Questions tagged [gnupg]

GNU Privacy Guard (GnuPG or GPG) is an open source implementation of PGP, a file encryption and signature tool widely used for emails

Filter by
Sorted by
Tagged with
0
votes
1answer
79 views

Secure and private connection to GnuPG keyservers

I wish to privately submit my public key (without it being sniffed on the internet). I found that I have 3 ways to connect to the keyserver securely: https://<keyserver-url> hkps://<...
6
votes
1answer
145 views

Superceding a passphrased key with a token-based key

I've been using a GPG key for awhile (mostly with the pass password manager but also some with mail). Since it's now in use, a few years old, and entering the passphrase is getting tiresome, I ...
0
votes
1answer
45 views

GnuPG - connecting to specific card reader when multiple reader available

Currently I can use $ gpg --expert --card-status to interact with smartcards that run the OpenPGP applet. Through trial-and-error, it seems that only the first card reader will interact with gpg. ...
3
votes
4answers
92 views

Is a SHA checksum enough to verify integrity and authenticity?

This is a broader question but here a concrete example: From apache.org: File hashes are used to check that a file has been downloaded correctly. They do not provide any guarantees as to the ...
6
votes
1answer
4k views

Which ECC to choose with GPG?

I want to generate a key pair with gpg2 2.1.11 and libgcrypt 1.6.5. I use the command gpg2 --expert --full-key-gen. This allows me to choose an ECC: Please select what kind of key you want: (1) ...
1
vote
2answers
287 views

How do i validate that a PGP Public Key the user inputs is valid?

we want to encrypt emails that we send to the user with his public key. this works great, however the user can also type in a broken/invalid public key ("asdf123") and then the encryption won't work ...
3
votes
2answers
41 views

What is the difference between the many identifiers in GnuPG?

GnuPG seems to have number of different ways to refer to a (sub)key(pair): Key IDs Fingerprints Keygrips Additionally, gpg --list-sigs seems to show hexadecimal identifiers for signatures and such ...
1
vote
1answer
41 views

Can I copy a PGP revocation to another server?

I have a few PGP keys from long ago that I no longer use. I thought I had revoked them everywhere I had uploaded them but I just noticed I missed one keyserver. Unfortunately, I only have access to ...
8
votes
4answers
39k views

gpg: decryption failed: No secret key

I cannot seem to get gnupg to decrypt files encrypted with my keys. I've tried migrating my secret key from an old laptop to a new one, and I keep getting the same error: gpg: decryption failed: No ...
0
votes
2answers
75 views

Encrypt backup files and send them to AWS S3

I have a backup routine via crontab on Ubuntu. This routine generates a compressed tar.gz file and sends it to AWS S3. But I want to encrypt these files and be able to decrypt them when necessary on ...
0
votes
1answer
49 views

Directly signing a file with gpg or instead its checksum file?

It is my understanding that when file is signed with gpg the signature will provide 2 guarantees, a proof of ownership of the signature and the integrity of the signed data. lets say I have a doc.txt ...
2
votes
1answer
471 views

PGP public key block Public-Key (old) - What does the OLD mean?

System: Linux Mint 19. Today I created a new GPG key pair using: gpg --full-generate-key I armor-exported the public key and have run: file *.public As a surprise I found my key or format or ...
10
votes
1answer
543 views

How to verify that Google's apt signing key change is not malicious?

I have an Ansible script that setup google chrome apt repo. I keep Google's signing key together with the scripts (rather than download it every time) because I think it minimizes the chance of ...
1
vote
1answer
696 views

Is it possible to decrypt a PGP encrypted file without private key?

I had been using my own PGP key (RSA/1024) for more than 15 years. That key is my identify on the Internet for a long time, and also be used for encrypting a huge data. Recently, my colleagues told ...
2
votes
1answer
3k views

openssl vs gpg for file based encryption? Pros vs cons for security?

I want to encrypt a tar archive and optionally a block file system (akin to DMG image). Does anyone know the pros vs cons of encrypting each with OpenSSL vs GPG? I ask because some have stated that ...
0
votes
0answers
22 views

`pass` not asking for password anymore - gnome-keyring or gpg-agent related? How can I force password asking?

I cross-posted this on the manjaro forums and on server fault. So far no answer, so trying here. I have gnome-keyring running for sure, not sure it's gnome-keyring or gpg-agent or ssh-agent related......
6
votes
2answers
702 views

NTRUEncrypt in SSL and GPG encryption

Commonly used cryptosystems like RSA or ECC, on the other hand, will be broken if and when quantum computers become available. - https://tbuktu.github.io/ntru/ How can we introduce NTRU in GPG and ...
0
votes
0answers
34 views

Can one use a gpg smartcard to implement FIDO2?

From what I understand, the idea of FIDO2 is to use symmetric cryptography, with secret key on the token, and public key on the server. When requesting to connect, the server uses the public key to ...
5
votes
2answers
770 views

How can I verify signed commits made by other people?

As identified in this related question, github signs commits made from their application with their GPG key 4AEE18F83AFDEB23. Online, I can see commits tagged as 'verified'. But when I attempt to ...
1
vote
1answer
60 views

How to verify a GPG file signature on Linux and Windows without connecting to the Internet?

Can you please hint me to the steps I need to verify a file's signature (without connecting to the Internet) on command line using GnuPG, when I have the required files ready: -installation file (eg ...
3
votes
1answer
120 views

gpg key size of 4096 and “the future is ECC”

My boss wants to sign our binary. I need to tell him how he can create the signing key. Most if not all sites I have seen about signing binaries say "use gpg". OK, so gpg per default has 2048. Their ...
0
votes
1answer
48 views

How long does it take for a gpg key revoke certificate to propagate to all public key servers?

I recently created a new gpg key just for the sake of learning the basics of public key encryption. Now, I'd like to revoke that test key so that I can go on using a more "permanent" key that is ...
2
votes
1answer
65 views

Fetching GPG private key from Linux server to decrypt files on a Win 10 computer in production

I have a need to fetch automatically the GPG private key from a Linux server to decrypt files on a Windows 10 computer in production. There are a few challenges here: How to assure SCP from the ...
8
votes
2answers
5k views

How to raise a key to ultimate trust on another machine?

I have created a master key with two subkeys: one for signing and the other for encryption. Finally, I have exported the two subkeys to a new machine. How can I tell the new machine to consider the ...
0
votes
1answer
66 views

Using GPG or PGP, is there a way to give another user (or key) access to decrypt a file for a limited time only? [duplicate]

I want to share encrypted files with someone else however it's only for a short time only. What is the best way to do this? More background: I'd like to add more people to be able to decrypt the ...
1
vote
0answers
24 views

Create signed release binaries and distribute with custom repository (debian)

I have been tasked to create a custom repository with signed binaries for download. Our CEO explicitly mentioned that he wants the binary signed by himself and his business parther. I set up a ...
1
vote
1answer
651 views

PGP encryption for the server based app

Here is context: I am using PGP to encrypt messages in a chat web app. After going through some articles, I get brief idea how PGP works and here is how I am doing it with openPGPJs : Client(web ...
1
vote
1answer
320 views

Methods to work with offline primary keys

I created a number of profiles with separate subkeys for authentication, signature, and encryption while primary keys are saved on USB Stick. It's working alright but I was wondering if there are some ...
0
votes
1answer
66 views

Compare fingerprints of gpg --verify for files download with / without TOR

From my understanding, except we meet the creator of an archive in person and verify the primary key fingerprint, we can never be sure, that the archive we download is really created by the person we ...
37
votes
4answers
36k views

GnuPG decryption not asking for passphrase

I've some stuff encrypted with GnuPG using gpg -e. When I decrypt them, the system does not ask for the passphrase, it decrypts it straight away. Does it store the secret key somewhere and uses it (I ...
0
votes
2answers
100 views

Novice questions: Generating multiple gpg private keys (for provenance)

I’m learning about key management, encryption and GPG for provenance (verifying authorship). Using DevDungeon’s GPG Tutorial I learned that to export your GnuPG private key to your local computer, you ...
2
votes
1answer
1k views

GPG based on-the-fly folder encryption

I am trying to find a good way to combine Owncloud with client-side encryption. Ideally, the requirements are: encryption relatively transparent (mostly text/.odt files) and cross-platform (Win, OS ...
0
votes
0answers
30 views

Whonix Image Download Bad Signature

Using gpgtools on MacOS, I have attempted multiple times to verify the signature of the Whonix image. I get: $ gpg --verify-options show-notations --verify Whonix-*.ova.asc Whonix-*.ova gpg: ...
1
vote
2answers
190 views

AES-256-GCM using GnuPG

Is there a way to encrypt files with AES 256 in the authenticated GCM mode using GPG? I don't see GCM in supported cipher modes. It seems that the GPG uses only one mode (its own modification of CFB)...
6
votes
1answer
125 views

Recover lost GPG public key

I sign my Git commits with a GPG key which I stored on an old computer. I lost this key so I created a new one to sign my commits with. It has not been compromised so I do not wish to revoke it. ...
0
votes
1answer
58 views

Using gpg to encrypt backups stored on remote untrusted servers

I need to encrypt daily backups, then upload them to untrusted cloud storage (s3, dropbox, etc.) I received help on security.se and crypto.se to formulate this approach: tar and xz the backup file ...
1
vote
1answer
57 views

Does a revocation certificate leak information about the private key?

Kleopatra/ GPG can create revocation certificates, which look a lot like public/private keys. Obviously, these keys should not be shared or used unless one intends to revoke their keys. But assume ...
2
votes
1answer
172 views

gpg - Cannot import public key from asc file

I'm using Windows 10 Home with GPG version 2.2.19. Whenever I try to import the asc file for Tor Browser using the command gpg --import torbrowser-install-win64-9.0.7_en-US.exe.asc, I get this fancy ...
2
votes
3answers
321 views

With GPG, can 3rd party verify that message has been encrypted by specific public key?

Bob is sending message X to Alice. He encrypts X with Alice's public key using gpg and sends her encrypted message (ciphertext). Later Alice claims that Bob made a mistake and the ciphertext was not ...
2
votes
1answer
107 views

Symmetric vs asymmetric encryption for backup files uploaded to cloud storage

I want to encrypt my server's backups and upload them to cloud storage (e.g. dropbox, google drive). I understand the basics with symmetric (single passphrase-secured key) and asymmetric (public/...
204
votes
15answers
79k views

Where do you store your personal private GPG key?

So, I want to start using pass, but I need a GPG key for this. This application will store all of my passwords, which means it's very important that I don't lose my private key, once generated. Hard ...
0
votes
1answer
40 views

Using unique per-session gpg keys to store backups on cloud storage

I'd like to encrypt my server's daily backups and send them to dropbox / google drive / etc., as a backup. I've read of various approaches. Assuming symmetric encryption (passphrase rather than ...
2
votes
3answers
2k views

RSA 4096 vs. ECC Curve 25519

I want to use GPG to encrypt files before storing them as backup in the cloud. I don't care about interoperability or performance/resource consumption during encryption/decription. I only care about ...
6
votes
2answers
2k views

How to use YubiKey through GnuPG on remote server?

I'm wondering if it is possible to use a Yubikey to unlock for example a GnuPG key on a server, so can I somehow pass the generated token from the YubiKey over SSH to the server in an easy way?
15
votes
2answers
9k views

Is it possible to export a GPG subkey's public component?

I'm trying to export the public component of my subkey, but all GPG will give me is the public component of my master key. The keyring is set up like this. $ gpg -K /home/alex/.gnupg/secring.gpg -----...
2
votes
1answer
91 views

Is it possible for me to somehow verify that the PGP message blob I just generated contains what I intended for it to contain?

I have this text: Would you mind stopping by the local store and buy some baking soda for tomorrow, Betty-Sue? Betty-Sue has given me her public PGP key, which I have imported and now use to encrypt ...
2
votes
0answers
281 views

GPG keys and subkeys export: What is exported, and how?

I am trying to wrap my head around gpg. My current understanding is that one generates a master key, and then a number of sub-keys that are cross-signed against the master key. This establishes that ...
1
vote
0answers
111 views

Benefit of using OpenSSH FIDO/U2F support over GPG mode?

OpenSSH version 8.2 introduced support for FIDO/U2F hardware authenticators, via the new public key types "ecdsa-sk" and "ed25519-sk". I currently have SSH authentication set up in combination with ...
1
vote
0answers
53 views

GPG - exported secret key with public too

I tried to export public key from my keyring. Then I imported my public key in another keyring. I find the private key too in the 2nd keyring and I can sign files from the 2nd keyring. Why is this ...
0
votes
0answers
67 views

Hardening GnuPG against brute force attacks

I am currently working on a python program that utilizes GnuPG (with symmetric encryption) to store data on the client: User supplies password, gpg file is decrypted, data is loaded, etc. Say an ...

1
2 3 4 5
13