I have a public and secret key pair in my .ssh folder. How is the secret key being stored on disk? What I mean is .. Is it possible for someone to hack into my computer, steal the secret key and use it to decrypt all my messages which were encrypted with my public key?
Secondly, gpg requires a password to make use of the secret key. Does it not mean that someone can brute force the password and use the secret key anyways? After all, passwords are never as secure as secret keys ..
Or does the computer do some magic behind the scenes so that brute forcing the password that protects the secret key is simply impossible?