GNU Privacy Guard (GnuPG or GPG) is a GPL Licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF standards track specification of OpenPGP.

learn more… | top users | synonyms (1)

3
votes
1answer
10 views

How to generate the revocation certificate after being made a revoker with GnuPG

I read the "How should GnuPG's `--desig-revoke` command be used?" question/answer, so now I know when to use the --desig-revoke. So, I have two different private keys -- one at work (WORKWORK), ...
1
vote
0answers
25 views

Using OpenSSL to generate encryption key for Outlook users

A private web application needs to receive encrypted email from perhaps 20 known users. How can I use OpenSSL to generate a valid encryption certificate that Outlook users can import and use to ...
2
votes
3answers
29 views

GPG public key created with GnuPG is rejected by MS Outlook 2010, why?

I created a GPG keypair with GnuPG on the CentOS 7 command line and I have exported the public key into a .asc file and successfully used that public key to encrypt emails sent from another email ...
6
votes
2answers
1k views

How long would it take to break a 1024 bit OpenPGP encrypted email?

For WPA, there are calculators to determine the time needed to crack a passphrase, but I have found nothing for OpenPGP. How long would it take to break a 1024 bit OpenPGP encrypted email (depending ...
0
votes
0answers
16 views

Export P12 from GnuPG for PDF signing field

It seems to be possible to export a PGP .asc file to .p12, but I'm unable to use the generated .p12 file for a signature field in a PDF file. Is there a way to export it so it's usable for that field, ...
1
vote
1answer
9 views

How to have a different pass phrase for a gpg subkey?

I need to automate a deployment process and the tool will sign the release artifacts automatically. My key ring has a primary key which I use only for creating subkeys, and two subkeys. One subkey for ...
2
votes
1answer
11 views

Explain gpg --list-keys output

I run gpg --list-keys and it shows me the keys present in the keyring: /home/kshitiz/.gnupg/pubring.gpg -------------------------------- pub 4096R/8F64D7E0 2015-02-18 uid Kshitiz ...
1
vote
1answer
20 views

How to automatically delete the original files after encrypting with GPG?

I need to use GPG on a folder with a lot of files and subfolders. I can use "find" + "gpg" for that and I can encrypt all the files but my issue is GPG does not delete the original file after ...
0
votes
1answer
17 views

How can I send an email using a GPG public key?

I would like to send an email (on Windows), which I would like to encrypt using a GPG public key. I tried to use a Thunderbird plugin, but it requires both the public and the private key. But I have ...
0
votes
1answer
10 views

GPG truncating lines

I'm attempting to send a signed file to a recipient. When they received the file, they noticed that some of the lines had been truncated to 80 characters. If I look at the original file, it looks ...
0
votes
1answer
20 views

gpg-keyring-daemon apparently caches passphrase for ever (across reboots)

I have been decrypting my GPG-encrypted files for years. My private key was encrypted with a passphrase. Upon attempting to decrypt, a dialog box appeared, asking for my passphrase. This only happened ...
0
votes
1answer
23 views

gpg-agent is not requested in git calls

In git commits (gpg), git command always asks for passphrase while gpg-agent is running. I launch gpg-agent with $ eval `gpg-agent -s --enable-ssh-support --daemon --write-env-file ...
0
votes
0answers
18 views

gpg-agent rejects correct password for ssh key

I'm trying to connect to my ssh server with my private key (~/.ssh/id_rsa) which is protected by a passphrase. I set up gpg-agent to cache the passphrase. When I get to the pinentry, it won't accept ...
1
vote
1answer
23 views

How to let gpg-agent confirm each key usage

When running gpg-agent as part of my login session each program I run has access to my (possibly) unlocked PGP-key. It might be paranoid, but I want to get confirmation about each key usage, so I wish ...
0
votes
1answer
25 views

are gpg keyservers synchronised with each other? pgp mit server too?

A question regarding the gpg keyservers: Are the servers found in the list here synchronised with each other?: http://www.gpg4win.org/doc/de/gpg4win-compendium_22.html So uploading a pub key to one ...
0
votes
1answer
24 views

gpg key, submit to keyserver and find again using webbrowser

I am using Kleopatra to create gpg keys (gpg4win). However, I also want to use openkeychain on android. openkeychain uses pgp.mit.edu as keyserver, Kleopatra uses keys.gnupg.net keyserver. How can I ...
0
votes
1answer
35 views

How to generate a gpg4win keypair without passphrase?

I would like to generate a gpg keypair using gpg4win. I am at the point where a personal OpenPGP key pair is generated, but: How can I generate a keypair using gpg4win with no passphrase? The private ...
0
votes
0answers
30 views

Verifying GnuPG itself

Following the steps indicated in http://www.deepdotweb.co/jolly-rogers-security-guide-for-beginners/how-to-verify-your-downloaded-files-are-authentic/ , which first verifies that the verification ...
2
votes
2answers
27 views

How to replicate GPA's Sign and Compress option on command line in Windows

As the title says, I need to replicate GPA's "Sign and Compress" option on the command line. I'm trying to automate some encryption of files for submission to a bank and the instructions they gave me ...
0
votes
1answer
38 views

GnuPG in Thunderbird w/ Enigmail on dual OS machine

I am running a computer with two OS, namely Ubuntu 14.04 and Windows. I'd like to write encypted Mails from both OS, which runs well (i.e., every program needed is installed). The only problem I have ...
1
vote
0answers
81 views

How can OpenSSL Secret Keys be imported into GnuPG?

I want to import the secret key from a OpenSSL x509 (Client) Certificate into GnuPG (NOT gpgsm for S/MIME!) I have seen there are utilities to convert GPG Keys into SSH Format [1] and even create ...
0
votes
0answers
41 views

How to properly check signature with opkg

I would like to use a GPG key to verify packages before installing on my embedded system. I see the option check_signature 1 in the default opkg.conf file, but cannot find any information on how to ...
0
votes
1answer
49 views

Reading HTML mail with PGP/Mime encryption in Thunderbird with Enigmail

Yesterday I asked how to configure Thunderbird with Enigmail to use PGP/Mime encryption for signing emails. This works, but I noticed one problem. I don't know if this is common to Thunderbird, or ...
1
vote
1answer
80 views

Use PGP/Mime with Thunderbird and Enigmail

I would like to sign all my mail with my PGP key, and no matter if the recipient uses PGP or not, it should not confuse them. Last week I read a discussion that inline PGP is not good pratice, and I ...
0
votes
2answers
130 views

How to get GPG working with Outlook 2013?

My OS is Windows 8.1 Update 1 x64. I have Outlook 2013 and just installed GPG4Win (latest, 2.2.2, full version). When I now launch Outlook 2013, I still don't see any UI/options to setup certificates ...
0
votes
1answer
26 views

How to remove Version Information from Encrypted OpenPGP message in Windows?

I am using Keybase.io with GnuPG on Windows 8.1 via Powershell. I am wondering how to remove the Version line from the encrypted and or signed message. Here is example if what I mean: -----BEGIN PGP ...
1
vote
1answer
42 views

how to strip a subkey from a gpg key?

I am trying to remove the subkey from my OpenPGP key. Here is the current state: gpg> uid 1 pub 3072R/C08D1F4B created: 2014-01-05 expires: never usage: SCEA trust: ...
0
votes
1answer
33 views

Why does GPG not like this encrypted message?

I had the following encrypted message laying around on my computer from back when I was playing around with GPG (and in this case, Enigmail) -----BEGIN PGP MESSAGE----- Charset: ISO-8859-15 Version: ...
2
votes
1answer
38 views

pgp: using subkey to sign, but should I publicize the fingerprints of both my master key and subkey?

I used gpg to create a key pair. I understand that a master key for signing only and a sub key for encryption only are generated. Following the Debian Wiki, I created a sub key for signing for better ...
1
vote
1answer
49 views

GPG Symmetric Encryption: No Secret Key

Using gpg 2.0.22 I do the following as user A: A@~: touch tmp A@~: gpg -c --cipher-algo AES256 tmp A@~: chmod 777 tmp.gpg A@~: su -l root -c 'mv tmp.gpg /' Then, as user B: B@~: gpg /tmp.gpg Now ...
2
votes
1answer
101 views

Do GPG and GPGSM use the same key database?

I need to export one of my GPG keys as a PKCS12 key/certificate. gpg is incapable of doing this, but the tool gpgsm is. However, entering gpgsm -o <file> --export-secret-key-p12 <key-id> ...
2
votes
1answer
25 views

Why is gpg --list-keys sometimes printing subkeys, sometimes not?

This question occured in the comments of "How do I display the usage flags for my encryption keys in a less hackish way?", and seems worth being answered in a Q&A form as the answer is not ...
2
votes
1answer
29 views

How do I display the usage flags for my encryption keys in a less hackish way?

I am trying to educate myself on the use of encryption keys and I've been experimenting with this old Linus Torvalds’ key that I found 956EB7BF449FA3AB. I am interested to display the usage flags but ...
1
vote
1answer
20 views

How to hide Gnupg passwords when doing back ups with Duplicity?

I have been following some tutorials for Duplicity back ups. It is all fine except that everyone seems to be putting their Gnupg passwords in scripts or plain text files which sounds crazy stupid ...
0
votes
1answer
88 views

rpm signing error rpmMkTemp failed

I'm running into this error when signing an rpm file. I've not got a whole lot to go on as you can see, and google seems to have come up empty. I'm stumped ! Does anyone know what causes it ? I'm ...
3
votes
1answer
20 views

Is the PGP version number required?

ASCII-armored GnuPG data usually has a Version header: -----BEGIN PGP MESSAGE----- Version: GnuPG v2.0.22 (GNU/Linux) hQIMAxfkjOs8YMF+AQ//e9yWfwKBddUX/1YfghKfF/xJhuirYmAdxhsLaO5Fj0QJ ...
1
vote
1answer
64 views

How are detached signatures used to verify a file's integrity and authenticity?

I understand that the detached signature is generated by the signer's private key and that you use the signer's public key to verify the downloaded file. e.g. gpg --verify package_name.asc The ...
3
votes
2answers
83 views

Should I use a gpg subkey for work (not so secure) environment?

I'm trying to use gpg to encrypt and sign messages, but I use different computers (desktop, notebook, office) so I'm not sure how to manage private keys in those environments. Should I use a copy of ...
1
vote
0answers
12 views

Add a UID to your GPG key, but don't make it primary

Whenever you add a new UID to your keypair, GPG will automatically make it primary. Is there any way to add a key that isn't immediately marked as primary? Although I could manually change the ...
0
votes
1answer
36 views

python-gnupg search_keys() returns different result when run as root

I have a python script that needs to be run as root (to access framebuffer on a raspberry pi with a small touchscreen). This script also needs to search for keys on a keyserver. To achieve this, I am ...
0
votes
1answer
428 views

Unable to send pgp key to keyserver

Trying to follow the steps in http://packaging.ubuntu.com/singlehtml/ to create a deb package for some software... I had to start by generating a GPG key $ gpg --gen-key Then upload the public ...
2
votes
2answers
47 views

How should GnuPG's `--desig-revoke` command be used?

How should the GnuPG command --desig-revoke be used, and in which cases should you use it? According to the manual: --desig-revoke name Generate a designated revocation certificate for a key. ...
1
vote
1answer
86 views

GnuPG / OpenGPG: Recovering public key from private key

I know that the public SSH key can be recovered from the private using ssh-keygen -y. How can a (deleted) public key be recovered from the private key in GPG (preferably in a way that is OpenGPG ...
0
votes
2answers
21 views

What file extensions should be used on GPG generated output?

In Linux file name extensions are irrelevant, but on a Windows system, many GPG users use GUI applications rather than the command line. They may want to be able to double click on an encrypted file, ...
0
votes
1answer
57 views

Unable to use “transient-key” when generating a batch GPG key

I'm generating a few test keys, but I can't seem to use the %no-protection and %transient-key flags. I get the following message: $ cat dwight | gpg --homedir "dwight-keys" --gen-key --batch gpg: ...
2
votes
1answer
100 views

gpg: Can't check signature (FreeBSD)

I follow this SA https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc [FreeBSD 10.0] <= My FreeBSD version fetch <link>/openssl-10.0.patch fetch ...
1
vote
1answer
39 views

How much information is included with a GPG signature?

Let's say you verify someone's signature with GPG: $ gpg --decrypt statement.txt.sig "I am not a crook." gpg: Signature made 17 Nov 1973 9:31:50 AM CDT using RSA key ID 92861D99 gpg: Good signature ...
0
votes
1answer
90 views

PGP Public Key expiration GPG

I'm in the process of importing a public key from a business partner. We have always use GPG and never had a problem. I’m importing this key using: gpg --import "FileName.asc" gpg: key AC260214: ...
0
votes
1answer
32 views

How to update PGP public key after new uid is added?

I have a PGP keypair to which I just added a new uid. Is the previously exported public key and private key still valid? If I export a new public key with armor, it does look different and longer ...
3
votes
2answers
103 views

gpg2 - no option to select aes block cipher and outdated use agent?

With OpenSSL, I can select a what type of block cipher to use for encrypting a file. For example, if I want to encrypt a file with AES256 CBC block cipher mode: openssl aes-256-cbc -a -salt -pass ...