GNU Privacy Guard (GnuPG or GPG) is an open source implementation of PGP, a file encryption and signature tool widely used for emails
0
votes
0answers
16 views
enigmail: automatic display of photo id
Is there a possibility if a signed message is displayed and the key of the signer contains a photo id that this picture is displayed in thunderbird directly?
Now it is only possible with "details", ...
0
votes
2answers
56 views
Sending messages using OTR & and GPG — is it detectable?
If I send messages using OTR & GPG, will my ISP or some surveillance agencies know that I'm using them? "Look, he's sending an encrypted message. He must have some important secret. Let's go ...
3
votes
1answer
63 views
How do I sign another person's key and make the signature expire?
I'm using gnupg and I've just seen that people can sign keys with an expiration attached.
The expiration of individual signatures can be seen in gpg --list-sigs <KEY> when setting this in your ...
6
votes
1answer
128 views
Which signing key should I use for certifying other peoples public keys: master or subkey?
I have a Master Identity key (which is detached from my daily-use keyring) and both encryption and signing subkeys (all are RSA).
I sign documents with the signing subkey: GnuPG selects this key ...
-2
votes
1answer
82 views
Would PGP/GPG have been a better choice than SSL for browsers and http servers to encrypt traffic? [closed]
I was curious recently when I heard that SSL had supposedly been broken by a certain rogue government agency, why SSL was chosen in the first place. Could it be that PGP would have been a more secure ...
4
votes
3answers
202 views
SmartCard + GnuPG: what is stored in my keyring?
I recently bought a Yubikey Neo which can act as a OpenPGP smart card. I'd like to use this to store my private GnuPG key. I've gone through the initial setup and I am able to use the smartcard to ...
5
votes
3answers
625 views
Is it possible to use a GPG or SSH key for web based authentication in a secure fashion?
Let's say hypothetically I am writing a web application targeting technically inclined, security-conscious users who have no problems generating and using GPG or SSH keys.
Is it possible to use said ...
6
votes
1answer
429 views
PGP - Why have separate encryption subkey
This is how my key is set up:
pub 4096R/AAAAAAAA created: 2012-11-14 expires: 2013-11-14 usage: SC
trust: ultimate validity: ultimate
sub 4096R/BBBBBBBB created: ...
1
vote
1answer
102 views
GnuPG inner workings (encryption scheme, mode of operation, ciphers)
I have some questions concerning how GnuPG operates when encrypting and signing messages.
By default:
Which cipher and mode-of-operation is used for symmetric encryption?
What encryption scheme is ...
3
votes
1answer
1k views
PGP RSA key size - encryption/decryption time
From what I've read, PGP only uses the pub/priv keys for encrypting/decrypting a symmetric key used for actually encrypting/decrypting data. I'd reasonably assume that longer asymmetric keys wouldn't ...
11
votes
2answers
286 views
Is PGP secure against a rogue keyserver?
Imagine Eve taking over the keyserver both Alica and Bob are using.
By replacing Alices and Bobs public keys with her own, she can do a man-in-the-middle attack decrypting messages and relaying them ...
0
votes
2answers
116 views
pgp decryption on public pc
When I want to decrypt mails on a public PC (café), encrypted with GPG, in e.g. gmail with the extension "Mailvelope" or equal - how would that be possible?
I found tools to run from an USB stick ...
2
votes
1answer
287 views
GnuPG/KGpg Sign PGP Key - Sign User ID : What is the difference?
What is the difference between signing a user ID and a whole Key ?
Which behavior is the best as to signing user IDs and Keys ? How and when to use "Local signatures" (non exportable) ?
(I was told ...
1
vote
1answer
127 views
I copied my .gnupg folder from Mac OS X, and now Seahorse lets me sign my own key. Is this normal?
I have a dual-boot setup with Mac OS X Mountain Lion and Debian GNU/Linux Sid (fully up-to-date).
I installed gpg in OS X by executing brew install gpg. I then generated a keypair for myself to use.
...
3
votes
1answer
157 views
Speed of key generation - Is old hardware safer?
I'm currently generating a new gpg cryptographic key, and I'm using a new laptop for this. I can notice that the key generation step, which involves the random generation, is extremely quick, while I ...
1
vote
1answer
130 views
How can I encrypt a textfile with gnupg? [closed]
It is easy to decrypt an encrypted textfile with:
gpg --decrypt /tmp/message
But how can I encrypt my own textfile?
2
votes
1answer
167 views
GnuPG/OpenPGP in the corporate world
Is GnuPG/OpenPGP a good solution to protect internal company email communication?
With PRISM and previous major company hacking news stories, I'm looking for a solid way to protect company ...
8
votes
3answers
465 views
API message verification without storing private key?
I'm in the process of implementing a public API for my web service. Security is a key concern as money is involved.
It seems the current common practice for "authenticating" users in API requests is ...
9
votes
2answers
432 views
Is it okay to sign a PGP key without an IRL meeting?
[PGP] can get paralyzed by excessive analness.
— Phil Zimmermann
Preamble
I am in the process of building my own web of trust. That is, I want people (PGP users…) to be—fairly—sure that, by ...
0
votes
2answers
262 views
Secret key is a prime number in GnuPG
I hope that this question is not off topic here.
When I use GnuPG I can get a secret key saved as a file. Opening this file in a text editor I see that the key is encoded with base64. How do I find ...
7
votes
3answers
417 views
Anything to do about old gpg keys?
Quite A few years ago (in middle school) I created some gpg keys, published them to a keyserver, etc. because I was l33test kid on the block. Now I have gone through a few new computers and OS's, ...
3
votes
3answers
317 views
Are private keys generated by different software packages compatible?
I know that GnuPG follows the OpenPGP standard, but if I generate a public/private key pair using GnuPG and upload the public key to a key server, i.e. the one at MIT, or use it to sign files, ...
1
vote
1answer
337 views
How to change (sub)key usage of a PGP key?
gpg2 generates keys with one or several of the (S)igning, (E)ncryption, (C)ertification usages set. However, e.g. Enigmail creates a primary key also set for (A)uthentication, which GnuPG then shows. ...
5
votes
2answers
2k views
How to use a Yubikey NEO (or any OpenPGP card or GnuPG in general) to sign X.509 CSRs?
Since the Yubikey NEO can be used as an OpenPGP card (see here) with three 2048 bit RSA keys, I thought about creating a CA from one of its public keys. Since the private key cannot be extracted ...
