Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

After running gpg --gen-key to make a key for file encryption. Eventually I get to this part:

"GnuPG needs to construct a user ID to identify your key.

Real name: "

I don't fully understand how this works. If I use my name to sign my key, can my name be recovered from a file I've encrypted?

share|improve this question
add comment

3 Answers

up vote 1 down vote accepted

The UID (your name/email pair) is not related to encryption or signing, it is merely a label for others to know who owns this key. When signing or encrypting, only 64-bit key IDs are stored in the message. You also can have multiple UIDs on a single key (most people use a single key for all their mailboxes).

If you only encrypt a file but do not sign it, then your key ID won't be stored anywhere in the encrypted data. Only the recipient key IDs will be present.

But if you sign a file, then you'll be shown as its signer.

share|improve this answer
add comment

If you do encryption only, you can also use the --hidden-recipient option, to prevent inclusion of the key ID of the recipient (or when you encrypt files to yourself). You will however have to specify the key by hand when you want to decrypt.

share|improve this answer
add comment

Short answer: Yes, this has the potential to compromise anonymity.

Of course there is no need to enter your real name or email adress in the key.

The userID will be in the public part of your key. This part has a good chance to get public (therefor the name "public key").

To understand and mitigate the risks you should do some reading on how GPG works, before using it in a setting that needs really anonymity.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.