318 reputation
111
bio website launchpad.net/~flimm
location
age
visits member for 1 year, 9 months
seen Aug 13 at 10:08

Aug
6
comment What could replace TrueCrypt?
How about softwarerecs.stackexchange.com
Jan
22
comment How can I encrypt a file using `gpg` without including the recipient's key ID?
You, sir/ma'am, are a genius. I can't believe I didn't spot this.
Dec
10
comment How can I encrypt a file using `gpg` without including the recipient's key ID?
Isn't there a way using PGP that you can publicly distribute your public keys, while hiding who the intended recipient is of an encrypted message? I don't see a reason why this couldn't be possible in theory. Why doesn't GPG simply omit the recipient's key ID in plain-text in the created encrypted message?
Dec
10
comment How can I encrypt a file using `gpg` without including the recipient's key ID?
Thanks for your answer. I've edited the question to make it clear that I don't want any information about the recipient or the sender to leak. If an attacker found the encrypted message on a USB stick, they should not gain any information from it.
Dec
9
comment How can I encrypt a file using `gpg` without including the recipient's key ID?
How would the recipient distribute the public key to to the sender without making it known to the attacker? Public keys are meant to be publicly distributed.
Dec
8
comment Lessons learned and misconceptions regarding encryption and cryptology
PGP does not use the same key pair for signing and encryption. Rather, a PGP private key is composed of a main key, used for signing, and one or more subkeys, used for encryption. The subkeys are hidden from the user, hence the confusion, but you can view them using gpg --list-secret-keys.
Dec
8
comment Can all the (other) recepients of a PGP encrypted message be identified?
See also: security.stackexchange.com/q/25170/15712