Questions tagged [gnupg]

GNU Privacy Guard (GnuPG or GPG) is an open source implementation of PGP, a file encryption and signature tool widely used for emails

Filter by
Sorted by
Tagged with
4
votes
1answer
882 views

Yubikey with gpg2

I recently purchased a Yubikey 4, which is working great for U2F and a static password, but I'd like to use the PGP Smartcard functionality as well, so I connected the Yubikey to my computer and ...
7
votes
1answer
6k views

Sending the GPG key to keyserver

Today I started learning how to work with GPG keys. I successfully generated a pair for me, and imported some other keys, encrypted some files and successfully decrypted them. I want to send my GPG ...
3
votes
0answers
183 views

yubikey creating different ssh public key having same GPG

I have 2 yubikeys and both are having the same GPG master key besides 3 subkeys for encrypting, signing and authentication, I can encrypt/decrypt and everything regarding gpg seems to be working fine, ...
0
votes
0answers
197 views

Compatibility advantages of RSA-4096 over RSA-3072

I am targeting a security level of 128 bits for GnuPG, so I am using SHA-256 and AES-128. Now I need to choose between RSA-3072 and RSA-4096. According to multiple sources RSA-3072 security level is ...
3
votes
2answers
358 views

Using primary public-key to verify message signed by subkey

Let's assume this scenario: I sign a message using my subkey I send the signed message to someone who has my master public key Is recipient be able to verify my message? Or do I have to provide my ...
17
votes
2answers
20k views

GnuPG asks for a key ID when sharing my public key, what is that?

I generated a public key using GnuPG. I can see it using --list-keys $ gpg --list-keys /Users/mertnuhoglu/.gnupg/pubring.gpg ------------------------------------- pub 4096R/CB3AF6E6 2015-12-24 [...
4
votes
1answer
227 views

Why do so many PGP public keys begin with mQINBF?

Why do so many PGP public keys begin with mQINBF? I am just curious.
1
vote
2answers
229 views

key usage for offline gnupg master key

I've been reading some articles about using an offline master key for gnupg, and I'm confused about the key usage. It seems every article has a different opinion about it. I've seen the following ...
1
vote
1answer
137 views

GPG - limit who can add and remove from pubring

I'm working on a project where we use git-secret for hiding information. This is backed by gpg, and adding people to git-secret (http://git-secret.io/) is done by adding a public key to a pubring.gpg. ...
2
votes
1answer
85 views

Why do people check the passport on key signing events?

I find the common procedure of key signing parties a little awkward: Person A presents the passport and a fingerprint "This is my key!". Person B checks the passports and decides a level of trust to ...
3
votes
1answer
3k views

gpg4win kleopatra doesn't ask for passphrase on subsequent runs

Am using gpg4win kleopatra for encrypting files. After bootup when I try to decrypt a previously encrypted file, it asks for a passphrase as expected. But after some time, if again I try decrypting a ...
2
votes
1answer
103 views

How to single key decrypt pgp encrypted mails in a multi key/multi identitiy setup?

For pgp encryption I'd like to combine short expiry terms for public signing and email encryption with (convenient) long term decryption possibilities of my mailbox mails. I'm using several mail ...
1
vote
1answer
91 views

How to find default S2K parameters in GPG

How can I find the default string-to-key parameters in GPG? I am using it in Tails.
4
votes
1answer
125 views

Using different GPG keys for encrypting emails and encrypting personal files?

I'm going to use GPG for Signing my documents Encrypting emails Encrypting my personal documents. Will it be better for security measures to use different encryption keys for 2 and 3? For 3, it ...
1
vote
1answer
140 views

problem after upgrading from GnuPG 1.4 to GnuPG 2.1

My Debian box decided to upgrade from "gnupg 1.4" to "gnupg 2.1" after some kind of security update. After this, I am no longer able to use or access any of my keys. After any gpg command, it says: ...
3
votes
2answers
2k views

How to use YubiKey through GnuPG on remote server?

I'm wondering if it is possible to use a Yubikey to unlock for example a GnuPG key on a server, so can I somehow pass the generated token from the YubiKey over SSH to the server in an easy way?
27
votes
2answers
4k views

Who owns the gpg key 4AEE18F83AFDEB23 and how did it sign a commit in my GitHub repo?

This commit in my GiHub repo is signed by a key I don't recognize: https://github.com/jonathancross/jc-docs/pull/2/commits/124672699991af75dd2454831670758f08bc74ab What is going on here?
1
vote
1answer
75 views

How can I find the default KDF for my version of GPG?

I am trying to find the default KDF for my version of gpg: gpg (GnuPG) 2.2.6 libgcrypt 1.8.2 Does anyone know how?
4
votes
2answers
2k views

Yubico 4 or Nitrokey as an HSM

Would it be possible to use Yubico or Nitrokey as a HSM that is used infrequently? Both devices seem to prevent users from accessing the private key. Does this seem to be correct? How about if the ...
7
votes
1answer
2k views

GPG masterkey and subkey for encryption and signature and default keys

I am a little confused (as many others) about the concept of subkeys as related to the primary key. gpg by default (at least it seems on my system --- using RSA), upon gpg --gen-key creates a ...
-1
votes
1answer
104 views

Will this method allow EFAIL-safe sending of OpenPGP encrypted messages to otherwise EFAIL-unsafe readers?

The proposed method Brief and simplified description of the attack: Any and every single encrypted block B of the encrypted message can be surrounded by Trojan psuedo-encrypted data to give a ...
4
votes
1answer
671 views

Create certificate without private key or using USB eToken

Considering this thread: Create certificate without private key with OpenSSL I have a very similar situation. I have a USB eToken 5110 JC (Aladdin) which has an inaccessible private key, since it's ...
1
vote
1answer
68 views

Encrypt/Isolate files of the Software

We want to create a secure email client based on Thunderbird source code and looking for a method to encrypt files or to isolate files from being stolen by some malware. and to avoid infecting pc via ...
0
votes
1answer
275 views

GPG key expiration and storage

I hope I came to right place to ask about GPG. I have created secret, public, and sign keys and set expiration dates for all keys in case I lose an access to them or forget a keyphrase, etc. I have ...
-1
votes
2answers
161 views

PGP Data loss prevention for Linux endpoints

If a company allows his employees to use encryption, especially PGP encryption, it will run into trouble. Because AES128 is unbreakable, that means traffic which is routed in the intranet can't be ...
1
vote
0answers
36 views

What are direct key signatures (0x1F) usages other than for revocation?

While looking what the PGP Global Directory is, I have found that it's key has two strange signatures: pub 2048R/CA57AD7C 2004-12-06 sig dirct 4DD19F10 2014-01-21 __________ __________ [...
2
votes
2answers
912 views

With GPG, can you “decrypt” a file that hasn’t been encrypted?

In reading about asymmetric encryption a while ago, I remember reading that you could "decrypt" an unencrypted file with your private key, then others (anyone) could "encrypt" it with your public key ...
2
votes
1answer
63 views

Double signature with GPG, only validate one key

I have a file which I have signed with two GPG keys and want to validate that file trough a script. The scripts validates that the signatures are correct by checking the returned status from GPG. If ...
0
votes
1answer
51 views

Create a digital signature from another signature in gpg

Somehow I formatted the directory containing my secret key. But I still do have a sig file that was created using that key. Is it possible to somehow re-engineer the secret key from that? Or can I ...
0
votes
1answer
204 views

How to force GPG to use a Keycard when it is available

I have a yubikey (with PGP smartcard function) with my PGP key on it. I did not replace the private key on my main PC with a stub key as keytocard does by default, so I still can use the PGP key with ...
2
votes
1answer
769 views

Is it possible to backdate the timestamp found in a .gpg file?

If I sign a file right now a check the .gpg file that's generated it will output a timestamp, is it possible to change the time when signing the file? ➜ Downloads gpg --verify cache.html.gpg gpg: ...
2
votes
2answers
646 views

How does gpg decryption command know which key in a key ring to use

I don't understand how gpg command could know which key in a key ring to use for decryption. For example, a key ring may have multiple keys. When an encrypted file needs to be decrypted, we only need ...
2
votes
1answer
538 views

Is “BEGIN PGP SIGNED MESSAGE” optional to include in an armored message?

Although it's probably nitpicking, it doesn't look very cosmetically pleasing to put the BEGIN PGP SIGNED MESSAGE at the top of an email, is that header really required to parse the message and verify ...
2
votes
1answer
325 views

How do I change the expiry date of an ElGamal subkey?

I have a GPG key which has an ElGamal subkey (elg2048). Frankly, I don't remember why that is or whether I actually need it - I just have it. Now, I've just changed the expiry date of the key overall, ...
1
vote
1answer
61 views

What identifies an entity in PGP?

When a person A signs a PGP key whose uid is: "Max Anderson < max.anderson@example.com > ", so he is assuring that this key really belongs to the person whose name is Max Anderson and whose email ...
7
votes
3answers
4k views

Can I encrypt with GnuPG and decrypt with OpenSSL?

I wonder why this does not work on Linux? gpg --cipher-algo AES256 -c -o test.zip.enc test.zip Enter passphrase: openssl enc -AES-256-CBC -d -in test.zip.enc -out test.zip enter aes-256-cbc ...
3
votes
2answers
253 views

Safely decrypting an unsolicited/untrusted PGP message

I am accepting public security vulnerability reports for my website, and I publish my personal PGP (GPG) key to encourage people to encrypt their communications. Upon receiving an encrypted message, ...
2
votes
1answer
277 views

Can I restore gpg private key from raw data to enigmail?

I have recovered data from my local storage. The most valuable for me was to recover the private gpg key. I have found it in raw data files, I did delimitation based on the headers and footers. Now I ...
2
votes
1answer
77 views

Is there a maximum for the number of certifications on a PGP public key

My question is about openPGP and the GnuPG implementation in particular. The web of trust idea seems to have your public keys signed by those who meticulously verify it. So when someone does this ...
2
votes
1answer
75 views

Is it wise to remove redundant self-signatures from my PGP key?

I have changed expiration date of my pgp key several times. Recently I looked at it and started to worry about the mess I can see there: $ gpg --list-sigs AAAAAAAAAAAAAAAA pub 4096R/AAAAAAAA 2014-...
2
votes
0answers
134 views

Is it safe to retrieve GnuPG public/secret key with fs in Node.js?

So there is a Node.js package openpgp which is available for signing documents with GPG, but it requires public/secret key. We all know putting key right into the file is dangerous and not recommend ...
1
vote
0answers
819 views

How to verify certificate fingerprint? [closed]

I downloaded Veracrypt and its sig file. I go ahead and import it into Kleopatra to verify it (using Windows gpg4win). Now i reach this step: It asks me whether i have verified the fingerprint. How ...
1
vote
0answers
30 views

GPG RSA Authenticity Mechanism Minimum Requirement

The GPG/PGP based RSA authenticity signing mechanism is based on 3 parts to ensure authenticity: the public key the signature the fingerprint of the public key Assuming that the author keeps his ...
6
votes
1answer
467 views

Forward secrecy with GnuPG

I'd like to know how to implement forward secrecy using GnuPG, and I presume I need some kind of authenticated key exchange. Assuming that I have the following working already: Alice and Bob have ...
-2
votes
1answer
193 views

PGP private key and decryption issues

I have created a private and public key set and encrypted a message to a friend with their public key. I then turned off my machine, and since it is not in persistence mode, my keys were deleted, but ...
31
votes
4answers
44k views

gpg --encrypt fails

When trying to encrypt files, I get the following error in KGpg editor window: The encryption failed with error code 2 On the command line I get: $ gpg --list-keys /home/user/.gnupg/pubring.gpg -...
0
votes
1answer
138 views

How to use master password for GPG encryption after setting up Yubikey? [closed]

I just setup my Yubikey 4 on Windows. How can I use master password for signing/encrypting when I don't have my key? If the yubikey is not inserted I get an error "Please insert the card with serial ...
2
votes
1answer
486 views

Best way to implement PGP company wide [closed]

What is the best way to implement PGP/GnuPGP company wide? Go to each users workstation, create the keys, upload the public key, and move on to the next?
4
votes
1answer
583 views

Revoking signing keys: do they still work afterwards?

Scenario: I have multiple signing subkeys, each for every portable device (i.e laptop). None of them have private master key (it is deleted following the tips in Alex Cabal's post. One of the devices ...
2
votes
1answer
2k views

How can I check the integrity of a Bitcoin tarball with GPG?

I plan on running several so called Full node servers with bitcoind (Bitcoin Core daemon). All servers are running GNU/Linux Debian Stretch. How do I verify integrity of the downloaded tarball with ...