal format?

Looking at a GnuPG manual on openskills, I notice that the main key id GEBV933F is in a different format than the usual hexadecimal (G is no hexadecimal digit). How is this done?
3
votes
0answers
22 views

Enigmial does not put the secret key into the secret keyring [migrated]

I've been using Enigmail 1.8.2 on Thunderbird 38.5.0 from the Fedora 23 repository. I generated a key pair by using Enigmail and I can send encrypted and signed emails by using Thunderbird (or even by ...
0
votes
0answers
18 views

Calculate SHA1 sum of file with GnuPG on OS X [migrated]

I'm looking at the GnuPG download page, that's telling me that I can check the hash sum of a file with the following command: sha1sum apache-tomcat-9.0.0.M1-src.tar This unfortunately does not ...
3
votes
2answers
32 views

Comparing allegedly identical OpenPGP keys published through different channels

tldr version: When I try to compare public keys that are supposed to be for the same entity the versions I get through different channels are NOT the same and the ones that I download as a file like ...
3
votes
2answers
21 views

What can I do with the removed Masterkey?

I intend to start using GnuPG respective mail encryption with GnuPG. So I created a key pair with a short expiry date to gain some understanding. I read some stuff about removing the secret masterkey ...
3
votes
1answer
24 views

Is it possible to have an RSA authentication subkey with a DSA master key?

My key setup is as follows: sec dsa3072/CA72E53A created: 2013-05-12 expires: never usage: SCA trust: ultimate validity: ultimate The following key was revoked on 2016-01-13 ...
1
vote
4answers
70 views

Use GnuPG to verify if specified user signed file

To verify if file is signed correctly we use command: gpg --verify <file_name> and the output shows if file is signed correctly. And if it is, then signer name is shown. But is there ...
4
votes
2answers
158 views

GnuPG asks for a key ID when sharing my public key, what is that?

I generated a public key using GnuPG. I can see it using --list-keys $ gpg --list-keys /Users/mertnuhoglu/.gnupg/pubring.gpg ------------------------------------- pub 4096R/CB3AF6E6 2015-12-24 ...
4
votes
1answer
30 views

Is there something like a portable GnuPG keychain?

When encrypting or decrypting documents on a computer that isn't my daily driver I need to import my key to the keychain, do the encrypt/decrypt then remove the keychain and from the computer. As a ...
2
votes
1answer
91 views

GnuPG + Yubikey 4: How to manually check that all keys are where they belong (on the Yubikey only)?

I created a GnuPG RSA master-key and 3x RSA subkeys (sign,encrypt,authenticate). Of course I want all key material to be stored solely on the Yubikey 4 - as they are only my 3 subkeys. Since I use ...
4
votes
1answer
80 views

Yubikey: How is the OpenPGP key secured by PIN and passphrase?

Using the Yubikey 4 as an OpenPGP smartcard with GnuPG: How is the user PIN and user passphrase secured? In case a sophisticated attacker with physical access to the Yubikey 4 manages to physicaly ...
5
votes
1answer
52 views

GnuPG + Yubikey: Can a trojan extract any secret key or sensitive information?

When using GnuPG with a Yubikey 4 on a Laptop for e-mail communication: Can a trojan extract any secret key or sensitive information? If so, what information would that be?
3
votes
1answer
15 views

Do I need separate revocation certificates for each email address associated with a key?

I just created my first OpenPGP key with GnuPG + Thunderbird + Enigmail. The key is used for two email addresses. Now I created a revocation certificate. There is only on of the email addresses ...
0
votes
3answers
55 views

Is there use for GPG/PGP for casual people who are simply concerned for their privacy?

GPG seems to be something that would be important to people who communicate to a particular person and have to keep their privacy and/or security. But what if I'm just a casual user who's aware that ...
1
vote
0answers
28 views

PGP 'forced entry' decode (steganography?)

This was originally posted by me on stackoverflow but was deemed too generic. It does seem like an impossible thing to do, but: you know when you have your perimeter alarm system you usually get ...
13
votes
3answers
992 views

How do I protect my OpenPGP key on my computer?

How do I protect my OpenPGP key on my computer? If I make a backup of my private key I will keep it secure, but if someone gets access to my computer he/she will can get all my keys through Kleopatra ...
1
vote
0answers
49 views

GPG based on-the-fly folder encryption

I am trying to find a good way to combine Owncloud with client-side encryption. Ideally, the requirements are: encryption relatively transparent (mostly text/.odt files) and cross-platform (Win, OS ...
2
votes
1answer
17 views

Automatically finding and fetching signature paths from own key to target

This is a question about usage of Web of Trust. Let's suppose I've just generated a key pair and attended one or two Key Signing Parties. That gave me ~10 signatures on my public key, some of which ...
3
votes
1answer
45 views

What happens if an OpenPGP subkey gets compromised?

In my GnuPG keyring, I have a primary key for creating keys and three subkeys: two for encryption and one for signing. All of then have the same password. If a subkey gets compromised, is it possible ...
3
votes
1answer
52 views

Verifying a downloaded file with gpg

I'm trying to follow the instructions to verify a downloaded file here: http://www.pps.univ-paris-diderot.fr/~jch/software/pgp-validating.html Get a local copy of the signing key You will ...
4
votes
1answer
76 views

export-secret-key after Yubikey is plugged in

I have a Yubikey Neo and is running GPGTools (GnuPG/MacGPG2 2.0.28) on OS X (10.11.2). I have generated a master key with SC abilities and separate signing and encryption keys which I have moved to ...
3
votes
1answer
34 views

Sign GnuPG master key with own X.509 certificate?

Can I use a trusted X.509 digital certificate to facilitate the expansion of my personal web of trust? To be more specific: Can I use my X.509 certificate to sign my personal GnuPG master key? Will ...
0
votes
0answers
20 views

Using 8192 bit keys GPG [duplicate]

I am interested in generating 8192 bit keys out of curiosity. I know that 4096 bit keys is the maximum key strength that is recommended, but I would like to know how to increase the size. I have ...
1
vote
1answer
30 views

Is it a good idea to use an OpenPGP key that has no password?

I'm tarballing and compressing backup files of my system configuration, and other important stuff. The process of tarballing, compressing and encrypting happens every time rsnapshot changes something ...
1
vote
3answers
98 views

Best way to keep private PGP keys?

What is the most secure way to store my private PGP keys?
2
votes
1answer
54 views

OpenPGP encrypting backup files and sending them to Usenet servers

My Internet service provider includes Usenet servers with about about 45 days of retention. I'm planning to backup my most important files on there. I have a 50Mb/s symmetrical fiber connection to ...
1
vote
2answers
56 views

secret key not available for decryption, but still shows up in GUI

I'm trying to decrypt a message using my personal secret key. When I try to decrypt the message (using gpg --decrypt message.txt), I get the following error: gpg: encrypted with RSA key, ID 3810D17A ...
13
votes
1answer
225 views

Yubikey / GPG with OpenSSH signed key

I am currently looking into the possibility of using Yubikey (NEO)'s to store the private SSH keys of my users. By searching the internet I've found several places that explain how you can generate a ...
3
votes
1answer
163 views

Make signed file from content file and its detached signature?

I have a text file which I will call filename.txt. Firstly I call gpg --output filename.asc --clearsign filename.txt Signed file filename.asc is created. Then I call gpg --armor --output ...
2
votes
1answer
64 views

Help me understand the relationship between GPG public keys, sub-keys and expiration dates

Following best practices I'm now at the point where I have a non-expiring secret key stored in a save location and a set of sub-keys with an expiration date stored together with the public key on my ...
1
vote
2answers
110 views

What are some Linux commands for genrating and verifying digital signatures?

I am attempting a workflow to exemplify the process of digital signature using asymmetric cryptography. If I understand correctly then the public key and the private key in an asymmetric ...
1
vote
1answer
38 views

How is the signing of an OpenPGP public key realized technically?

I recently have signed the public OpenPGP key of a friend of mine. Curious to see, which effect this would have on the actual key, I compared the key before and after signing it. What I found was that ...
2
votes
1answer
78 views

How safe is Apple's FileVault full disk encryption?

I have read about this encryption feature for OS X but want to know how secure it is compared to PGP.
1
vote
1answer
39 views

What does “8.11 Encrypt or sign files into an archive” do?

I am going through the GnuPG manual and I want to encrypt a folder which, if my laptop was taken by anyone else, noone would be able to get access to for any of my information. This man page gives me ...
4
votes
1answer
66 views

Can I tell Linux not to swap out the data space of a specific process?

I need to be able to write a program that uses a secret value that I want to ensure never gets written to disk during a page swap. The value is securely entered when the program starts, and gets ...
0
votes
1answer
25 views

KeyChain Access and GPG Keychain - should those be running simultaneously?

I have installed GPG Suite and found out also during this time that my OS X has some KeyChain Access app that stores all my passwords under my screenlock password - total news to me. Can I get rid of ...
6
votes
1answer
90 views

pubring.gpg and pubring.gpg~ at install - why?

I've just installed GPG Suit and have pubring.gpg and pubring.gpg~ in ~/.gnupg. Why? Thank you. ~ cd .gnupg/ ~/.gnupg ls -a . .. gpg-agent.conf gpg.conf pubring.gpg pubring.gpg~ secring.gpg ...
0
votes
0answers
16 views

Backing-up PGP keys - how to do it safely?

I am re-installing the PGP Suit and did gpg --export-ownertrust to Desktop. I want to know if that file is safe on its own and what should be done to do everything properly in this process. I am ...
2
votes
1answer
39 views

I uninstalled GnuPG. Can I delete the ~/.gpg folder?

I uninstalled GnuPG to re-instal it without Mail. I had to delete it rather than work out if there is a way to stop it from trying to sign my email as I had to send the email quickly! I now am going ...
1
vote
2answers
206 views

GnuPG decryption not asking for passphrase

I've some stuff encrypted with GnuPG using gpg -e. When I decrypt them, the system does not ask for the passphrase, it decrypts it straight away. Does it store the secret key somewhere and uses it (I ...
1
vote
1answer
28 views

Re-installing GnuPG Suit - should I keep a copy of keyring?

I am currently going through PGP & GPG book. I installed GnuPG Suit a while back but did not verify checksum nor signature. I somehow created a key. Obviously by playing around. I now want to ...
3
votes
2answers
63 views

Does MDC integrity protection matter in symmetric encrypt/decrypt of local files?

I'm configuring scripts etc. to use GPG's symmetric mode to encrypt some files on my home desktop system. When I want to edit one of the encrypted files I decrypt it and pipe it into my editor and ...
1
vote
1answer
79 views

How to detect whether a GnuPG private key has passphrase on it from a script?

I've written a script to help our developers store a copy of their private keys without a passphrase inside our Puppet tree (not committed to Git) so our Vagrant boxes can use Hiera with eyaml + gpg ...
6
votes
1answer
59 views

GnuPG expiration date differs between public and secret key

I exported the secret part of my master key for security reasons. Now I had to extend the expiration date of my key for six months. When typing gpg --list-keys in my console, the following appears ...
1
vote
0answers
72 views

`gpg --keyserver subkeys.pgp.net` triggers error `armor-keys-failed`

$ gpg --keyserver subkeys.pgp.net --recv-key 0xXXXXXXXXXXXXXXXX gpg: requesting key FDXXXXXX from hkp server subkeys.pgp.net gpg: DBG: ...
3
votes
1answer
44 views

GPG key expired on mykeyring, but still valid on keyserver

Can someone help me in explaining this: I have an old and expired GPG key, on my keyring the key lists correctly as expired: myself@mypc:~$ gpg --list-sig --fingerprint DDF70E72 pub 1024D/DDF70E72 ...