PGP is short for "Pretty Good Privacy". It is a data encryption and decryption computer program that provides cryptographic privacy and authentication for data communication. PGP is often used for signing, encrypting and decrypting texts, E-mails, files, directories and whole disk partitions to ...
10
votes
6answers
760 views
Shouldn't GPG key fetching use a secure connection?
If I run this for example:
gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xFBB75451
then does the importing occur in a secure way? I mean does it go over only secured connections? (HKP?) ...
28
votes
6answers
8k views
How should I distribute my public key?
I've just started to use GPG and created a public key. It is kind of pointless if no-one knows about it. How should I distribute it? Should I post it on my profile on Facebook and LinkedIn? How about ...
6
votes
2answers
365 views
What risks are inherent with connecting to an untrusted public key server?
Thomas Pornin brought up a good point about PGP key servers in an answer to a recent question, here:
Shouldn't GPG key fetching use a secure connection?
...you should not trust the key ...
6
votes
2answers
271 views
What information is leaked from an OpenPGP encrypted file?
If an attacker obtains a file that has been encrypted using an OpenPGP public key, what information can the attacker deduce?
For example, to what degree of certainty can the attacker deduce the ...
8
votes
3answers
607 views
In PGP, why not just encrypt message with recipient's public key? Why the meta-encryption?
It's described very well by this diagram. It seems like the process used is convoluted and more round-about than it needs to be. Why is an intermediate random key generated for the payload's ...
11
votes
2answers
697 views
Flaw in encryption through pseudorandom number stream (from gpg documentation)
I was reading PGP docs and came upon a part written by Phil Zimmermann (PGP's creator) that piqued my curiosity:
When I was in college in the early 70s, I devised what I believed was a brilliant ...
2
votes
2answers
2k views
Automating PGP encryption? (Windows)
Let's say I have daily files that need to be encrypted using PGP (and then emailed) and I want to automate this task. I would be using Windows PowerShell to manipulate the files (examine date/times ...
6
votes
3answers
339 views
How can I encrypt a file using `gpg` without including the recipient's key ID?
An OpenPGP encrypted file will include the key ID of the intended recipient's public encryption key, as explained in this question.
Is there any way to remove that information from the resulting ...
2
votes
1answer
84 views
Apart from the lack of native Oultook support, why should one prefer S/MIME over PGP/MIME for email?
From my (still quite subjective) point of view, GnuPG/PGP is superior to SSL (or more specifically, PGP/MIME over S/MIME; maybe in other areas SSL is the better choice), e.g. due to the support of ...
11
votes
2answers
2k views
How does RSA encryption compare to PGP?
On this answer ck says
RSA and PGP are different.
What you are essentially asking is how
do I run my petrol car on diesel? The
answer is you can't.
I would be interested in a more ...
8
votes
2answers
1k views
GPG File size with multiple recipients?
If I encrypt a file for multiple users how does the file size change?
Does the size of the output double for two users. How about 10 or 100 users?
7
votes
1answer
131 views
Can all the (other) recepients of a PGP encrypted message be identified?
Does an encrypted message contain any information about whom it is encrypted to, or at least to how many recipients? And if so, is it at least only obtainable for other recipients or for just anybody?
...
6
votes
3answers
636 views
Is the OpenPGP private key inherently password-protected?
I know I am required to enter a password every time I use my OpenPGP key. Is this done via software implementation or is it a property inherent to the protocol, and therefore the key?
Essentially, ...
3
votes
2answers
210 views
How many GPG keys should I make?
I am learning how to use GPG keys, and I am wondering what is the threshold people generally use to maintain separate GPG keys. Maintaining an incredibly large number of keys is not good since it ...
2
votes
0answers
466 views
Store PGP keys in HSM
Is anyone storing the PGP encryption key in a Hardware Security Module (HSM)? Company policy mandates this, so I need to store the private key to decrypt pgp file in HSM. But as much i know PGP uses ...
1
vote
2answers
458 views
gpg encryption security
How secure is encryption files used gpg this way
gpg -c personal.zip
will not use any keys or other lines, and how good its compared to truecrypt
Note that I will upload encrypted files to my ...
