Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [gnupg]

GNU Privacy Guard (GnuPG or GPG) is an open source implementation of PGP, a file encryption and signature tool widely used for emails

3
votes
1answer
43 views

Can I use 3 same subkeys to 2 different GPG Smartcards?

Generated keys on an air-gapped PC. Backed-up my .gpg folder on a USB. Imported keys to smartcard 1. Keys deleted Replaced .pgp folder with .pgp from USB Imported keys to smartcard 2. Is this setup ...
2
votes
0answers
45 views

Does the output of --export-ssh-key change with different subkeys?

I use gpg --export-ssh-key to generate a public RSA key I can add to my authorized_keys file for the purposes of accessing my server via SSH. I have two Yubikeys (Yubikey 5 NFC) with the same subkeys ...
2
votes
3answers
128 views

With GPG, can 3rd party verify that message has been encrypted by specific public key?

Bob is sending message X to Alice. He encrypts X with Alice's public key using gpg and sends her encrypted message (ciphertext). Later Alice claims that Bob made a mistake and the ciphertext was not ...
1
vote
1answer
154 views

Why can GPG sign messages but not keys?

I am trying to add local signatures to a few of the public keys I have in my keyring, but using gpg --lsign-key fails with the message "no secret key" despite the fact that gpg --sign works. I am ...
2
votes
1answer
174 views

How to verify file Integrity?

I have downloaded a software(zipped), from a website: example-linux.gtk.x86_64.zip There is another file given for verification, example-linux.gtk.x86_64.zip.asc, whose content are -----BEGIN PGP ...
0
votes
1answer
45 views

Downloads and GPG singnatures [duplicate]

I've recently installed Kleopatra in order to use GPG for confirming the validity of downloads. I've downloaded the following (32-bit verison): https://www.claws-mail.org/win32/ I also downloaded the ...
3
votes
1answer
113 views

Are there any known collisions of a “long” (64 bit) OpenPGP key ID?

We know that the "short" 32 bit OpenPGP key IDs can be easily brute-forced and the recommendation is to use the "long" 64 bit IDs or full 160 bit SHA1 fingerprint. However I am concerned that the "...
2
votes
1answer
53 views

Are there risks to having many uids on my gpg key?

I'm fairly new to the world of pgp/gpg, I came to it first through Keybase and then the gpg client and now I think I'm in a place where I'm quite happy with my key setup. I've just started a new job ...
1
vote
0answers
85 views

Help me understand Encryptpad and 7-zip for encryption

I was looking to encrypt some text files (containing sensitive data) so I could safely keep them online (e.g. Google drive). I have found three options: 7-zip, which does AES-256 Encryptpad, which ...
0
votes
0answers
37 views

Which encryption and hash is best to use in GNUPG2?

Okay, I know this has been asked before (but it changes over time)... and I know there perhaps are no good answers... but here goes... I want to create a new key-set for myself using gnupg2, but I ...
1
vote
1answer
56 views

Making a offline GNUPG2-key - should I make Master-key S&E or S only?

I want to make an offline-key in GNUPG2 - ie. a "Master-key" to which I'll add one or more sub-keys for daily use, before storing the whole thing on an USB. I will then remove the secret part of the ...
1
vote
1answer
16 views

Listing available hashes in GNUPG2?

I want to use the setpref command (under --edit-key ) to set a key's prefered hash-algorithms in gnupg2, and was wondering if there is a way to list which hashes my version of gpg supports?
0
votes
2answers
256 views

Openssl / OpenPGP file encryption - security advise [duplicate]

I am planning to use Openssl to encrypt our weekly offsite backups using a keyfile (symmetrical encryption) and after some research I found the following GnuPGP command: base64 -w0 <keyfile.jpg | ...
1
vote
0answers
41 views

Response to a gpg fingerprint collision [duplicate]

I recently updated my gpg key and extended its expiration date for another year. Unlike prior years, I decided to 'look myself up' on http://keys.gnupg.net, and was shocked to find my name and email ...
1
vote
1answer
1k views

openssl vs gpg for file based encryption? Pros vs cons for security?

I want to encrypt a tar archive and optionally a block file system (akin to DMG image). Does anyone know the pros vs cons of encrypting each with OpenSSL vs GPG? I ask because some have stated that ...
1
vote
2answers
136 views

What does the 'Sign' and "Add to recipients' means in GPG keychain?

Hello everyone, I just newly get to know the existence of GPG keychain. After error and try I now understand most of the functions of this software . However the two checkbox in this picture remains ...
1
vote
0answers
59 views

Does gpg-agent cache passphrases per symmetrically encrypted file?

I have used the following command to symmetrically encrypt different files, all with the same passphrase: $ gpg -c --s2k-cipher-algo AES256 --s2k-digest-algo SHA512 --s2k-count 65536 some_file.txt ...
1
vote
0answers
550 views

GnuPG “public key decryption failed: Invalid ID” using Yubikey Smartcard

I'm trying to decrypt a file that was signed with my ssb key stored on my Yubikey, but I get the following errors: x>gpg -vv --decrypt encrypted.gpg gpg: armor: BEGIN PGP MESSAGE # off=0 ctb=XX ...
2
votes
0answers
187 views

GPG: how to encrypt using a keyfile? (symmetric)

In Ubuntu this produces a "filename.txt.gpg" file and works: $ gpg --symmetric --passphrase-file keyfile.key filename.txt In debian, I get a popup requesting I enter a password... How do I encrypt ...
2
votes
0answers
235 views

PGP public key block Public-Key (old) - What does the OLD mean?

System: Linux Mint 19. Today I created a new GPG key pair using: gpg --full-generate-key I armor-exported the public key and have run: file *.public As a surprise I found my key or format or ...
2
votes
0answers
43 views

GPG self-signature default check level

I think I understand the concept of self-signature in GPG from reading the answer to this question. However it is not yet clear to me how check levels are assigned. When issuing gpg --check-sigs one ...
1
vote
0answers
27 views

Generating new E and S subkeys for a key that has been moved to card

I accidentally messed up months ago by keytocard'ing a seret key before making an offline locked-away backup of it. I failed at reading comprehension and did not know that this would delete the key ...
1
vote
1answer
287 views

GPG: Is 'pubring.kbx' safe to share?

This public keyring pubring.kbx (as I merely guess from the name) must be safe to share publicly or is it not? Does it contain any sensitive information with respect to private keys? I want to back ...
1
vote
1answer
61 views

Is the tomb's keyfile necessary when creating a password tomb with tomb-pass?

Pass tomb's documentation states Usage: pass tomb [-n] [-t time] [-f] [-p subfolder] gpg-id... Create and initialise a new password tomb Use gpg-id for encryption of both tomb and passwords ...
3
votes
1answer
133 views

What happens to a pass vault when the GPG key expires?

Say I were to use the Linux tool pass as my password manager and the corresponding GPG key were to expire. Would I still be able to get in?
3
votes
1answer
76 views

gnupg keys and pass database - Protecting both from unauthorised access and loss

My target is to use pass to store a lot of passwords and be able to access those passwords from wherever I need them, possibly using just a single pass-thing (password, passphrase, my voice, my ...
5
votes
2answers
266 views

Is it safe to store GPG encrypted data publicly eg on GitHub?

I've been learning some basics of information security and GPG encryption and it's super intriguing. I wanted to understand vulnerabilities behind an idea that I had. After we create our public and ...
2
votes
1answer
52 views

Securely Download lubuntu from Non-Ubuntu System

The recommended way to find out which public key you need to verify the Ubuntu hashes is to attempt to check a signature of the hash file (both of which were downloaded in the clear). This produces an ...
3
votes
2answers
185 views

How can I verify signed commits made by other people?

As identified in this related question, github signs commits made from their application with their GPG key 4AEE18F83AFDEB23. Online, I can see commits tagged as 'verified'. But when I attempt to ...
2
votes
1answer
77 views

Is the range of the s2k-count parameter in GPG still adequate?

From the manual: the s2k-count parameter specifies how many times the passphrase mangling for symmetric encryption is repeated. This value may range between 1024 and 65011712 inclusive. Apparently in ...
2
votes
1answer
904 views

Export GPG key from smartcard and import yubikey

I have the OPEN PGP SMARTCARD V2.1 and there I have a signature key, a encryption key and a authentication key stored. The last 8 digits of the signature key is for example: 1234 5678. Now I want to ...
2
votes
1answer
4k views

How to decrypt a gpg file?

I have a gpg file and a sha256 file. When I try to decrypt the gpg file using the gpg - d file.gpg command, it says that there is no secret key. I am absolutely new to this so I would appreciate any ...
3
votes
1answer
145 views

Is it reasonable to store encrypted TOTP keys + authentication credentials on a single device (for end-user)?

My current security model (at least for passwords) is to store them encrypted at rest and use GPG (in combination with an Yubikey) to perform encryption / decryption. I'm using pass (https://www....
2
votes
0answers
111 views

GPG - Use case for embedded system

I'm looking to add encryption to an embedded data logger and I'd really appreciate some advice to make sure that my approach is reasonable/secure. The user will load a GPG public key onto the device. ...
1
vote
0answers
70 views

Primary uid of Key is not changeable

Recently I had to revoke one of my UIDs and add a new one in my main GPG Key. As I expected the new UID became primary and I tried to change it back to the original one (it's not the revoked one). ...
2
votes
1answer
53 views

Wrong pgp key was signed

Someone signed my PGP key, by accident (we have never met, but I know the person a little). The wrong signature was uploaded to the SKS pool. Is there anything we can do about it to improve the web ...
2
votes
2answers
280 views

GPG secret key and passphrase

I generated a public/secret key pair with GnuPG. I know that the secret key must keep secret. However, I am wondering what are the risk to expose the secret key without the passphrase? If Eve steals ...
1
vote
0answers
109 views

What is the solution to digitally sign email apart from S/MIME and GPG/OpenPGP [closed]

I have tried to implement S/MIME, however, I've found out that S/MIME seems to be obsolete, in my perspective. Since S/MIME cannot operate on Google Chrome or Edge. Another solution I found is ...
2
votes
2answers
258 views

Is it a good idea to upload your gnupg files to github?

I have a GNUPG file that i use to store all my passwords locally(Dont know if it is a good idea). The question is, is it safe to push the GNUPG file to github so i can access it from anywhere?
3
votes
0answers
155 views

yubikey creating different ssh public key having same GPG

I have 2 yubikeys and both are having the same GPG master key besides 3 subkeys for encrypting, signing and authentication, I can encrypt/decrypt and everything regarding gpg seems to be working fine, ...
2
votes
1answer
340 views

gpg --armor --export-secret-key differ on last 4 characters

I created a backup of a gpg key by doing: gpg -a --export-secret-keys foo@bar > private.key gpg -a --export foo@bar > public.key Then on another system, I import them: gpg --import private....
0
votes
0answers
152 views

Compatibility advantages of RSA-4096 over RSA-3072

I am targeting a security level of 128 bits for GnuPG, so I am using SHA-256 and AES-128. Now I need to choose between RSA-3072 and RSA-4096. According to multiple sources RSA-3072 security level is ...
2
votes
1answer
193 views

GnuPG sub-keys revocation

My current GnuPG key schema is the one recommended in OpenPGP Best Practices and many other sources. It consists in one offline master key plus a set of sub-keys for day-to-day operations stored ...
4
votes
1answer
214 views

Why do so many PGP public keys begin with mQINBF?

Why do so many PGP public keys begin with mQINBF? I am just curious.
1
vote
2answers
183 views

key usage for offline gnupg master key

I've been reading some articles about using an offline master key for gnupg, and I'm confused about the key usage. It seems every article has a different opinion about it. I've seen the following ...
2
votes
1answer
78 views

Why do people check the passport on key signing events?

I find the common procedure of key signing parties a little awkward: Person A presents the passport and a fingerprint "This is my key!". Person B checks the passports and decides a level of trust to ...
1
vote
1answer
68 views

How to find default S2K parameters in GPG

How can I find the default string-to-key parameters in GPG? I am using it in Tails.
1
vote
1answer
117 views

problem after upgrading from GnuPG 1.4 to GnuPG 2.1

My Debian box decided to upgrade from "gnupg 1.4" to "gnupg 2.1" after some kind of security update. After this, I am no longer able to use or access any of my keys. After any gpg command, it says: ...
1
vote
1answer
67 views

How can I find the default KDF for my version of GPG?

I am trying to find the default KDF for my version of gpg: gpg (GnuPG) 2.2.6 libgcrypt 1.8.2 Does anyone know how?
5
votes
1answer
2k views

GPG masterkey and subkey for encryption and signature and default keys

I am a little confused (as many others) about the concept of subkeys as related to the primary key. gpg by default (at least it seems on my system --- using RSA), upon gpg --gen-key creates a ...