I understand the functions of PGP key-pairs as:
- Public key is used to encrypt files so only the private key holder can read them
- Private key is used to decrypt files that were encrypted using the associated public key
- Private key is used to sign files so that it can be verified the file could have only come from the private key holder
- Public key is used to verify a file signed with the associated public key
That makes sense to me. In all those cases the private key is unique to only a single entity and the public key can be used by anyone.
This comes into question because in Kleopatra, the File menu options are organized with the following:
- Decrypt/verify files...
- Sign/encrypt files...
This confuses me because based on my understanding of the 4 functions above, the two options would be organized with the private key functions together (decrypt/sign) and vice versa for pub key (encrypt/verify).
Am I misunderstanding the relationship between signing/verifying and the parts of the key-pair, or do I just have different intuition about U/I than Kleopatra's designers?