GNU Privacy Guard (GnuPG or GPG) is a GPL Licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF standards track specification of OpenPGP.

learn more… | top users | synonyms (1)

0
votes
0answers
11 views

rpm signing error rpmMkTemp failed

I'm running into this error when signing an rpm file. I've not got a whole lot to go on as you can see, and google seems to have come up empty. I'm stumped ! Does anyone know what causes it ? I'm ...
2
votes
1answer
11 views

Is the PGP version number required?

ASCII-armored GnuPG data usually has a Version header: -----BEGIN PGP MESSAGE----- Version: GnuPG v2.0.22 (GNU/Linux) hQIMAxfkjOs8YMF+AQ//e9yWfwKBddUX/1YfghKfF/xJhuirYmAdxhsLaO5Fj0QJ ...
1
vote
1answer
12 views

How are detached signatures used to verify a file's integrity and authenticity?

I understand that the detached signature is generated by the signer's private key and that you use the signer's public key to verify the downloaded file. e.g. gpg --verify package_name.asc The ...
3
votes
2answers
26 views

Should I use a gpg subkey for work (not so secure) environment?

I'm trying to use gpg to encrypt and sign messages, but I use different computers (desktop, notebook, office) so I'm not sure how to manage private keys in those environments. Should I use a copy of ...
1
vote
0answers
8 views

Add a UID to your GPG key, but don't make it primary

Whenever you add a new UID to your keypair, GPG will automatically make it primary. Is there any way to add a key that isn't immediately marked as primary? Although I could manually change the ...
0
votes
1answer
18 views

python-gnupg search_keys() returns different result when run as root

I have a python script that needs to be run as root (to access framebuffer on a raspberry pi with a small touchscreen). This script also needs to search for keys on a keyserver. To achieve this, I am ...
0
votes
1answer
39 views

Unable to send pgp key to keyserver

Trying to follow the steps in http://packaging.ubuntu.com/singlehtml/ to create a deb package for some software... I had to start by generating a GPG key $ gpg --gen-key Then upload the public ...
1
vote
1answer
17 views

How should GnuPG's `--desig-revoke` command be used?

How should the GnuPG command --desig-revoke be used, and in which cases should you use it? According to the manual: --desig-revoke name Generate a designated revocation certificate for a key. ...
1
vote
1answer
33 views

GnuPG / OpenGPG: Recovering public key from private key

I know that the public SSH key can be recovered from the private using ssh-keygen -y. How can a (deleted) public key be recovered from the private key in GPG (preferably in a way that is OpenGPG ...
0
votes
2answers
15 views

What file extensions should be used on GPG generated output?

In Linux file name extensions are irrelevant, but on a Windows system, many GPG users use GUI applications rather than the command line. They may want to be able to double click on an encrypted file, ...
0
votes
1answer
24 views

Unable to use “transient-key” when generating a batch GPG key

I'm generating a few test keys, but I can't seem to use the %no-protection and %transient-key flags. I get the following message: $ cat dwight | gpg --homedir "dwight-keys" --gen-key --batch gpg: ...
2
votes
1answer
20 views

gpg: Can't check signature (FreeBSD)

I follow this SA https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc [FreeBSD 10.0] <= My FreeBSD version fetch <link>/openssl-10.0.patch fetch ...
1
vote
1answer
28 views

How much information is included with a GPG signature?

Let's say you verify someone's signature with GPG: $ gpg --decrypt statement.txt.sig "I am not a crook." gpg: Signature made 17 Nov 1973 9:31:50 AM CDT using RSA key ID 92861D99 gpg: Good signature ...
0
votes
1answer
46 views

PGP Public Key expiration GPG

I'm in the process of importing a public key from a business partner. We have always use GPG and never had a problem. I’m importing this key using: gpg --import "FileName.asc" gpg: key AC260214: ...
0
votes
1answer
17 views

How to update PGP public key after new uid is added?

I have a PGP keypair to which I just added a new uid. Is the previously exported public key and private key still valid? If I export a new public key with armor, it does look different and longer ...
3
votes
2answers
45 views

gpg2 - no option to select aes block cipher and outdated use agent?

With OpenSSL, I can select a what type of block cipher to use for encrypting a file. For example, if I want to encrypt a file with AES256 CBC block cipher mode: openssl aes-256-cbc -a -salt -pass ...
0
votes
1answer
19 views

Associate specific PGP subkeys with specific UIDs

It seems to me like PGP keys contain a "collection" of UIDs and also contain a collection of subkeys. Moreover, there doesn't seem to be a way to add comments to a subkey. Is there any way for me to ...
0
votes
1answer
43 views

How can I keep my gpg private key on removable media in Windows?

I use GPG through Cygwin on Windows. I don't want to store my key on my laptop as a convenient file for a casual tech-savvy thief to grab if they steal the machine, so I'd like to keep it on a USB ...
2
votes
1answer
37 views

How to merge several detached signatures from different people into one?

A group of people wants to publish a file and they all want to digitally sign the file as different recipients of the file will have different chains of trust. For simplicity, it's desired that there ...
1
vote
2answers
26 views

Do I have to export public GnuPG keys as well when exporting the private ones?

I created my GnuPG keys. They show up in my keys repository. Now I want to export my secret key and import it into another computer so I could use it on that computer (for example my laptop). Do I ...
0
votes
1answer
56 views

Why is the FSF's GnuPG bot “Edward” unable to decrypt my encrypted emails?

I am facing a problem when attempting to send an encrypted email via Enigmail (Thunderbird) in Ubuntu 14.04. I was following the Email Self-Defense guide https://emailselfdefense.fsf.org/en/ ...
1
vote
0answers
118 views

Crossplatform encrypted file containers [closed]

Since the sudden (and strange...) stop of TrueCrypt, I am looking in vain for a cross-platform (Windows/Linux essentially) encryption software that manage file containers (or equivalent) in a similar ...
4
votes
2answers
34 views

Confirming a GPG key as mine

I imported a public/private key pair generated on my desktop into my laptop. Now however I get this issue when I try to encrypt a file for my own use: gpg -e -r "Jonathan Max Barnes" random-text-file ...
0
votes
0answers
14 views

gpg keyserver duplicates signatures on my key

I created a new GPG key (rsa + rsa subkey), let's call it key1, and uploaded it to the keyserver. It has two uids. Later I signed this new key with another key (let's call it key2), and uploaded the ...
2
votes
1answer
41 views

How to generate an OpenPGP Signed Message with GPG?

In RFC 4880, there is section 11.3 which specifies the different formats an OpenPGP Message block can have: 11.3. OpenPGP Messages An OpenPGP message is a packet or sequence of packets that ...
1
vote
1answer
15 views

What is introducing quoted-printables into my PGP-encrypted emails?

I've set up PGP email encryption on two computers using Enigmail and Thunderbird. One is running Mac OS X, and the other is running Arch Linux. Everything functions fine from within Thunderbird on ...
0
votes
0answers
38 views

How the private key is using for generating signture?

I have used Luna SA HSM device following the below configuration for Luna client setup: Client Configuration: Luna SA Client v5.3.0 Client System: OS :Windows 8.1, 64-bit machine I have created ...
0
votes
0answers
36 views

gpgsm --export-secret-key-p12 command showing error message “No Secret key”

I have installed the gpg4win version 2.2. I have Successfully created the certificate using gpgsm --gen-key > test.p10 I want to export the created certificate request into pkcs12 format with ...
1
vote
1answer
108 views

Why does GPG Encrypt/Decrypt fail between different versions of GnuPG?

I have 2 servers that will be passing data between them, one is Ubuntu and the other is Red Hat. Using the already installed versions on each, Ubuntu is 12.04 with gnuPG 1.4.x and Red Hat is ...
2
votes
4answers
139 views

How do I verify a GPG symmetrically encrypted file?

I created an encrypted file with symmetric encryption. gpg -c 50GBfile Now I want to delete the original. Before I delete the original, I want to verify the integrity of the encrypted file. ...
0
votes
1answer
20 views

What's the standard (or accepted) method to use several encryption subkeys in GPG?

I would like to create for myself an offline main key with three subkeys. for signing for encryption on standard computer which I hope to be able to secure better for encryption (and consequently ...
0
votes
1answer
31 views

Script not working when run automatically

This script (parts of it) runs perfectly when invoked manually from the Terminal: #!/bin/bash [[ "`ps -e | grep -c $(basename $0)`" -gt "2" ]] && echo -e "`basename $0`: Mutiple instances ...
0
votes
1answer
101 views

Make SSH/gpg-agent not ask for passphrase for key it's not going to use

I have two SSH keys. id_rsa is my normal one with a passphrase, and id_lynx has no passphrase because I want it to be usable in a cron job (the user it logs in as is fairly restricted, don't worry ...
0
votes
2answers
70 views

Is there a way to revoke a GPG encryption key?

OK, so as I understand it, the key revocation mechanism is used to revoke a signing key in your web of trust: so you say to other GPG users that your previously-used identity has been compromised, and ...
2
votes
1answer
377 views

What is a GPG key ID?

After some google-fu and poking around on here, I'm still not clear on this. I understand the utility of the key block itself, and of a hash of the key, but I don't know why additional information ...
0
votes
1answer
250 views

How to ASCII-armor my public key without installing GPG?

I would like to upload my public key to a key server, but I already have my key infrastructure in place without GPG and I don't want to install extra software I don't need. Is there an easy way to ...
0
votes
1answer
149 views

Using systemd to start gpg-agent?

I've read up a little on systemd, but still can't quite figure out how to use it to automatically start gpg-agent on login. I gather I'd use systemctl --user, but constructing the gpg-agent.service ...
2
votes
0answers
74 views

How to set gpg2 as default implementation of gpg on debian?

My debian installation came with gpg 1.4.12, while I would like to be running 2.0.19. The former comes in the package gnupg and the latter gnupg2. They can coexist peacefully as far as I know, but I ...
0
votes
1answer
153 views

Errors generating gpg keypair

I posted this originally on stackoverflow, but was told that it was offtopic and this would be the better place to post it, so I am reposting it here and deleting my original topic. I have a rather ...
0
votes
2answers
159 views

How to handle Multiple OfflineImap with Gpg stored Passwords?

I am using Offlineimap with gpgp stored passwords. Pretty similar to this setup https://unix.stackexchange.com/questions/44214/encrypt-offlineimap-password My issue is this. I have multiple email ...
0
votes
0answers
37 views

What is the default symmetric algorithm for encrypting the secret key in GnuPG 1.4.11?

When generating a GPG key, you are asked for a pass-phrase that will correspond to the private key (or keys to be exact). My question is what is the default crypto algorithm for encrypting your key ...
5
votes
1answer
453 views

Programmatically determining who signed a file

I want to programmatically determine who has signed a GPG clear sign file. Running gpg --verify will tell me this, but it does so in a human-readable format. Is it possible to get this result in a ...
0
votes
1answer
798 views

Use PGP key with MS Outlook 2010

How do I use a PGP/GNUPG key to encrypt/decrypt emails sent using MS Outlook 2010? I understand the basics of PGP/GNUPG, and have a public/private key setup. I just want to know how to use this with ...
2
votes
1answer
166 views

Pass doesn't ask for passphrase

I am using pass (http://www.zx2c4.com/projects/password-store/) on ubuntu 12.04. Process: apt-get install pass gpg --gen-key pass init <generated gpg id> pass insert test pass test After the ...
1
vote
1answer
123 views

GPG fails to retrieve passphrase

When trying to do gpg (version 1) keygen on archlinux I get the following errors after details (other than passphrase) have been entered: You need a Passphrase to protect your secret key. pinentry: ...
0
votes
1answer
259 views

File Encrypted using Kleopetra, started showing error while decrypting?

I encrypted one of my text files with Kleopatra, which I have been using for 4 months. It was working fine, but since two weeks I'm getting an error when decrypting the file: Can not connect to GnuPG ...
4
votes
1answer
610 views

gpg with gpg-agent never asks for passphrase

Without gpg-agent running, I can enter my passphrase to sign things: $ echo 123 | gpg -s You need a passphrase to unlock the secret key for user: "Mr. Ops <ops@bxxx.com>" 2048-bit RSA key, ID ...
0
votes
0answers
34 views

Programmatically Determine if gpg-agent Will Ask for Passphrase

I have gpg-agent running with a cached passphrase for an hour or so. I encrypt my email account passwords for offlineimap IMAP sync utility and have the script pass in the passwords by decrypting ...
1
vote
1answer
42 views

Importing GPG Key

I am trying to import a GPG key to verify a download. I have never done this before, so bare with me. The Key ID is 4203454C. Let me know if you need any more information. What is the process for GPG ...
1
vote
1answer
120 views

Unable to sign message with Enigmail - No passphrase prompt

I have Thunderbird 24.4.0 and Enigmail 1.5.2 installed. My OS is Kubuntu 13.10 x64. gpg-agent version 2.0.20-1ubuntu3 gnupg version 1.4.14-1ubuntu2.1 pinentry-qt4 version 0.8.1-1ubuntu2 kgpg version ...