Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I haven't used PGP in ages and since then I most likely lost the keys. I want to revoke them regardless and I do have the revocation keys printed in paper. I already typed and proof-read them a couple of times, now what?

I tried just importing them as keys and after I got rid of checksum errors I get this error from

Add failed: Malformed Key --- unexpected packet type and/or order of packets

I downloaded the GPGtools for MacOSX and downloaded my public keys, but it doesn't do anything when I try to import the revocations into it.

How should I revoke them?

share|improve this question

The easiest way in this case is probably using the command line. Here's what you need to get started:

  1. A copy of the public key (from the key server, for example) saved to a file, let's say

  2. A copy of the revocation certificate, saved to a file, let's say revoke.txt

  3. Some form of gpg. If you have installed GPGtools, you should be set to go.

First: import the public key into your keyring

$ gpg --import

The computer says:

gpg: key 07F04249: public key "Not my key <>" imported
gpg: Total number processed: 1
gpg:               imported: 1

If you want to check your work, you can list the keys that have been imported:

$ gpg --list-keys

The computer says:

pub   1024D/07F04249 2011-11-08
uid                  Not my key <>
sub   2048g/82DDA00F 2011-11-08

Second: import the revocation certificate

$ gpg --import revoke.txt

The computer says:

gpg: key 07F04249: "Not my key <>" revocation
     certificate imported
gpg: Total number processed: 1
gpg:    new key revocations: 1

Check your work again:

gpg --list-keys

The computer replies:

pub   1024D/07F04249 2011-11-08 [revoked: 2011-11-08]
uid                  Not my key <>

Finally: Upload the revoked key

gpg --keyserver --send-keys 07F04249

Of course, replace 07F04249 with the id of your public key (which you can see in the output of the list-keys command).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.