2

I have a key pair stored in GPG Keyring. If I export it to an ASCII Armored format, am I removing any layers of security as long as the exported key stays on the same server as the key ring itself? My private key is still secured by a passphrase even after export.

For someone who breaks into my server is it equally easy to crack my exported key as the Keyring?

Improve this question
2
  • They are both just files on disk, so any difference in how the two files are protected is left to the OS.
    – Jeff-Inventor ChromeOS
    Commented Aug 12, 2014 at 22:33
  • 4
    This question appears to be off-topic because it is about tools that happens to be using cryptography, not about the underlying cryptography itself. Since it is about the security properties of these tools, it would be best on Information Security.
    – Gilles 'SO- stop being evil'
    Commented Aug 16, 2014 at 21:49

1 Answer 1

Reset to default
3

If the same access rules are used, and if you don't have to input your passphrase then by definition it is as safe as when it was in the key ring.

If you do have to insert your passphrase then the key may be decrypted and then encrypted back again. In that case you've got two possible security issues:

  • the key bits have been exposed after they have been decrypted with the password (which means that they may have been left in some kind of storage such as RAM or cache);
  • the key may be encrypted with a different, less secure algorithm.

Finally, you should also be sure that the file hasn't changed meaning, e.g. if it is copied as another key you may be fooled into typing the password for it.

Improve this answer
0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .