The tag has no usage guidance.

learn more… | top users | synonyms

3
votes
1answer
12 views

Creating subkeys for an existing OpenPGP key

I have an existing OpenPGP key which has been used infrequently. All capabilities appear to be bound to the master key, there are no subkeys. /home/user/.gnupg/pubring.gpg ---------------------------...
3
votes
1answer
25 views

Is using PGP/MIME or PGP Inline more secure?

Using Enigmail for Thunderbird, the setup wizard automatically sets itself to PGP/MIME and also disables HTML formatting. I am looking for security and have no idea which to use, though I do know HTML ...
2
votes
1answer
54 views

How to manage employee OpenPGP keys?

I am trying to create a secured policy for storing and maintaining keys between users of my company. I am rather new to OpenPGP and thus need some advice. Currently, the idea is: Generate a master ...
4
votes
1answer
55 views

Explanation of modern PGP?

wikipedia states that OpenPGP is currently defined with RFC 4880 which defines a very simple process that doesn't seem like it represents modern RSA + AES encrypted email: The sender creates a ...
5
votes
1answer
107 views

Is the OpenPGP implementation of the YubiKey 4 Open Source?

Although previous versions of the YubiKey (eg Neo and Neo-N) used an Open Source Java applet to handle OpenPGP signing, encryption and authentication, it is unclear from the yubico website / ...
1
vote
1answer
30 views

Create revocation certificate for all user IDs

My OpenPGP key consists of three identities and two subkeys. I now would like to create a revocation certificate for the master key. pub 4096R/2J9F2349 2016-05-10 [expires: 2016-11-06] uid ...
3
votes
2answers
61 views

What are the benefits to adding a bitcoin blockhash UID notation to one's OpenPGP key?

Example: Notation data: blockhash@bitcoin.org 000000000000000011d9f6931e65f814c6f3b221736b0c45f25e0365a3d156fa As seen here: https://sks-keyservers.net/pks/lookup?op=vindex&search=...
0
votes
1answer
33 views

Verify a key was signed by another key

I began using GPG4Win/Kleopatra, the GNU Privacy Guard implementation for Windows. More recently I wanted to verify a download of Qubes OS, for which a guide is offered here. They describe a master ...
3
votes
1answer
22 views

Does it matter what version of GnuPG I use to create revocation certificates?

Today I am about to create a bunch of revocation certificates for all of my emails. Why? Because it already happened to me in the past, that I lost my private key, or my computer was compromised. It ...
1
vote
1answer
20 views

Why does the revocation sent to the OpenPGP keyservers not show up?

I have created a new OpenPGP key pair. So I wish to revoke the former I used. Here's what I managed to do so far: This way I found that email's ID = 3C76732B gpg --search burian.vlastimil2@gmail....
2
votes
1answer
32 views

What is the purpose and meaning of the --sig-notation and --cert-notation options in GnuPG?

What is the purpose of the --sig-notation and --cert-notation options in GnuPG? What are the intended use cases? In the first part the a @ character is used, so I guess the options are for providing ...
2
votes
1answer
31 views

How to import primary secret key from backup into GnuPG?

I've seen "Re-import secret primary key in GnuPG" which is pretty much the issue I'm seeing, but I haven't had any luck with GnuPG 1.4.20 (from GPGTools) or GnuPG 2.1. Even if I delete my entire ~/....
4
votes
1answer
27 views

Best practice: Should I revoke an identity self-signed using SHA1?

When I first created by PGP keypair, my identity was unfortunatly self-signed using SHA1. I later signed again using SHA512. Does it make sense to revoke the SHA1 signature now or will that just ...
1
vote
0answers
31 views

gpg 2.0 command line option to create UTF-8 data

With echo text | gpg2 --sign --textmode -a I can create messages with a one pass signature containing a Literal Data packet in TEXT ('t') format. If I skip the --textmode option it will generate ...
3
votes
2answers
103 views

Why does my private OpenPGP key look different between devices?

Something I noticed, when I use gpg --export-secret-keys -a on different computers: My private key looks different, even though they are the same key pair. Is that normal or does this indicate ...
3
votes
1answer
24 views

How to get GnuPG fingerpints only for specified key name, not for substring matches?

I have few GnuPG keys: test, test2, some test. When I invoke gpg --fingerprint test, fingerprints of all keys are listed. When I run gpg --fingerprint test2, only test2 key fingerprint is printed. How ...
6
votes
2answers
363 views

Am I weakening symmetric OpenPGP encryption by deploying a custom pre-derivation?

I often use GnuPG to encrypt files with a passphrase. I'm very paranoid, and afraid that the key derivation used by GnuPG isn't slow enough. For this reason, I've decided to do my own key derivation ...
3
votes
1answer
36 views

Critical sub-packets in OpenPGP not used

OpenPGP in RFC4880 allow to tag signature sub packets as "critical" by setting the high bit 7 in the packet type. I checked a few keys generated with GnuPG2 and all the sub packets are not critical, ...
2
votes
1answer
60 views

What is the recommended procedure to migrate to a new OpenPGP master key?

I am thinking about starting again with a new master key. My current master key was not compromised, but I had stored it on my private server temporarily, which is against good practices (but I am the ...
2
votes
0answers
38 views

GPG Public Key changes after removing master key [closed]

Why does my gpg public key change after removing my master key (leaving just my subkeys) from the gpg key ring? I'm doing this so i can move my daily use keys (subkeys) to my online machine while ...
1
vote
1answer
41 views

Can an OpenPGP master key decrypt something encrypted for a subkey?

When creating OpenPGP subkeys, the master key signs and certifies that a subkey belongs to that master key. Can be used master key to decrypt something encrypted using an encryption subkey? I guess ...
1
vote
1answer
33 views

OpenPGP master key with certificate and authentication capabilities (on a smartcard)

After researching about OpenPGP and smartcards, I came to a dilemma. The usual setup I've seen more widely is a master key (with SC capabilities) and 3 subkeys (with S, E, A each): pub 4096R/...
0
votes
3answers
58 views

Is there use for GPG/PGP for casual people who are simply concerned for their privacy?

GPG seems to be something that would be important to people who communicate to a particular person and have to keep their privacy and/or security. But what if I'm just a casual user who's aware that ...
3
votes
1answer
119 views

Verifying a downloaded file with gpg

I'm trying to follow the instructions to verify a downloaded file here: http://www.pps.univ-paris-diderot.fr/~jch/software/pgp-validating.html Get a local copy of the signing key You will ...
1
vote
2answers
65 views

PGP Key Signing Robot DKIM Verified Emails

It occurred to me that DKIM verified emails, from major players (e.g., GMail), could open the door to more modern OpenPGP robot key signing authorities. The idea would be to ask people to send a key ...
3
votes
1answer
340 views

Make signed file from content file and its detached signature?

I have a text file which I will call filename.txt. Firstly I call gpg --output filename.asc --clearsign filename.txt Signed file filename.asc is created. Then I call gpg --armor --output filename....
-1
votes
1answer
91 views

Why are pgp keys limited to a number of bits?

I am wondering : why does pgp keys have a fixed number of bits. They can be 2048,4096, but why not 56000 or 23 bits ? Is there a specification, or ISO, that was made to limit thoses Keys. Why? If a ...
4
votes
2answers
135 views

Should I add picture(s) to my OpenPGP key?

I'm toying with the idea of creating a pair of OpenPGP keys, and I'm wondering if I should include a picture or two. I know it will make my key a lot bigger, but is it still worth it? I'm thinking of ...
3
votes
2answers
88 views

How to verify email addresses in GnuPG UIDs?

I have been reading up on key signing policies and best practices. Something I have been unable to figure out is how to verify the email address attached to a UID of a GnuPG key. I can verify the ...
35
votes
2answers
9k views

How many OpenPGP keys should I make?

I am learning how to use OpenPGP keys in GnuPG, and I am wondering what is the threshold people generally use to maintain separate OpenPGP keys. Maintaining an incredibly large number of keys is not ...
21
votes
3answers
4k views

Does OpenPGP key expiration add to security?

I've created a new OpenPGP key to sign a software package in a source repository with an expiration date three years from now. It seemed like a good security measure, because if the key is compromised ...