PGP is short for "Pretty Good Privacy". It is a data encryption and decryption computer program that provides cryptographic privacy and authentication for data communication. PGP is often used for signing, encrypting and decrypting texts, E-mails, files, directories and whole disk partitions to ...

learn more… | top users | synonyms

5
votes
1answer
85 views

GnuPG + Yubikey: Can a trojan extract any secret key or sensitive information?

When using GnuPG with a Yubikey 4 on a Laptop for e-mail communication: Can a trojan extract any secret key or sensitive information? If so, what information would that be?
3
votes
1answer
18 views

Do I need separate revocation certificates for each email address associated with a key?

I just created my first OpenPGP key with GnuPG + Thunderbird + Enigmail. The key is used for two email addresses. Now I created a revocation certificate. There is only on of the email addresses ...
4
votes
1answer
70 views

What are the problems with uploading client-side encrypted keys to keybase.io?

I was just reading some articles about keybase.io: http://www.makeuseof.com/tag/keybase-wants-bring-encryption-masses-heres/ http://blog.lizdenys.com/2014/03/31/refusing-to-verify-myself/ And I'm ...
0
votes
3answers
57 views

Is there use for GPG/PGP for casual people who are simply concerned for their privacy?

GPG seems to be something that would be important to people who communicate to a particular person and have to keep their privacy and/or security. But what if I'm just a casual user who's aware that ...
1
vote
0answers
34 views

PGP 'forced entry' decode (steganography?)

This was originally posted by me on stackoverflow but was deemed too generic. It does seem like an impossible thing to do, but: you know when you have your perimeter alarm system you usually get ...
4
votes
1answer
53 views

Signing UIDs which do not belong to a RL person with full name

Sometimes I am asked to sign pseudonymous UIDs or see PGP keys which belong to organizations rather than single persons. These, by nature, do not contain the name of a real life person; hence there is ...
13
votes
3answers
1k views

How do I protect my OpenPGP key on my computer?

How do I protect my OpenPGP key on my computer? If I make a backup of my private key I will keep it secure, but if someone gets access to my computer he/she will can get all my keys through Kleopatra ...
2
votes
1answer
26 views

Automatically finding and fetching signature paths from own key to target

This is a question about usage of Web of Trust. Let's suppose I've just generated a key pair and attended one or two Key Signing Parties. That gave me ~10 signatures on my public key, some of which ...
3
votes
1answer
54 views

What happens if an OpenPGP subkey gets compromised?

In my GnuPG keyring, I have a primary key for creating keys and three subkeys: two for encryption and one for signing. All of then have the same password. If a subkey gets compromised, is it possible ...
3
votes
1answer
77 views

Sign GnuPG master key with own X.509 certificate?

Can I use a trusted X.509 digital certificate to facilitate the expansion of my personal web of trust? To be more specific: Can I use my X.509 certificate to sign my personal GnuPG master key? Will ...
0
votes
0answers
22 views

Using 8192 bit keys GPG [duplicate]

I am interested in generating 8192 bit keys out of curiosity. I know that 4096 bit keys is the maximum key strength that is recommended, but I would like to know how to increase the size. I have ...
1
vote
1answer
30 views

Is it a good idea to use an OpenPGP key that has no password?

I'm tarballing and compressing backup files of my system configuration, and other important stuff. The process of tarballing, compressing and encrypting happens every time rsnapshot changes something ...
3
votes
1answer
41 views

Using the middle name instead of first name for OpenPGP?

I'm just getting started with OpenPGP. I've generated a key, talking to (very few) friends involved with the technology. But I have a concern: I go by my middle name (with all emails, friends, etc.) ...
1
vote
3answers
128 views

Best way to keep private PGP keys?

What is the most secure way to store my private PGP keys?
0
votes
1answer
70 views

Receiving mails with strange PGP Key ID

I have received encrypted emails which I can not decrypt because the key used for encryption seems not to be correct. Usually I have a key ID with 8 hex characters. This key can be found on public ...
4
votes
2answers
1k views

Lost my PGP private key, what's next?

I have created a PGP key using GPGTools, and published it a while ago. Things are: I have no longer access to my secret key. Indeed, I unfortunately formatted the wrong drive (encryption was and is ...
2
votes
1answer
43 views

How do we 'initiate' mail exchange with PGP

I am totally new with PGP, and I would like to know how I can initiate a mail exchange with it. I created my public/private keys, and posted my private key on the MIT PGP Public Key Server. I can ...
1
vote
2answers
59 views

Is it possible to protect the emails and calendar in an Exchange server against own Exchange administrators?

We have our Exchange server in a remote site administered by an external provider. We would like to avoid the possibility of provider employees to access the email and calendar of critical accounts in ...
9
votes
2answers
182 views

What's the chance of two PGP keys being exactly identical?

In the real world, millions of PGP keys are created every day, what is the probability (chance) of creating two identical keys? In different places, by different people?
1
vote
1answer
41 views

How is the signing of an OpenPGP public key realized technically?

I recently have signed the public OpenPGP key of a friend of mine. Curious to see, which effect this would have on the actual key, I compared the key before and after signing it. What I found was that ...
-1
votes
1answer
86 views

Why are pgp keys limited to a number of bits?

I am wondering : why does pgp keys have a fixed number of bits. They can be 2048,4096, but why not 56000 or 23 bits ? Is there a specification, or ISO, that was made to limit thoses Keys. Why? If a ...
0
votes
2answers
573 views

GnuPG decryption not asking for passphrase

I've some stuff encrypted with GnuPG using gpg -e. When I decrypt them, the system does not ask for the passphrase, it decrypts it straight away. Does it store the secret key somewhere and uses it (I ...
3
votes
1answer
80 views

What would happen if a public key server is compromised?

What would happen if in someway a public key server, let's say the MIT PGP key server, was compromised and some keys would be edited to an attacker's public key? Is this even possible? Would that be ...
0
votes
2answers
111 views

PGP on Dark Net Markets: What threats does it control?

Most Dark Net Markets (Agora, Nucleus, etc.) recommend that customers use PGP when communicating with vendors, particularly when sending their address. The vendor's public key is presented publicly on ...
0
votes
1answer
30 views

PGP Key Servers Verification Mail? [duplicate]

Why do existing PGP key servers not perform e-mail verification? Wouldn't it help the problem of authenticating of public keys? By e-mail verification/confirmation I mean a single e-mail sent to the ...
5
votes
1answer
517 views

GPG (PGP) decryption speed issue

We are new to using GPG and we have a very strange issue with decryption speed when using RSA keypairs, which are generated by using different tools (GPG for Windows, DidiSoft OpenPGP Library for .NET ...
4
votes
1answer
108 views

My OpenPGP private keys are set up with sub-keys. What happens if I revoke a sub-key and re-issue a new one?

I have set up my OpenPGP keys with sub-keys, following the general instructions laid out in "Creating the perfect GPG keypair." The general gist is that you create a "master keypair" which is not ...
3
votes
1answer
84 views

Should I revoke & regenerate PGP private keys after computer is serviced by Apple Store?

I recently had an issue with my MacBook where it wouldn't boot. So I took it in to the apple store, and they said that they would need to send it off to a service center to diagnose and repair it. I ...
1
vote
1answer
30 views

PGP's -cw option in GnuPG

I am new to PGP and am going through the book. I have GnuPG on my OS X. I've been through the man pages for GnuPG and to encrypt files the following is instructed: ...
4
votes
2answers
118 views

Should I add picture(s) to my OpenPGP key?

I'm toying with the idea of creating a pair of OpenPGP keys, and I'm wondering if I should include a picture or two. I know it will make my key a lot bigger, but is it still worth it? I'm thinking of ...
0
votes
1answer
31 views

How to verify signature while downloading log4j?

From the log4j download page. The PGP signatures can be verified using PGP or GPG. First download the KEYS as well as the asc signature file for the relevant distribution. Make sure you get these ...
3
votes
2answers
79 views

How to verify email addresses in GnuPG UIDs?

I have been reading up on key signing policies and best practices. Something I have been unable to figure out is how to verify the email address attached to a UID of a GnuPG key. I can verify the ...
-1
votes
3answers
110 views

Are 21 characters enough to restore a PGP key?

The german e-mail hoster web.de offers PGP encryption with Mailvelope now. To transfer your private key to another browser, you can use a 21 characters long recover key. How does this affect the ...
5
votes
3answers
526 views

Is it safe to use same key pair to encrypt and sign? [duplicate]

Would it be easier to hack a private key by having multiple encrypted and/or signed messages from the same person than having only encrypted or only signed messages? Should I use one private key to ...
11
votes
2answers
114 views

Is there any information I shouldn't include in questions about GnuPG aside from my private key?

There are many questions I have about GnuPG, but what stops me asking is knowing that I may add output to a question that I shouldn't release publicly. Is it a risk to paste in the result of gpg ...
5
votes
1answer
246 views

Using ECC for PGP-Master Key in combination with Yubikey

I acquired a Yubikey Neo last month. Now I want to use the Smart-Card functionality for PGP. I followed the official guides on the Yubico Website tested it with 2048 RSA Keys and it worked fine. But ...
4
votes
1answer
116 views

How to verify an OpenPGP key's ownership?

I've added the public key of Diceware creator (please use it as a practical example), I've added it by downloading diceware.wordlist.asc, and I didn't have his key and couldn't immediately find it to ...
2
votes
1answer
194 views

GnuPG - Problems with large RSA keys

I have read that GnuPG limits the size of RSA keys to 4096-bits because this could lead to problems with running out of secure memory. But in which operation is this the case? Generating the keys? ...
13
votes
3answers
909 views

Why is encryption (or signing) of long lines in E-Mails with PGP problematic?

I am using Thunderbird with Enigmail and OpenPGP to encrypt and/or sign E-Mails. On many occasions Enigmail complains that I have too long lines in the mail and asks how it should wrap them. However ...
5
votes
2answers
161 views

What do the terms used in OpenPGP keyserver SKS mean? (sig, sbind, sig3, exp2, Policy, …)

When viewing a key record in a public key server, such as this one, there are lots of keywords used: sig, sig3, exp3, Policy, sbind…). I understand that "sig" probably means a signature, but what's ...
3
votes
1answer
61 views

Multiple OpenPGP encryption keys signed by a single certificatation key?

Say I have several different email accounts and I want to use a different encryption key for each of them but still have them all certified under one identity. Is this a good idea and how would I do ...
3
votes
3answers
166 views

Chaining multiple PGP keys

I would like to know the practical limitations to contact chaining multiple peoples pgp key's in order to protect a file. In normal public key cryptography, four keys are required, public and private ...
4
votes
1answer
130 views

Do I need to revoke both my OpenPGP primary key and subkey?

After creating an OpenPGP key pair in GnuPG, if I list keys with gpg --list-keys, I get (GnuPG default): /someone/.gnupg/pubring.gpg ------------------------ pub 2048R/BC589B05 2015-07-15 uid ...
8
votes
1answer
179 views

What to do with a PGP/GPG key to which I've lost the private key?

I created a private key with an Android app I'm no longer using. I had uploaded the public key to the keyservers without setting an expiry date. I later deinstalled that app, and deinstalling ...
11
votes
3answers
987 views

Can I expose a passphrase-protected private OpenPGP key? [duplicate]

I have created a 4096-bit key-pair using GnuPG. Can I expose the passphrase-protected private key to an untrusted system? E.g. can I put that key in my Dropbox account or send it to myself as an ...
1
vote
1answer
41 views

Why has my OpenPGP key been duplicated on expiry change?

I've published my OpenPGP key publicly on the MIT key server. Later I realized I needed to set the expiry date to an earlier date than the one the (sub-)key was published with. I managed to do this ...
1
vote
1answer
72 views

Is it possible to assign different UIDs to subkeys for the purpose of having multiple identities?

Many people advocate generating new primary keys for each identity they wish to have. For example, creating one primary key and associated subkeys for workplace use, and a completely different ...
0
votes
1answer
173 views

Is there a way to change the creation date of a GPG/PGP cert

How can I modify the creation date of a GPG/PGP key? I can set the Creation-Date while creating a key. But can I change this Creation-Date after the key was created? I cannot find how to do this.
2
votes
1answer
239 views

How to send an encrypted mail only knowing the PGP fingerprint?

How does one send an encrypted email with PGP, when he only has the recipient's fingerprint? I am already sending emails using PGP, but I've just pulled a contact's PGP fingerprint who I need to ...
1
vote
1answer
49 views

What does the letter in an OpenPGP key's bits definition (like 4096D) denote?

I noticed that when looking at OpenPGP keys on a key server, the key's bits definition is usually followed by a letter, as in "4096D" for example. However, there are also keys with other letters than ...