I am a novice user of OpenPGP. I use GPGTools for OS X. I have several connected questions, but difficult to find direct answers on the Internet.
- When I create a key-pair, the password I enter is a passphrase that encrypts my private key only on my machine, and it is NOT a passphrase that is needed to decrypt encoded messages, correct?
- If the above statement is correct, does it mean that the password I use to decrypt a message is actually just the passphrase that unlocks my private key: therefore if I loose my private key (let us say, drop my computer in the Pacific), so even if I reveal my passcode, nothing can be done since it is used only to unlock a specific file?
- The brute-force technique breaks an OpenPGP encrypted text only via the private key (which is usually very long); consequently the brute-force technique used to break the private PGP key is done via the passphrase (known to the owner of the key) when the key was created for 'storage purpose'. Is that correct?
Sorry for the numerous questions, but I believe these represents one question for which answering I couldn't find anywhere.