Questions tagged [gnupg]

GNU Privacy Guard (GnuPG or GPG) is an open source implementation of PGP, a file encryption and signature tool widely used for emails

Filter by
Sorted by
Tagged with
2
votes
2answers
261 views

Is it a good idea to upload your gnupg files to github?

I have a GNUPG file that i use to store all my passwords locally(Dont know if it is a good idea). The question is, is it safe to push the GNUPG file to github so i can access it from anywhere?
3
votes
0answers
177 views

yubikey creating different ssh public key having same GPG

I have 2 yubikeys and both are having the same GPG master key besides 3 subkeys for encrypting, signing and authentication, I can encrypt/decrypt and everything regarding gpg seems to be working fine, ...
2
votes
1answer
404 views

gpg --armor --export-secret-key differ on last 4 characters

I created a backup of a gpg key by doing: gpg -a --export-secret-keys foo@bar > private.key gpg -a --export foo@bar > public.key Then on another system, I import them: gpg --import private....
0
votes
0answers
182 views

Compatibility advantages of RSA-4096 over RSA-3072

I am targeting a security level of 128 bits for GnuPG, so I am using SHA-256 and AES-128. Now I need to choose between RSA-3072 and RSA-4096. According to multiple sources RSA-3072 security level is ...
3
votes
1answer
263 views

GnuPG sub-keys revocation

My current GnuPG key schema is the one recommended in OpenPGP Best Practices and many other sources. It consists in one offline master key plus a set of sub-keys for day-to-day operations stored ...
4
votes
1answer
221 views

Why do so many PGP public keys begin with mQINBF?

Why do so many PGP public keys begin with mQINBF? I am just curious.
1
vote
2answers
212 views

key usage for offline gnupg master key

I've been reading some articles about using an offline master key for gnupg, and I'm confused about the key usage. It seems every article has a different opinion about it. I've seen the following ...
2
votes
1answer
83 views

Why do people check the passport on key signing events?

I find the common procedure of key signing parties a little awkward: Person A presents the passport and a fingerprint "This is my key!". Person B checks the passports and decides a level of trust to ...
1
vote
1answer
80 views

How to find default S2K parameters in GPG

How can I find the default string-to-key parameters in GPG? I am using it in Tails.
1
vote
1answer
127 views

problem after upgrading from GnuPG 1.4 to GnuPG 2.1

My Debian box decided to upgrade from "gnupg 1.4" to "gnupg 2.1" after some kind of security update. After this, I am no longer able to use or access any of my keys. After any gpg command, it says: ...
1
vote
1answer
70 views

How can I find the default KDF for my version of GPG?

I am trying to find the default KDF for my version of gpg: gpg (GnuPG) 2.2.6 libgcrypt 1.8.2 Does anyone know how?
7
votes
1answer
2k views

GPG masterkey and subkey for encryption and signature and default keys

I am a little confused (as many others) about the concept of subkeys as related to the primary key. gpg by default (at least it seems on my system --- using RSA), upon gpg --gen-key creates a ...
-1
votes
1answer
102 views

Will this method allow EFAIL-safe sending of OpenPGP encrypted messages to otherwise EFAIL-unsafe readers?

The proposed method Brief and simplified description of the attack: Any and every single encrypted block B of the encrypted message can be surrounded by Trojan psuedo-encrypted data to give a ...
4
votes
1answer
124 views

Using different GPG keys for encrypting emails and encrypting personal files?

I'm going to use GPG for Signing my documents Encrypting emails Encrypting my personal documents. Will it be better for security measures to use different encryption keys for 2 and 3? For 3, it ...
6
votes
1answer
2k views

How to encrypt, sign and decrypt a file with gpg?

I am using gpg to encrypt and decrypt a file. Here are the steps I am doing taking reference from this question: # Sender gpg --encrypt --recipient recipient@gmail.com --output confidential.pgp ...
4
votes
1answer
595 views

Create certificate without private key or using USB eToken

Considering this thread: Create certificate without private key with OpenSSL I have a very similar situation. I have a USB eToken 5110 JC (Aladdin) which has an inaccessible private key, since it's ...
1
vote
1answer
250 views

Methods to work with offline primary keys

I created a number of profiles with separate subkeys for authentication, signature, and encryption while primary keys are saved on USB Stick. It's working alright but I was wondering if there are some ...
0
votes
1answer
259 views

GPG key expiration and storage

I hope I came to right place to ask about GPG. I have created secret, public, and sign keys and set expiration dates for all keys in case I lose an access to them or forget a keyphrase, etc. I have ...
0
votes
2answers
150 views

PGP Data loss prevention for Linux endpoints

If a company allows his employees to use encryption, especially PGP encryption, it will run into trouble. Because AES128 is unbreakable, that means traffic which is routed in the intranet can't be ...
4
votes
2answers
19k views

gpg: decryption failed: No secret key

I cannot seem to get gnupg to decrypt files encrypted with my keys. I've tried migrating my secret key from an old laptop to a new one, and I keep getting the same error: gpg: decryption failed: No ...
1
vote
0answers
35 views

What are direct key signatures (0x1F) usages other than for revocation?

While looking what the PGP Global Directory is, I have found that it's key has two strange signatures: pub 2048R/CA57AD7C 2004-12-06 sig dirct 4DD19F10 2014-01-21 __________ __________ [...
2
votes
1answer
56 views

Double signature with GPG, only validate one key

I have a file which I have signed with two GPG keys and want to validate that file trough a script. The scripts validates that the signatures are correct by checking the returned status from GPG. If ...
0
votes
1answer
189 views

How to force GPG to use a Keycard when it is available

I have a yubikey (with PGP smartcard function) with my PGP key on it. I did not replace the private key on my main PC with a stub key as keytocard does by default, so I still can use the PGP key with ...
2
votes
2answers
611 views

How does gpg decryption command know which key in a key ring to use

I don't understand how gpg command could know which key in a key ring to use for decryption. For example, a key ring may have multiple keys. When an encrypted file needs to be decrypted, we only need ...
1
vote
1answer
58 views

What identifies an entity in PGP?

When a person A signs a PGP key whose uid is: "Max Anderson < max.anderson@example.com > ", so he is assuring that this key really belongs to the person whose name is Max Anderson and whose email ...
11
votes
4answers
4k views

Create backup Yubikey with identical PGP keys

I've recently bought two Yubikeys Neo which I'd like to use primarily for encryption and authentification by using the smartcard feature with GnuPG. I've read a few how-to on the subject (most notably ...
2
votes
1answer
75 views

Is it wise to remove redundant self-signatures from my PGP key?

I have changed expiration date of my pgp key several times. Recently I looked at it and started to worry about the mess I can see there: $ gpg --list-sigs AAAAAAAAAAAAAAAA pub 4096R/AAAAAAAA 2014-...
0
votes
3answers
441 views

Why does Github need to offer a GPG signature feature?

Github offers users to sign their work using GPG. I guess I missing the bigger picture, though how can people have your SSH keys or your credentials and not your GPG keys. Not sure what kind of layer ...
2
votes
0answers
127 views

Is it safe to retrieve GnuPG public/secret key with fs in Node.js?

So there is a Node.js package openpgp which is available for signing documents with GPG, but it requires public/secret key. We all know putting key right into the file is dangerous and not recommend ...
7
votes
1answer
6k views

Sending the GPG key to keyserver

Today I started learning how to work with GPG keys. I successfully generated a pair for me, and imported some other keys, encrypted some files and successfully decrypted them. I want to send my GPG ...
2
votes
1answer
521 views

Is “BEGIN PGP SIGNED MESSAGE” optional to include in an armored message?

Although it's probably nitpicking, it doesn't look very cosmetically pleasing to put the BEGIN PGP SIGNED MESSAGE at the top of an email, is that header really required to parse the message and verify ...
1
vote
0answers
769 views

How to verify certificate fingerprint? [closed]

I downloaded Veracrypt and its sig file. I go ahead and import it into Kleopatra to verify it (using Windows gpg4win). Now i reach this step: It asks me whether i have verified the fingerprint. How ...
1
vote
0answers
29 views

GPG RSA Authenticity Mechanism Minimum Requirement

The GPG/PGP based RSA authenticity signing mechanism is based on 3 parts to ensure authenticity: the public key the signature the fingerprint of the public key Assuming that the author keeps his ...
6
votes
1answer
432 views

Forward secrecy with GnuPG

I'd like to know how to implement forward secrecy using GnuPG, and I presume I need some kind of authenticated key exchange. Assuming that I have the following working already: Alice and Bob have ...
-2
votes
1answer
179 views

PGP private key and decryption issues

I have created a private and public key set and encrypted a message to a friend with their public key. I then turned off my machine, and since it is not in persistence mode, my keys were deleted, but ...
3
votes
2answers
243 views

Safely decrypting an unsolicited/untrusted PGP message

I am accepting public security vulnerability reports for my website, and I publish my personal PGP (GPG) key to encourage people to encrypt their communications. Upon receiving an encrypted message, ...
0
votes
1answer
131 views

How to use master password for GPG encryption after setting up Yubikey? [closed]

I just setup my Yubikey 4 on Windows. How can I use master password for signing/encrypting when I don't have my key? If the yubikey is not inserted I get an error "Please insert the card with serial ...
1
vote
0answers
79 views

What does it mean to have an unknown key in my `gpg --list-keys` [closed]

I have just set up GPG for the first time. When I do gpg --list-keys I see a key other than my own (which is also there) about which I have no idea how it got there, what does this mean? (I don't even ...
2
votes
1answer
459 views

Best way to implement PGP company wide [closed]

What is the best way to implement PGP/GnuPGP company wide? Go to each users workstation, create the keys, upload the public key, and move on to the next?
2
votes
1answer
795 views

gpg agent and caching symmetric encryption passphrase for writing

With public-key encryption, one can encrypt and decrypt a file repeatedly if gpg-agent caches the passphrase for the key. However, with symmetric encryption I'm always prompted for the passphrase when ...
4
votes
1answer
413 views

Best archive format for cryptographic signing?

I want to sign a whole directory of files using GPG, and that entails creating an archive or compressed file, since GPG can only sign a file, not a directory. However, I imagine that some archive ...
2
votes
1answer
75 views

Is there a maximum for the number of certifications on a PGP public key

My question is about openPGP and the GnuPG implementation in particular. The web of trust idea seems to have your public keys signed by those who meticulously verify it. So when someone does this ...
2
votes
1answer
84 views

Prevent GPG from exposing portion of private key

I have three keys; I'll refer to them as 'foo' [C], 'bar' [SE], and 'baz' [A]. Whenever I run gpg2 --export-private-subkeys baz!, it asks for a password, as it should. However, if I click 'Cancel', ...
4
votes
1answer
767 views

What information is in a gpg cleartext signature?

What information does a gpg2 signature contain? If you clearsign an empty file, the signature looks like this: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 -----BEGIN PGP SIGNATURE----- Version: ...
4
votes
1answer
110 views

GnuPG - Symmetric crypt with a null key

As the title tells it, is it possible, using GnuPG, to do a symmetric encryption on a file, using a "null" key so when you do a gpg --output doc --decrypt foo, it'll decrypt it without asking for a ...
0
votes
3answers
270 views

Do I need a PGP key?

I'm new to OpenPGP, GnuPG, and the concept of public-private key pairs. I have some questions in my mind: Is it necessary for me to have a PGP (or an OpenPGP) key? I'm an Android programmer, and an ...
2
votes
1answer
102 views

How to single key decrypt pgp encrypted mails in a multi key/multi identitiy setup?

For pgp encryption I'd like to combine short expiry terms for public signing and email encryption with (convenient) long term decryption possibilities of my mailbox mails. I'm using several mail ...
1
vote
1answer
131 views

GPG - limit who can add and remove from pubring

I'm working on a project where we use git-secret for hiding information. This is backed by gpg, and adding people to git-secret (http://git-secret.io/) is done by adding a public key to a pubring.gpg. ...
3
votes
1answer
2k views

Windows GnuPG - GPG - Smart Card Status - Not Detecting Yubikey

I have a Yubikey 4. On a Windows 7 64 bit machine I installed Gpg4Win which includes GnugPG. I was able to successfully import public keys. I plugged in the Yubikey 4 and Windows correctly ...
2
votes
1answer
2k views

GPG with Yubikey smart card - smart card doesn't need to be plugged in! [duplicate]

I have created an offline MASTER key along with sub keys. The sub keys were sent to the Yubikey smartcard via the gpg 'keytocard'. The gpg --card-status command correctly identifies the information ...