GNU Privacy Guard (GnuPG or GPG) is an open source implementation of PGP, a file encryption and signature tool widely used for emails
0
votes
0answers
17 views
how to verify file signature by client PGP
Currently working on verifying and signing a file via GNUPG, given that I've already signed a file, given the clients the .sig and public key, is there a way for a client to verify the file without ...
-1
votes
0answers
17 views
File Encrypted using Kleopetra, started showing error while decrypting? [migrated]
I encrypted one of my text files with Kleopatra, which I have been using for 4 months. It was working fine, but since two weeks I'm getting an error when decrypting the file:
Can not connect to GnuPG ...
0
votes
2answers
25 views
How can I verify the GPG signature is valid?
I'm trying to figure out if there is a way to be 100% sure that a GPG signature is valid. I'm not entirely sure how it all works, or the correct terminology, so forgive any lack of understanding.
I ...
1
vote
1answer
116 views
How does gpg know that a passphrase is bad in symmetric encryption?
Following from, What information is leaked from an OpenPGP encrypted file?, which was very helpful, I'd like to ask a similar question regarding symmetric encryption.
For example, in a file encrypted ...
0
votes
1answer
21 views
One user ID of a trusted key has unknown trust
I observed today that Thunderbird/Enigmail (24.2.0/1.6) does not allow me to select a key for encrypting mails to one of the addresses associated with the key, even though others work. Help sites ...
0
votes
2answers
129 views
gpg --encrypt fails
When trying to encrypt files, I get the following error in KGpg editor window:
The encryption failed with error code 2
On the command line I get:
$ gpg --list-keys
/home/user/.gnupg/pubring.gpg
...
1
vote
0answers
19 views
enigmail: automatic display of photo id
Is there a possibility if a signed message is displayed and the key of the signer contains a photo id that this picture is displayed in thunderbird directly?
Now it is only possible with "details", ...
0
votes
2answers
64 views
Sending messages using OTR & and GPG — is it detectable?
If I send messages using OTR & GPG, will my ISP or some surveillance agencies know that I'm using them? "Look, he's sending an encrypted message. He must have some important secret. Let's go ...
3
votes
1answer
66 views
How do I sign another person's key and make the signature expire?
I'm using gnupg and I've just seen that people can sign keys with an expiration attached.
The expiration of individual signatures can be seen in gpg --list-sigs <KEY> when setting this in your ...
6
votes
1answer
147 views
Which signing key should I use for certifying other peoples public keys: master or subkey?
I have a Master Identity key (which is detached from my daily-use keyring) and both encryption and signing subkeys (all are RSA).
I sign documents with the signing subkey: GnuPG selects this key ...
-1
votes
1answer
96 views
Would PGP/GPG have been a better choice than SSL for browsers and http servers to encrypt traffic? [closed]
I was curious recently when I heard that SSL had supposedly been broken by a certain rogue government agency, why SSL was chosen in the first place. Could it be that PGP would have been a more secure ...
5
votes
3answers
262 views
SmartCard + GnuPG: what is stored in my keyring?
I recently bought a Yubikey Neo which can act as a OpenPGP smart card. I'd like to use this to store my private GnuPG key. I've gone through the initial setup and I am able to use the smartcard to ...
5
votes
3answers
812 views
Is it possible to use a GPG or SSH key for web based authentication in a secure fashion?
Let's say hypothetically I am writing a web application targeting technically inclined, security-conscious users who have no problems generating and using GPG or SSH keys.
Is it possible to use said ...
6
votes
1answer
682 views
PGP - Why have separate encryption subkey
This is how my key is set up:
pub 4096R/AAAAAAAA created: 2012-11-14 expires: 2013-11-14 usage: SC
trust: ultimate validity: ultimate
sub 4096R/BBBBBBBB created: ...
1
vote
1answer
125 views
GnuPG inner workings (encryption scheme, mode of operation, ciphers)
I have some questions concerning how GnuPG operates when encrypting and signing messages.
By default:
Which cipher and mode-of-operation is used for symmetric encryption?
What encryption scheme is ...
3
votes
1answer
1k views
PGP RSA key size - encryption/decryption time
From what I've read, PGP only uses the pub/priv keys for encrypting/decrypting a symmetric key used for actually encrypting/decrypting data. I'd reasonably assume that longer asymmetric keys wouldn't ...
11
votes
2answers
323 views
Is PGP secure against a rogue keyserver?
Imagine Eve taking over the keyserver both Alica and Bob are using.
By replacing Alices and Bobs public keys with her own, she can do a man-in-the-middle attack decrypting messages and relaying them ...
0
votes
2answers
117 views
pgp decryption on public pc
When I want to decrypt mails on a public PC (café), encrypted with GPG, in e.g. gmail with the extension "Mailvelope" or equal - how would that be possible?
I found tools to run from an USB stick ...
3
votes
1answer
317 views
GnuPG/KGpg Sign PGP Key - Sign User ID : What is the difference?
What is the difference between signing a user ID and a whole Key ?
Which behavior is the best as to signing user IDs and Keys ? How and when to use "Local signatures" (non exportable) ?
(I was told ...
1
vote
1answer
138 views
I copied my .gnupg folder from Mac OS X, and now Seahorse lets me sign my own key. Is this normal?
I have a dual-boot setup with Mac OS X Mountain Lion and Debian GNU/Linux Sid (fully up-to-date).
I installed gpg in OS X by executing brew install gpg. I then generated a keypair for myself to use.
...
3
votes
1answer
163 views
Speed of key generation - Is old hardware safer?
I'm currently generating a new gpg cryptographic key, and I'm using a new laptop for this. I can notice that the key generation step, which involves the random generation, is extremely quick, while I ...
1
vote
1answer
134 views
How can I encrypt a textfile with gnupg? [closed]
It is easy to decrypt an encrypted textfile with:
gpg --decrypt /tmp/message
But how can I encrypt my own textfile?
2
votes
1answer
174 views
GnuPG/OpenPGP in the corporate world
Is GnuPG/OpenPGP a good solution to protect internal company email communication?
With PRISM and previous major company hacking news stories, I'm looking for a solid way to protect company ...
9
votes
3answers
572 views
API message verification without storing private key?
I'm in the process of implementing a public API for my web service. Security is a key concern as money is involved.
It seems the current common practice for "authenticating" users in API requests is ...
9
votes
2answers
463 views
Is it okay to sign a PGP key without an IRL meeting?
[PGP] can get paralyzed by excessive analness.
— Phil Zimmermann
Preamble
I am in the process of building my own web of trust. That is, I want people (PGP users…) to be—fairly—sure that, by ...
1
vote
2answers
275 views
Secret key is a prime number in GnuPG
I hope that this question is not off topic here.
When I use GnuPG I can get a secret key saved as a file. Opening this file in a text editor I see that the key is encoded with base64. How do I find ...
7
votes
3answers
617 views
Anything to do about old gpg keys?
Quite A few years ago (in middle school) I created some gpg keys, published them to a keyserver, etc. because I was l33test kid on the block. Now I have gone through a few new computers and OS's, ...
4
votes
3answers
440 views
Are private keys generated by different software packages compatible?
I know that GnuPG follows the OpenPGP standard, but if I generate a public/private key pair using GnuPG and upload the public key to a key server, i.e. the one at MIT, or use it to sign files, ...
1
vote
1answer
373 views
How to change (sub)key usage of a PGP key?
gpg2 generates keys with one or several of the (S)igning, (E)ncryption, (C)ertification usages set. However, e.g. Enigmail creates a primary key also set for (A)uthentication, which GnuPG then shows. ...
5
votes
2answers
2k views
How to use a Yubikey NEO (or any OpenPGP card or GnuPG in general) to sign X.509 CSRs?
Since the Yubikey NEO can be used as an OpenPGP card (see here) with three 2048 bit RSA keys, I thought about creating a CA from one of its public keys. Since the private key cannot be extracted ...
