Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I haven't used PGP in ages and since then I most likely lost the keys. I want to revoke them regardless and I do have the revocation keys printed in paper. I already typed and proof-read them a couple of times, now what?

I tried just importing them as keys and after I got rid of checksum errors I get this error from

Add failed: Malformed Key --- unexpected packet type and/or order of packets

I downloaded the GPGtools for MacOSX and downloaded my public keys, but it doesn't do anything when I try to import the revocations into it.

How should I revoke them?

share|improve this question

The easiest way in this case is probably using the command line. Here's what you need to get started:

  1. A copy of the public key (from the key server, for example) saved to a file, let's say

  2. A copy of the revocation certificate, saved to a file, let's say revoke.txt

  3. Some form of gpg. If you have installed GPGtools, you should be set to go.

First: import the public key into your keyring

$ gpg --import

The computer says:

gpg: key 07F04249: public key "Not my key <>" imported
gpg: Total number processed: 1
gpg:               imported: 1

If you want to check your work, you can list the keys that have been imported:

$ gpg --list-keys

The computer says:

pub   1024D/07F04249 2011-11-08
uid                  Not my key <>
sub   2048g/82DDA00F 2011-11-08

Second: import the revocation certificate

$ gpg --import revoke.txt

The computer says:

gpg: key 07F04249: "Not my key <>" revocation
     certificate imported
gpg: Total number processed: 1
gpg:    new key revocations: 1

Check your work again:

gpg --list-keys

The computer replies:

pub   1024D/07F04249 2011-11-08 [revoked: 2011-11-08]
uid                  Not my key <>

Finally: Upload the revoked key

gpg --keyserver --send-keys 07F04249

Of course, replace 07F04249 with the id of your public key (which you can see in the output of the list-keys command).

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .