Questions tagged [gnupg]
GNU Privacy Guard (GnuPG or GPG) is an open source implementation of PGP, a file encryption and signature tool widely used for emails
1
vote
0answers
8 views
Does the output of --export-ssh-key change with different subkeys?
I use gpg --export-ssh-key to generate a public RSA key I can add to my authorized_keys file for the purposes of accessing my server via SSH. I have two Yubikeys (Yubikey 5 NFC) with the same subkeys ...
0
votes
3answers
62 views
With GPG, can 3rd party verify that message has been encrypted by specific public key?
Bob is sending message X to Alice. He encrypts X with Alice's public key using gpg and sends her encrypted message (ciphertext).
Later Alice claims that Bob made a mistake and the ciphertext was not ...
1
vote
1answer
49 views
Why can GPG sign messages but not keys?
I am trying to add local signatures to a few of the public keys I have in my keyring, but using gpg --lsign-key fails with the message "no secret key" despite the fact that gpg --sign works. I am ...
1
vote
1answer
58 views
How to verify file Integrity?
I have downloaded a software(zipped), from a website: example-linux.gtk.x86_64.zip
There is another file given for verification, example-linux.gtk.x86_64.zip.asc, whose content are
-----BEGIN PGP ...
0
votes
1answer
37 views
Downloads and GPG singnatures
I've recently installed Kleopatra in order to use GPG for confirming the validity of downloads. I've downloaded the following (32-bit verison):
https://www.claws-mail.org/win32/
I also downloaded the ...
1
vote
1answer
59 views
Are there any known collisions of a “long” (64 bit) OpenPGP key ID?
We know that the "short" 32 bit OpenPGP key IDs can be easily brute-forced and the recommendation is to use the "long" 64 bit IDs or full 160 bit SHA1 fingerprint. However I am concerned that the "...
1
vote
1answer
30 views
Are there risks to having many uids on my gpg key?
I'm fairly new to the world of pgp/gpg, I came to it first through Keybase and then the gpg client and now I think I'm in a place where I'm quite happy with my key setup. I've just started a new job ...
1
vote
0answers
59 views
Help me understand Encryptpad and 7-zip for encryption
I was looking to encrypt some text files (containing sensitive data) so I could safely keep them online (e.g. Google drive).
I have found three options:
7-zip, which does AES-256
Encryptpad, which ...
0
votes
0answers
24 views
Which encryption and hash is best to use in GNUPG2?
Okay, I know this has been asked before (but it changes over time)... and I know there perhaps are no good answers... but here goes...
I want to create a new key-set for myself using gnupg2, but I ...
1
vote
1answer
42 views
Making a offline GNUPG2-key - should I make Master-key S&E or S only?
I want to make an offline-key in GNUPG2 - ie. a "Master-key" to which I'll add one or more sub-keys for daily use, before storing the whole thing on an USB. I will then remove the secret part of the ...
1
vote
1answer
13 views
Listing available hashes in GNUPG2?
I want to use the setpref command (under --edit-key ) to set a key's prefered hash-algorithms in gnupg2, and was wondering if there is a way to list which hashes my version of gpg supports?
0
votes
2answers
103 views
Openssl / OpenPGP file encryption - security advise [duplicate]
I am planning to use Openssl to encrypt our weekly offsite backups using a keyfile (symmetrical encryption) and after some research I found the following GnuPGP command:
base64 -w0 <keyfile.jpg | ...
1
vote
0answers
36 views
Response to a gpg fingerprint collision [duplicate]
I recently updated my gpg key and extended its expiration date for another year. Unlike prior years, I decided to 'look myself up' on http://keys.gnupg.net, and was shocked to find my name and email ...
1
vote
1answer
90 views
openssl vs gpg for file based encryption? Pros vs cons for security?
I want to encrypt a tar archive and optionally a block file system (akin to DMG image). Does anyone know the pros vs cons of encrypting each with OpenSSL vs GPG?
I ask because some have stated that ...
1
vote
2answers
37 views
What does the 'Sign' and "Add to recipients' means in GPG keychain?
Hello everyone,
I just newly get to know the existence of GPG keychain. After error and try I now understand most of the functions of this software . However the two checkbox in this picture remains ...
1
vote
0answers
16 views
Does gpg-agent cache passphrases per symmetrically encrypted file?
I have used the following command to symmetrically encrypt different files, all with the same passphrase:
$ gpg -c --s2k-cipher-algo AES256 --s2k-digest-algo SHA512 --s2k-count 65536 some_file.txt
...
1
vote
0answers
108 views
GnuPG “public key decryption failed: Invalid ID” using Yubikey Smartcard
I'm trying to decrypt a file that was signed with my ssb key stored on my Yubikey, but I get the following errors:
x>gpg -vv --decrypt encrypted.gpg
gpg: armor: BEGIN PGP MESSAGE
# off=0 ctb=XX ...
2
votes
0answers
48 views
GPG: how to encrypt using a keyfile? (symmetric)
In Ubuntu this produces a "filename.txt.gpg" file and works:
$ gpg --symmetric --passphrase-file keyfile.key filename.txt
In debian, I get a popup requesting I enter a password...
How do I encrypt ...
1
vote
0answers
65 views
PGP public key block Public-Key (old) - What does the OLD mean?
System: Linux Mint 19.
Today I created a new GPG key pair using:
gpg --full-generate-key
I armor-exported the public key and have run:
file *.public
As a surprise I found my key or format or ...
0
votes
0answers
20 views
Is it possible to not specify user id in gpg command and only specify public key? [duplicate]
Here is the code.
if exist !SourcePath!\!SourceFilename! (
for %%z in (!SourcePath!\!SourceFilename!) do (
gpg -e -r esbdev@set.or.th --yes --always-trust %%z
)
SET ...
2
votes
0answers
16 views
GPG self-signature default check level
I think I understand the concept of self-signature in GPG from reading the answer to this question. However it is not yet clear to me how check levels are assigned.
When issuing gpg --check-sigs one ...
1
vote
0answers
25 views
Generating new E and S subkeys for a key that has been moved to card
I accidentally messed up months ago by keytocard'ing a seret key before making an offline locked-away backup of it. I failed at reading comprehension and did not know that this would delete the key ...
1
vote
1answer
73 views
GPG: Is 'pubring.kbx' safe to share?
This public keyring pubring.kbx (as I merely guess from the name) must be safe to share publicly or is it not? Does it contain any sensitive information with respect to private keys?
I want to back ...
1
vote
1answer
38 views
Is the tomb's keyfile necessary when creating a password tomb with tomb-pass?
Pass tomb's documentation states
Usage:
pass tomb [-n] [-t time] [-f] [-p subfolder] gpg-id...
Create and initialise a new password tomb
Use gpg-id for encryption of both tomb and passwords
...
2
votes
1answer
68 views
What happens to a pass vault when the GPG key expires?
Say I were to use the Linux tool pass as my password manager and the corresponding GPG key were to expire. Would I still be able to get in?
3
votes
1answer
68 views
gnupg keys and pass database - Protecting both from unauthorised access and loss
My target is to use pass to store a lot of passwords and be able to access those passwords from wherever I need them, possibly using just a single pass-thing (password, passphrase, my voice, my ...
4
votes
2answers
90 views
Is it safe to store GPG encrypted data publicly eg on GitHub?
I've been learning some basics of information security and GPG encryption and it's super intriguing. I wanted to understand vulnerabilities behind an idea that I had.
After we create our public and ...
2
votes
1answer
45 views
Securely Download lubuntu from Non-Ubuntu System
The recommended way to find out which public key you need to verify the Ubuntu hashes is to attempt to check a signature of the hash file (both of which were downloaded in the clear). This produces an ...
2
votes
1answer
47 views
How can I verify signed commits made by other people?
As identified in this related question, github signs commits made from their application with their GPG key 4AEE18F83AFDEB23. Online, I can see commits tagged as 'verified'. But when I attempt to ...
2
votes
1answer
45 views
Is the range of the s2k-count parameter in GPG still adequate?
From the manual: the s2k-count parameter specifies how many times the passphrase mangling for symmetric encryption is repeated. This value may range between 1024 and 65011712 inclusive.
Apparently in ...
2
votes
1answer
221 views
Export GPG key from smartcard and import yubikey
I have the OPEN PGP SMARTCARD V2.1 and there I have a signature key, a encryption key and a authentication key stored. The last 8 digits of the signature key is for example: 1234 5678.
Now I want to ...
2
votes
1answer
204 views
How to decrypt a gpg file?
I have a gpg file and a sha256 file. When I try to decrypt the gpg file using the gpg - d file.gpg command, it says that there is no secret key. I am absolutely new to this so I would appreciate any ...
3
votes
1answer
68 views
Is it reasonable to store encrypted TOTP keys + authentication credentials on a single device (for end-user)?
My current security model (at least for passwords) is to store them encrypted at rest and use GPG (in combination with an Yubikey) to perform encryption / decryption. I'm using pass (https://www....
2
votes
0answers
55 views
GPG - Use case for embedded system
I'm looking to add encryption to an embedded data logger and I'd really appreciate some advice to make sure that my approach is reasonable/secure.
The user will load a GPG public key onto the device. ...
1
vote
0answers
29 views
Primary uid of Key is not changeable
Recently I had to revoke one of my UIDs and add a new one in my main GPG Key. As I expected the new UID became primary and I tried to change it back to the original one (it's not the revoked one). ...
2
votes
1answer
47 views
Wrong pgp key was signed
Someone signed my PGP key, by accident (we have never met, but I know the person a little).
The wrong signature was uploaded to the SKS pool.
Is there anything we can do about it to improve the web ...
1
vote
2answers
90 views
GPG secret key and passphrase
I generated a public/secret key pair with GnuPG. I know that the secret key must keep secret. However, I am wondering what are the risk to expose the secret key without the passphrase?
If Eve steals ...
1
vote
0answers
69 views
What is the solution to digitally sign email apart from S/MIME and GPG/OpenPGP [closed]
I have tried to implement S/MIME, however, I've found out that S/MIME seems to be obsolete, in my perspective. Since S/MIME cannot operate on Google Chrome or Edge.
Another solution I found is ...
2
votes
2answers
230 views
Is it a good idea to upload your gnupg files to github?
I have a GNUPG file that i use to store all my passwords locally(Dont know if it is a good idea). The question is, is it safe to push the GNUPG file to github so i can access it from anywhere?
2
votes
0answers
68 views
yubikey creating different ssh public key having same GPG
I have 2 yubikeys and both are having the same GPG master key besides 3 subkeys for encrypting, signing and authentication, I can encrypt/decrypt and everything regarding gpg seems to be working fine, ...
0
votes
1answer
121 views
gpg --armor --export-secret-key differ on last 4 characters
I created a backup of a gpg key by doing:
gpg -a --export-secret-keys foo@bar > private.key
gpg -a --export foo@bar > public.key
Then on another system, I import them:
gpg --import private....
0
votes
0answers
64 views
Compatibility advantages of RSA-4096 over RSA-3072
I am targeting a security level of 128 bits for GnuPG, so I am using SHA-256 and AES-128. Now I need to choose between RSA-3072 and RSA-4096.
According to multiple sources RSA-3072 security level is ...
1
vote
1answer
35 views
GnuPG sub-keys revocation
My current GnuPG key schema is the one recommended in OpenPGP Best Practices and many other sources. It consists in one offline master key plus a set of sub-keys for day-to-day operations stored ...
4
votes
1answer
203 views
Why do so many PGP public keys begin with mQINBF?
Why do so many PGP public keys begin with mQINBF? I am just curious.
1
vote
2answers
83 views
key usage for offline gnupg master key
I've been reading some articles about using an offline master key for gnupg, and I'm confused about the key usage. It seems every article has a different opinion about it. I've seen the following ...
2
votes
1answer
70 views
Why do people check the passport on key signing events?
I find the common procedure of key signing parties a little awkward:
Person A presents the passport and a fingerprint "This is my key!". Person B checks the passports and decides a level of trust to ...
1
vote
1answer
36 views
How to find default S2K parameters in GPG
How can I find the default string-to-key parameters in GPG? I am using it in Tails.
1
vote
1answer
72 views
problem after upgrading from GnuPG 1.4 to GnuPG 2.1
My Debian box decided to upgrade from "gnupg 1.4" to "gnupg 2.1" after some kind of security update.
After this, I am no longer able to use or access any of my keys.
After any gpg command, it says:
...
0
votes
0answers
28 views
Backing Up Server - Subkey or New Key for Encryption?
I am backing up a series of VPSes I own using duplicity. Since I will be storing this in a storage system like AWS I'd like to encrypt them.
I already have a GPG key I use that is registered in ...
1
vote
1answer
52 views
How can I find the default KDF for my version of GPG?
I am trying to find the default KDF for my version of gpg:
gpg (GnuPG) 2.2.6
libgcrypt 1.8.2
Does anyone know how?
