Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [gnupg]

GNU Privacy Guard (GnuPG or GPG) is an open source implementation of PGP, a file encryption and signature tool widely used for emails

4
votes
1answer
123 views

Using different GPG keys for encrypting emails and encrypting personal files?

I'm going to use GPG for Signing my documents Encrypting emails Encrypting my personal documents. Will it be better for security measures to use different encryption keys for 2 and 3? For 3, it ...
6
votes
1answer
1k views

How to encrypt, sign and decrypt a file with gpg?

I am using gpg to encrypt and decrypt a file. Here are the steps I am doing taking reference from this question: # Sender gpg --encrypt --recipient recipient@gmail.com --output confidential.pgp ...
3
votes
1answer
509 views

Create certificate without private key or using USB eToken

Considering this thread: Create certificate without private key with OpenSSL I have a very similar situation. I have a USB eToken 5110 JC (Aladdin) which has an inaccessible private key, since it's ...
1
vote
1answer
230 views

Methods to work with offline primary keys

I created a number of profiles with separate subkeys for authentication, signature, and encryption while primary keys are saved on USB Stick. It's working alright but I was wondering if there are some ...
0
votes
1answer
220 views

GPG key expiration and storage

I hope I came to right place to ask about GPG. I have created secret, public, and sign keys and set expiration dates for all keys in case I lose an access to them or forget a keyphrase, etc. I have ...
0
votes
2answers
136 views

PGP Data loss prevention for Linux endpoints

If a company allows his employees to use encryption, especially PGP encryption, it will run into trouble. Because AES128 is unbreakable, that means traffic which is routed in the intranet can't be ...
4
votes
2answers
15k views

gpg: decryption failed: No secret key

I cannot seem to get gnupg to decrypt files encrypted with my keys. I've tried migrating my secret key from an old laptop to a new one, and I keep getting the same error: gpg: decryption failed: No ...
1
vote
0answers
34 views

What are direct key signatures (0x1F) usages other than for revocation?

While looking what the PGP Global Directory is, I have found that it's key has two strange signatures: pub 2048R/CA57AD7C 2004-12-06 sig dirct 4DD19F10 2014-01-21 __________ __________ [...
2
votes
1answer
52 views

Double signature with GPG, only validate one key

I have a file which I have signed with two GPG keys and want to validate that file trough a script. The scripts validates that the signatures are correct by checking the returned status from GPG. If ...
0
votes
1answer
171 views

How to force GPG to use a Keycard when it is available

I have a yubikey (with PGP smartcard function) with my PGP key on it. I did not replace the private key on my main PC with a stub key as keytocard does by default, so I still can use the PGP key with ...
2
votes
2answers
547 views

How does gpg decryption command know which key in a key ring to use

I don't understand how gpg command could know which key in a key ring to use for decryption. For example, a key ring may have multiple keys. When an encrypted file needs to be decrypted, we only need ...
1
vote
1answer
54 views

What identifies an entity in PGP?

When a person A signs a PGP key whose uid is: "Max Anderson < max.anderson@example.com > ", so he is assuring that this key really belongs to the person whose name is Max Anderson and whose email ...
11
votes
4answers
3k views

Create backup Yubikey with identical PGP keys

I've recently bought two Yubikeys Neo which I'd like to use primarily for encryption and authentification by using the smartcard feature with GnuPG. I've read a few how-to on the subject (most notably ...
2
votes
1answer
68 views

Is it wise to remove redundant self-signatures from my PGP key?

I have changed expiration date of my pgp key several times. Recently I looked at it and started to worry about the mess I can see there: $ gpg --list-sigs AAAAAAAAAAAAAAAA pub 4096R/AAAAAAAA 2014-...
0
votes
3answers
348 views

Why does Github need to offer a GPG signature feature?

Github offers users to sign their work using GPG. I guess I missing the bigger picture, though how can people have your SSH keys or your credentials and not your GPG keys. Not sure what kind of layer ...
2
votes
0answers
115 views

Is it safe to retrieve GnuPG public/secret key with fs in Node.js?

So there is a Node.js package openpgp which is available for signing documents with GPG, but it requires public/secret key. We all know putting key right into the file is dangerous and not recommend ...
7
votes
1answer
5k views

Sending the GPG key to keyserver

Today I started learning how to work with GPG keys. I successfully generated a pair for me, and imported some other keys, encrypted some files and successfully decrypted them. I want to send my GPG ...
2
votes
1answer
489 views

Is “BEGIN PGP SIGNED MESSAGE” optional to include in an armored message?

Although it's probably nitpicking, it doesn't look very cosmetically pleasing to put the BEGIN PGP SIGNED MESSAGE at the top of an email, is that header really required to parse the message and verify ...
1
vote
0answers
712 views

How to verify certificate fingerprint? [closed]

I downloaded Veracrypt and its sig file. I go ahead and import it into Kleopatra to verify it (using Windows gpg4win). Now i reach this step: It asks me whether i have verified the fingerprint. How ...
1
vote
0answers
28 views

GPG RSA Authenticity Mechanism Minimum Requirement

The GPG/PGP based RSA authenticity signing mechanism is based on 3 parts to ensure authenticity: the public key the signature the fingerprint of the public key Assuming that the author keeps his ...
6
votes
1answer
398 views

Forward secrecy with GnuPG

I'd like to know how to implement forward secrecy using GnuPG, and I presume I need some kind of authenticated key exchange. Assuming that I have the following working already: Alice and Bob have ...
-2
votes
1answer
161 views

PGP private key and decryption issues

I have created a private and public key set and encrypted a message to a friend with their public key. I then turned off my machine, and since it is not in persistence mode, my keys were deleted, but ...
3
votes
2answers
234 views

Safely decrypting an unsolicited/untrusted PGP message

I am accepting public security vulnerability reports for my website, and I publish my personal PGP (GPG) key to encourage people to encrypt their communications. Upon receiving an encrypted message, ...
0
votes
1answer
125 views

How to use master password for GPG encryption after setting up Yubikey? [closed]

I just setup my Yubikey 4 on Windows. How can I use master password for signing/encrypting when I don't have my key? If the yubikey is not inserted I get an error "Please insert the card with serial ...
1
vote
0answers
67 views

What does it mean to have an unknown key in my `gpg --list-keys` [closed]

I have just set up GPG for the first time. When I do gpg --list-keys I see a key other than my own (which is also there) about which I have no idea how it got there, what does this mean? (I don't even ...
2
votes
1answer
421 views

Best way to implement PGP company wide [closed]

What is the best way to implement PGP/GnuPGP company wide? Go to each users workstation, create the keys, upload the public key, and move on to the next?
2
votes
1answer
687 views

gpg agent and caching symmetric encryption passphrase for writing

With public-key encryption, one can encrypt and decrypt a file repeatedly if gpg-agent caches the passphrase for the key. However, with symmetric encryption I'm always prompted for the passphrase when ...
3
votes
1answer
355 views

Best archive format for cryptographic signing?

I want to sign a whole directory of files using GPG, and that entails creating an archive or compressed file, since GPG can only sign a file, not a directory. However, I imagine that some archive ...
2
votes
1answer
74 views

Is there a maximum for the number of certifications on a PGP public key

My question is about openPGP and the GnuPG implementation in particular. The web of trust idea seems to have your public keys signed by those who meticulously verify it. So when someone does this ...
2
votes
1answer
81 views

Prevent GPG from exposing portion of private key

I have three keys; I'll refer to them as 'foo' [C], 'bar' [SE], and 'baz' [A]. Whenever I run gpg2 --export-private-subkeys baz!, it asks for a password, as it should. However, if I click 'Cancel', ...
4
votes
1answer
699 views

What information is in a gpg cleartext signature?

What information does a gpg2 signature contain? If you clearsign an empty file, the signature looks like this: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 -----BEGIN PGP SIGNATURE----- Version: ...
4
votes
1answer
109 views

GnuPG - Symmetric crypt with a null key

As the title tells it, is it possible, using GnuPG, to do a symmetric encryption on a file, using a "null" key so when you do a gpg --output doc --decrypt foo, it'll decrypt it without asking for a ...
0
votes
3answers
232 views

Do I need a PGP key?

I'm new to OpenPGP, GnuPG, and the concept of public-private key pairs. I have some questions in my mind: Is it necessary for me to have a PGP (or an OpenPGP) key? I'm an Android programmer, and an ...
2
votes
1answer
99 views

How to single key decrypt pgp encrypted mails in a multi key/multi identitiy setup?

For pgp encryption I'd like to combine short expiry terms for public signing and email encryption with (convenient) long term decryption possibilities of my mailbox mails. I'm using several mail ...
1
vote
1answer
126 views

GPG - limit who can add and remove from pubring

I'm working on a project where we use git-secret for hiding information. This is backed by gpg, and adding people to git-secret (http://git-secret.io/) is done by adding a public key to a pubring.gpg. ...
3
votes
1answer
2k views

Windows GnuPG - GPG - Smart Card Status - Not Detecting Yubikey

I have a Yubikey 4. On a Windows 7 64 bit machine I installed Gpg4Win which includes GnugPG. I was able to successfully import public keys. I plugged in the Yubikey 4 and Windows correctly ...
2
votes
1answer
2k views

GPG with Yubikey smart card - smart card doesn't need to be plugged in! [duplicate]

I have created an offline MASTER key along with sub keys. The sub keys were sent to the Yubikey smartcard via the gpg 'keytocard'. The gpg --card-status command correctly identifies the information ...
1
vote
1answer
684 views

With private keys and public keys which is used for which: encrypt, sign, verify, and decrypt?

I understand the functions of PGP key-pairs as: Public key is used to encrypt files so only the private key holder can read them Private key is used to decrypt files that were encrypted using the ...
3
votes
2answers
247 views

Using primary public-key to verify message signed by subkey

Let's assume this scenario: I sign a message using my subkey I send the signed message to someone who has my master public key Is recipient be able to verify my message? Or do I have to provide my ...
1
vote
2answers
52 views

Are these gpg commands identical?

I've found gpg -c < unencrypted_file > encrypted_file this command from https://askubuntu.com/questions/27770/is-there-a-tool-to-encrypt-a-file-or-directory this page, but in gpg manual it says ...
2
votes
1answer
95 views

Including GPG Transition statement as a signing policy

Assume that I am transitioning from key A to key B by signing key B with key A and then revoking key A. What do you guys think of including a link to my online transition statement in my signature of ...
26
votes
2answers
3k views

Who owns the gpg key 4AEE18F83AFDEB23 and how did it sign a commit in my GitHub repo?

This commit in my GiHub repo is signed by a key I don't recognize: https://github.com/jonathancross/jc-docs/pull/2/commits/124672699991af75dd2454831670758f08bc74ab What is going on here?
2
votes
2answers
77 views

Analysis of gpg2 packets

I want to mentally visualize or just understand a gpg-signature. When running $ gpg2 --list-packets --verbose < test.sig the output is # off=0 ctb=89 tag=2 hlen=3 plen=540 :signature packet: ...
-2
votes
1answer
309 views

How does GPG2 --verify knows who signed a file and how? [closed]

When I (clear)sign a file, the output is something like this. $ gpg2 --clearsign test $ cat test.asc -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 This is a test! -----BEGIN PGP SIGNATURE----- ...
1
vote
2answers
155 views

Is it possilbe to use an OpenPGP private key to sign a file via OpenSSL?

Is it possible to use an exported OpenPGP private key to sign a file via OpenSSL? I've tried this: $ gpg2 --export-secret-keys --no-armor 84E2C2E5 > secret.key $ openssl rsautl -sign -in testfile ...
11
votes
5answers
4k views

Is a part of an encrypted file easier to crack?

After encrypting a file (GPG with AES) and splitting it into chunks (split), is it easier to crack one of the parts compared to the complete file? (Maybe because it may loses some important bits.)
3
votes
1answer
257 views

Does “Armoring” an encrypted string always produce the same length output if plaintext was same length?

I plan on encrypting numerous plain text strings which all have the same initial length. I plan on encrypting with AES-128 bit key using GPG. I plan on "armoring" the output into alphanumeric ...
3
votes
1answer
475 views

Strong password for GPG key or encrypt password database with GPG key?

I have a password database, that can be secured by a passphrase or by providing a GPG key. I have a GPG key that can be secured via a good password that I can remember, or via a great password that I ...
5
votes
2answers
544 views

Is it more secure encrypting 3 times with GPG?

Let's say we are using 3 different length passphrases and 3 different algos to encrypt sensitive data, e.g: gpg --symmetric --cipher-algo CAMELLIA256 < input.zip > output1 (random 100 ...
8
votes
3answers
1k views

GnuPG warning for a signed key with trust level 4

When encrypting a document with a public key I got a warning: $gpg --encrypt -r 6B7F10E4 file.pdf It is NOT certain that the key belongs to the person named in the user ID. If you *really* know ...