Questions tagged [gnupg]

GNU Privacy Guard (GnuPG or GPG) is an open source implementation of PGP, a file encryption and signature tool widely used for emails

Filter by
Sorted by
Tagged with
4
votes
2answers
487 views

how to update GPG private key that Pass uses

I've setup up Pass with a GPG key. That key expires at some point in the future. In preparation for this event, how would I update Pass to use a new Key? Do I just manually update the key id and ...
4
votes
1answer
1k views

How does a private OpenPGP key's passphrase add to its security?

I am a novice user of OpenPGP. I use GPGTools for OS X. I have several connected questions, but difficult to find direct answers on the Internet. When I create a key-pair, the password I enter is a ...
3
votes
1answer
197 views

Combating Networks of Forged OpenPGP Keys on Public Keyservers

I recently noticed that someone has created an elaborate forgery of my OpenPGP key. Specifically, they orchestrated a short key (32-bit) fingerprint collision, and also forged additional keys to match ...
4
votes
0answers
3k views

Which ECC to choose with GPG?

I want to generate a key pair with gpg2 2.1.11 and libgcrypt 1.6.5. I use the command gpg2 --expert --full-key-gen. This allows me to choose an ECC: Please select what kind of key you want: (1) ...
1
vote
1answer
530 views

Where is Enigmail's keyring stored?

I have a GPG public/private key to send email with Enigmail and Thunderbird. I received an encrypted email but Enigmail did not recognize it. I tried to use the command line, but gpg complains gpg: ...
1
vote
0answers
183 views

Encrypting same large iso file with gpg and openssl [duplicate]

test.iso is a large file ,almost as large as 3G. ls -al test.iso -rw-r--r-- 1 debian8 debian8 3076767744 Apr 21 10:56 test.iso 1.Encrypting with gpg. I created pub key and provate key for person1. ...
4
votes
3answers
410 views

Use USB TRNG as source of randomness for OpenSSL key generation

I have an idquantique TRNG (USB). On my Debian machine, I can easily create a file on my disk coming from that TRNG filled with some random content. Is it possible to make OpenSSL and GnuPG (for key ...
1
vote
1answer
236 views

Recover GPG private key from known encrypted file content?

Long story short, I lost a GPG key which I used to encrypt some sensitive stuff. Hopefully, I got some files encrypted two times, one with the key I lost, and one with one I still got. My question is ...
1
vote
1answer
583 views

Using PFS with GnuPG?

Is it possible to use PFS with a PGP message? $ gpg2 --encrypt --armor --something? --something? -r friend@email.com PFS with GPG probably isn't possible -- otherwise everyone would be using it ...
6
votes
2answers
3k views

What is the most robust available algo for GPG symmetric encryption? [closed]

What is the most robust available algo for GPG symmetric encryption (given as argument of --cipher-algo)? Possible ciphers: IDEA 3DES CAST5 BLOWFISH AES AES192 AES256 TWOFISH CAMELLIA128 ...
4
votes
1answer
5k views

GPG/GnuPG secret key passphrase recovery and/or .gnupg/private-keys-v1.d/ file format

Bad news: I forgot a GnuPG secret key passphrase. Good news: I do know the words it is constructed of. So, I can easily use john or similar to recover (too many combinations to do it manually, ...
4
votes
0answers
355 views

Sharing subkeys among two master keys

I would like to have a GnuPG identity that I can use both for a long time (so that I can build a wide web of trust) and immediately with as many people as possible. As of today, the second goal is ...
2
votes
3answers
359 views

How to prove my identity by GPG signature on a file?

It's a common need to prove that a file is truly created by someone, and I think GnuPG did the job. However, anyone can generate a gpg key with an unverified email. GPG key servers doesn't verify my ...
13
votes
1answer
2k views

GPG encryption subkey on multiple smart cards issue

Is there a way to tell GPG, that if it needs to decrypt something, that it can find the private encryption key on one of two smart cards? My (simplified) setup is as follows: Generated a master key ...
2
votes
1answer
221 views

What does %APPDATA%\GnuPG\secring.gpg contain after invoking “gpg --card-edit generate”?

For a new smartcard (crypto stick), I've invoked gpg --card-edit, performed the generate command and selected to not create any backup of the generated keys. After key generation has finished, a %...
8
votes
1answer
522 views

Is it safe to share your `gitconfig`'s `user.signingkey` value with the world?

I'd like to publish my .gitconfig file on GitHub, which includes a signing key. As far as I understand, since this is related to code signing, the key referenced there is the ID of my private GPG key....
2
votes
1answer
689 views

Is it possible to backdate the timestamp found in a .gpg file?

If I sign a file right now a check the .gpg file that's generated it will output a timestamp, is it possible to change the time when signing the file? ➜ Downloads gpg --verify cache.html.gpg gpg: ...
3
votes
3answers
387 views

Use a Pre-Calculated Hash for Signing a File with GnuPG

When using GnuPG to sign a file, one usually uses something along the lines of: gpg2 --detach-sign --armour <file-to-sign> Now, let us assume that for some reasons in company X signing of ...
5
votes
1answer
809 views

Possible to sign an imported key with a subkey using gpg?

In the interest of safeguarding my master key I store it offline. I have a gpg subkey with indicator SEA that I keep available on my system. When I download software I verify it using the provided asc ...
1
vote
1answer
70 views

What is the most secure way of decrypting a GPG message within a non ad-hoc OS?

Which method would you advocate to make sure the decrypted content of a GPG message is flushed after reading it? PS: I am currently decrypting messages from a non-permanent live CD ran offline so ...
9
votes
1answer
1k views

Why does gpg --list-keys modify my keyring?

I am concerned that listing the keys in my GPG keyring changes my pubring.gpg and trustdb.gpg files. I expected listing keys to be a read-only operation. Would you know what the reason is? If there ...
3
votes
1answer
3k views

gpg4win kleopatra doesn't ask for passphrase on subsequent runs

Am using gpg4win kleopatra for encrypting files. After bootup when I try to decrypt a previously encrypted file, it asks for a passphrase as expected. But after some time, if again I try decrypting a ...
1
vote
1answer
1k views

gpg2 --symmetric and passphrase

Trying to encrypt files using gpg (GnuPG) from command line, using AES256. To encrypt: gpg2 --cipher-algo AES256 --symmetric file To decrypt: gpg2 --output file --decrypt file Question is, when ...
5
votes
1answer
181 views

To what extent have SHA-1 collisions compromised application verification?

It was recently revealed that the SHA-1 hash algorithm has been broken Several effected areas are detailed such as for example git and document signing. One thing that isn't mentioned is application ...
0
votes
1answer
51 views

Create a digital signature from another signature in gpg

Somehow I formatted the directory containing my secret key. But I still do have a sig file that was created using that key. Is it possible to somehow re-engineer the secret key from that? Or can I ...
2
votes
1answer
322 views

Is it safe to encrypt multiple files with the same strong passphrase?

I use GPG to symmetrically encrypt multiple files, and it would be more convenient if they all had the same strong passphrase. It's possible that someone could gain access to several of these files. ...
7
votes
5answers
3k views

How to export my Protonmail private key?

From: https://github.com/scastiel/protonmail-export 1) Open the ProtonMail app and log out completely. You should now see the login screen. 2) Open the dev tools of your browser, and the ...
0
votes
1answer
288 views

Getting more information about a PGP Signature

I've asked this question here: https://stackoverflow.com/questions/42170000/read-pgp-signature-using-bouncycastle but I'm hoping to be able to get more information about the format of a GnuPG ...
3
votes
3answers
747 views

Why's the “public key block” different although fingerprint is same for gpg keys

I'm new to pgp & trying to understand how it works. nginx's signing key is listed here : https://nginx.org/keys/nginx_signing.key It's fingerprint is : 573B FD6B 3D8F BC64 1079 A6AB ABF5 BD82 ...
2
votes
1answer
403 views

How can I compare GPG encrypted files in order to upload only the ones that have changed? [duplicate]

This question follows this one, in regards to encrypting files individually in order to upload them to a cloud service. --- Scenario: I have my folder full of unencrypted files Via script I make a ...
3
votes
0answers
583 views

Specify AES key when using gpg

When using gpg to encrypt/decrypt a file with AES-256, is it possible to specify the 256-bit key directly (rather than have it derived from a passphrase)?
3
votes
0answers
538 views

Why does Linux Torvalds not sign his Git commits? [closed]

Why does Linux Torvalds not sign his Git commits (with GPG)? Recent example: https://github.com/torvalds/linux/commit/566cf877a1fcb6d6dc0126b076aad062054c2637 Pretty scary. How can I be sure that he ...
4
votes
1answer
1k views

OTP vs. U2F for online banking and email (vs. store key on USB)

Which one among OATH HOTP, OATH TOTP on one side (say in the form of a credit card-sized token) and U2F (say in the form of a USB key) on the other side you think is more secure for purposes like ...
0
votes
1answer
20 views

Preventing unauthorized key-listings

I just noticed that anyone who has root access to my computer can list the keys in my keyring. He would not be able to use any of my private keys without knowing the passphrase, but he could examine ...
10
votes
3answers
855 views

Is it safe to publish public PGP authentication subkeys?

Suppose I have a PGP key set up as follows: I have an offline master public/private keypair, which is set to only Certify, aka create subkeys and sign other people's keys. Then I create three ...
0
votes
1answer
113 views

Why does GPG insert dashes into signed messages?

Using GPGTools on macOS, I signed a message that looks like this: - List Item - Inner List Item The signed message looks like this: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - List Item ...
0
votes
1answer
649 views

Generate and add new encryption subkey?

My encryption subkey (but not my signing or other subkeys) expired. How do I generate and add a new encryption subkey using gpg?
1
vote
0answers
267 views

Unattended generation of “the perfect keypair”

I'm trying to generate a "perfect keypair" akin to https://linuxich.wordpress.com/short-manual-for-a-perfect-gpg-keypair-using-gpg-v2/ but I want to do it semi-automatized, in gpg2 terms that would be ...
1
vote
1answer
67 views

Encrypt/Isolate files of the Software

We want to create a secure email client based on Thunderbird source code and looking for a method to encrypt files or to isolate files from being stolen by some malware. and to avoid infecting pc via ...
6
votes
1answer
11k views

GPG why is my trusted key not certified with a trusted signature?

When I run gpg --verify ~/file.asc ~/file I receive the following: gpg: Signature made Tue 10 Dec 2016 05:10:10 AM EST using RSA key ID abcdefgh gpg: Good signature from "Alias (signing key) <...
4
votes
1answer
1k views

gpg-agent keeps saving pin for a smartcard

I've found today, that enigmail is decrypting a message without asking me for the smart card's PIN. It is asking only once, and then not ask at all. this is my gpg-agent.conf: default-cache-ttl 0 ...
2
votes
1answer
267 views

Can I restore gpg private key from raw data to enigmail?

I have recovered data from my local storage. The most valuable for me was to recover the private gpg key. I have found it in raw data files, I did delimitation based on the headers and footers. Now I ...
-2
votes
2answers
135 views

Where to find the pubkey for a protonmail.ch e-mail address? [closed]

Where to find the pubkey for a protonmail.ch e-mail address? Is there any official keyserver for protonmail?
2
votes
1answer
592 views

gpg2 export-secret-keys

I created a master gpg key and additional signing subkey as described on Debian wiki page. I also moved the whole .gnupg directory to /my/save/place and deleted the primary key from the original ....
42
votes
2answers
12k views

Is it a coincidence that the first 4 bytes of a PGP/GPG file are ellipsis, smile, female sign and a heart?

As the title says, do those 4 bytes carry a meaning (I assume they do as apparently the smile changes depending on the key bitness)? The two files below have been encrypted with the different keys, ...
1
vote
1answer
2k views

How can I decrypt a file with gpg to screen and not write to disk?

I currently use a script to decrypt a file, but it writes it to disk. I then use wipe to clear it. Is there a way to write it to screen so it never writes it to disk? I use the command $ echo ...
2
votes
1answer
132 views

Does GnuPG allow sub-sub-keys?

If subkeys are useful, does GnuPG have sub-sub-keys as well? The current implementation of GnuPG feels a bit rigid, in that it only allows a two-level key management and subkeys are closely ...
8
votes
3answers
4k views

Can I encrypt with GnuPG and decrypt with OpenSSL?

I wonder why this does not work on Linux? gpg --cipher-algo AES256 -c -o test.zip.enc test.zip Enter passphrase: openssl enc -AES-256-CBC -d -in test.zip.enc -out test.zip enter aes-256-cbc ...
2
votes
1answer
76 views

Are subkeys full-fledged keys in gnupg?

I understand the key management and security benefits of using subkeys. However, I'm not sure whether subkeys are partial keys with limitations or full-fledged keys (just as the master key). Both the ...
2
votes
2answers
2k views

Is cloud storage safe to use if I use gpg and is my method secure?

I have to regularly back up data and use google drive and sometimes sync.com. I have lots of images, videos and spreadsheets and sometimes my backups are 4 or 5 GB. I typically add all the files to a ...