GNU Privacy Guard (GnuPG or GPG) is a GPL Licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF standards track specification of OpenPGP.

learn more… | top users | synonyms (1)

0
votes
0answers
9 views

Verifying GnuPG itself

Following the steps indicated in http://www.deepdotweb.co/jolly-rogers-security-guide-for-beginners/how-to-verify-your-downloaded-files-are-authentic/ , which first verifies that the verification ...
-1
votes
0answers
6 views

GnuPG (GPG4Win) hangs on --gen-key after “You need a passphrase…”

I'm attempting to generate a key on GnuPG on a windows machine. gpg --version gpg (GnuPG) 2.0.26 (Gpg4Win 2.2.2) libgcrypt 1.6.1 When using --gen-key in the windows command line (cmd.exe), the key ...
2
votes
2answers
20 views

How to replicate GPA's Sign and Compress option on command line in Windows

As the title says, I need to replicate GPA's "Sign and Compress" option on the command line. I'm trying to automate some encryption of files for submission to a bank and the instructions they gave me ...
0
votes
1answer
19 views

GnuPG in Thunderbird w/ Enigmail on dual OS machine

I am running a computer with two OS, namely Ubuntu 14.04 and Windows. I'd like to write encypted Mails from both OS, which runs well (i.e., every program needed is installed). The only problem I have ...
1
vote
0answers
19 views

How can OpenSSL Secret Keys be imported into GnuPG?

I want to import the secret key from a OpenSSL x509 (Client) Certificate into GnuPG (NOT gpgsm for S/MIME!) I have seen there are utilities to convert GPG Keys into SSH Format [1] and even create ...
0
votes
0answers
13 views

How to properly check signature with opkg

I would like to use a GPG key to verify packages before installing on my embedded system. I see the option check_signature 1 in the default opkg.conf file, but cannot find any information on how to ...
0
votes
1answer
20 views

Reading HTML mail with PGP/Mime encryption in Thunderbird with Enigmail

Yesterday I asked how to configure Thunderbird with Enigmail to use PGP/Mime encryption for signing emails. This works, but I noticed one problem. I don't know if this is common to Thunderbird, or ...
1
vote
1answer
20 views

Use PGP/Mime with Thunderbird and Enigmail

I would like to sign all my mail with my PGP key, and no matter if the recipient uses PGP or not, it should not confuse them. Last week I read a discussion that inline PGP is not good pratice, and I ...
0
votes
2answers
37 views

How to get GPG working with Outlook 2013?

My OS is Windows 8.1 Update 1 x64. I have Outlook 2013 and just installed GPG4Win (latest, 2.2.2, full version). When I now launch Outlook 2013, I still don't see any UI/options to setup certificates ...
0
votes
1answer
18 views

How to remove Version Information from Encrypted OpenPGP message in Windows?

I am using Keybase.io with GnuPG on Windows 8.1 via Powershell. I am wondering how to remove the Version line from the encrypted and or signed message. Here is example if what I mean: -----BEGIN PGP ...
1
vote
1answer
27 views

how to strip a subkey from a gpg key?

I am trying to remove the subkey from my OpenPGP key. Here is the current state: gpg> uid 1 pub 3072R/C08D1F4B created: 2014-01-05 expires: never usage: SCEA trust: ...
0
votes
1answer
24 views

Why does GPG not like this encrypted message?

I had the following encrypted message laying around on my computer from back when I was playing around with GPG (and in this case, Enigmail) -----BEGIN PGP MESSAGE----- Charset: ISO-8859-15 Version: ...
1
vote
1answer
18 views

pgp: using subkey to sign, but should I publicize the fingerprints of both my master key and subkey?

I used gpg to create a key pair. I understand that a master key for signing only and a sub key for encryption only are generated. Following the Debian Wiki, I created a sub key for signing for better ...
1
vote
1answer
29 views

GPG Symmetric Encryption: No Secret Key

Using gpg 2.0.22 I do the following as user A: A@~: touch tmp A@~: gpg -c --cipher-algo AES256 tmp A@~: chmod 777 tmp.gpg A@~: su -l root -c 'mv tmp.gpg /' Then, as user B: B@~: gpg /tmp.gpg Now ...
1
vote
1answer
44 views

Do GPG and GPGSM use the same key database?

I need to export one of my GPG keys as a PKCS12 key/certificate. gpg is incapable of doing this, but the tool gpgsm is. However, entering gpgsm -o <file> --export-secret-key-p12 <key-id> ...
2
votes
1answer
17 views

Why is gpg --list-keys sometimes printing subkeys, sometimes not?

This question occured in the comments of "How do I display the usage flags for my encryption keys in a less hackish way?", and seems worth being answered in a Q&A form as the answer is not ...
2
votes
1answer
22 views

How do I display the usage flags for my encryption keys in a less hackish way?

I am trying to educate myself on the use of encryption keys and I've been experimenting with this old Linus Torvalds’ key that I found 956EB7BF449FA3AB. I am interested to display the usage flags but ...
1
vote
1answer
17 views

How to hide Gnupg passwords when doing back ups with Duplicity?

I have been following some tutorials for Duplicity back ups. It is all fine except that everyone seems to be putting their Gnupg passwords in scripts or plain text files which sounds crazy stupid ...
0
votes
1answer
60 views

rpm signing error rpmMkTemp failed

I'm running into this error when signing an rpm file. I've not got a whole lot to go on as you can see, and google seems to have come up empty. I'm stumped ! Does anyone know what causes it ? I'm ...
3
votes
1answer
17 views

Is the PGP version number required?

ASCII-armored GnuPG data usually has a Version header: -----BEGIN PGP MESSAGE----- Version: GnuPG v2.0.22 (GNU/Linux) hQIMAxfkjOs8YMF+AQ//e9yWfwKBddUX/1YfghKfF/xJhuirYmAdxhsLaO5Fj0QJ ...
1
vote
1answer
25 views

How are detached signatures used to verify a file's integrity and authenticity?

I understand that the detached signature is generated by the signer's private key and that you use the signer's public key to verify the downloaded file. e.g. gpg --verify package_name.asc The ...
3
votes
2answers
56 views

Should I use a gpg subkey for work (not so secure) environment?

I'm trying to use gpg to encrypt and sign messages, but I use different computers (desktop, notebook, office) so I'm not sure how to manage private keys in those environments. Should I use a copy of ...
1
vote
0answers
12 views

Add a UID to your GPG key, but don't make it primary

Whenever you add a new UID to your keypair, GPG will automatically make it primary. Is there any way to add a key that isn't immediately marked as primary? Although I could manually change the ...
0
votes
1answer
27 views

python-gnupg search_keys() returns different result when run as root

I have a python script that needs to be run as root (to access framebuffer on a raspberry pi with a small touchscreen). This script also needs to search for keys on a keyserver. To achieve this, I am ...
0
votes
1answer
191 views

Unable to send pgp key to keyserver

Trying to follow the steps in http://packaging.ubuntu.com/singlehtml/ to create a deb package for some software... I had to start by generating a GPG key $ gpg --gen-key Then upload the public ...
1
vote
1answer
31 views

How should GnuPG's `--desig-revoke` command be used?

How should the GnuPG command --desig-revoke be used, and in which cases should you use it? According to the manual: --desig-revoke name Generate a designated revocation certificate for a key. ...
1
vote
1answer
61 views

GnuPG / OpenGPG: Recovering public key from private key

I know that the public SSH key can be recovered from the private using ssh-keygen -y. How can a (deleted) public key be recovered from the private key in GPG (preferably in a way that is OpenGPG ...
0
votes
2answers
19 views

What file extensions should be used on GPG generated output?

In Linux file name extensions are irrelevant, but on a Windows system, many GPG users use GUI applications rather than the command line. They may want to be able to double click on an encrypted file, ...
0
votes
1answer
36 views

Unable to use “transient-key” when generating a batch GPG key

I'm generating a few test keys, but I can't seem to use the %no-protection and %transient-key flags. I get the following message: $ cat dwight | gpg --homedir "dwight-keys" --gen-key --batch gpg: ...
2
votes
1answer
50 views

gpg: Can't check signature (FreeBSD)

I follow this SA https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc [FreeBSD 10.0] <= My FreeBSD version fetch <link>/openssl-10.0.patch fetch ...
1
vote
1answer
32 views

How much information is included with a GPG signature?

Let's say you verify someone's signature with GPG: $ gpg --decrypt statement.txt.sig "I am not a crook." gpg: Signature made 17 Nov 1973 9:31:50 AM CDT using RSA key ID 92861D99 gpg: Good signature ...
0
votes
1answer
71 views

PGP Public Key expiration GPG

I'm in the process of importing a public key from a business partner. We have always use GPG and never had a problem. I’m importing this key using: gpg --import "FileName.asc" gpg: key AC260214: ...
0
votes
1answer
26 views

How to update PGP public key after new uid is added?

I have a PGP keypair to which I just added a new uid. Is the previously exported public key and private key still valid? If I export a new public key with armor, it does look different and longer ...
3
votes
2answers
70 views

gpg2 - no option to select aes block cipher and outdated use agent?

With OpenSSL, I can select a what type of block cipher to use for encrypting a file. For example, if I want to encrypt a file with AES256 CBC block cipher mode: openssl aes-256-cbc -a -salt -pass ...
0
votes
1answer
23 views

Associate specific PGP subkeys with specific UIDs

It seems to me like PGP keys contain a "collection" of UIDs and also contain a collection of subkeys. Moreover, there doesn't seem to be a way to add comments to a subkey. Is there any way for me to ...
0
votes
1answer
61 views

How can I keep my gpg private key on removable media in Windows?

I use GPG through Cygwin on Windows. I don't want to store my key on my laptop as a convenient file for a casual tech-savvy thief to grab if they steal the machine, so I'd like to keep it on a USB ...
2
votes
1answer
40 views

How to merge several detached signatures from different people into one?

A group of people wants to publish a file and they all want to digitally sign the file as different recipients of the file will have different chains of trust. For simplicity, it's desired that there ...
1
vote
2answers
26 views

Do I have to export public GnuPG keys as well when exporting the private ones?

I created my GnuPG keys. They show up in my keys repository. Now I want to export my secret key and import it into another computer so I could use it on that computer (for example my laptop). Do I ...
0
votes
1answer
76 views

Why is the FSF's GnuPG bot “Edward” unable to decrypt my encrypted emails?

I am facing a problem when attempting to send an encrypted email via Enigmail (Thunderbird) in Ubuntu 14.04. I was following the Email Self-Defense guide https://emailselfdefense.fsf.org/en/ ...
1
vote
0answers
179 views

Crossplatform encrypted file containers [closed]

Since the sudden (and strange...) stop of TrueCrypt, I am looking in vain for a cross-platform (Windows/Linux essentially) encryption software that manage file containers (or equivalent) in a similar ...
4
votes
2answers
39 views

Confirming a GPG key as mine

I imported a public/private key pair generated on my desktop into my laptop. Now however I get this issue when I try to encrypt a file for my own use: gpg -e -r "Jonathan Max Barnes" random-text-file ...
0
votes
0answers
23 views

gpg keyserver duplicates signatures on my key

I created a new GPG key (rsa + rsa subkey), let's call it key1, and uploaded it to the keyserver. It has two uids. Later I signed this new key with another key (let's call it key2), and uploaded the ...
2
votes
1answer
49 views

How to generate an OpenPGP Signed Message with GPG?

In RFC 4880, there is section 11.3 which specifies the different formats an OpenPGP Message block can have: 11.3. OpenPGP Messages An OpenPGP message is a packet or sequence of packets that ...
1
vote
1answer
21 views

What is introducing quoted-printables into my PGP-encrypted emails?

I've set up PGP email encryption on two computers using Enigmail and Thunderbird. One is running Mac OS X, and the other is running Arch Linux. Everything functions fine from within Thunderbird on ...
0
votes
0answers
53 views

How the private key is using for generating signture?

I have used Luna SA HSM device following the below configuration for Luna client setup: Client Configuration: Luna SA Client v5.3.0 Client System: OS :Windows 8.1, 64-bit machine I have created ...
0
votes
0answers
58 views

gpgsm --export-secret-key-p12 command showing error message “No Secret key”

I have installed the gpg4win version 2.2. I have Successfully created the certificate using gpgsm --gen-key > test.p10 I want to export the created certificate request into pkcs12 format with ...
1
vote
1answer
189 views

Why does GPG Encrypt/Decrypt fail between different versions of GnuPG?

I have 2 servers that will be passing data between them, one is Ubuntu and the other is Red Hat. Using the already installed versions on each, Ubuntu is 12.04 with gnuPG 1.4.x and Red Hat is ...
2
votes
4answers
251 views

How do I verify a GPG symmetrically encrypted file?

I created an encrypted file with symmetric encryption. gpg -c 50GBfile Now I want to delete the original. Before I delete the original, I want to verify the integrity of the encrypted file. ...
0
votes
1answer
21 views

What's the standard (or accepted) method to use several encryption subkeys in GPG?

I would like to create for myself an offline main key with three subkeys. for signing for encryption on standard computer which I hope to be able to secure better for encryption (and consequently ...
0
votes
1answer
32 views

Script not working when run automatically

This script (parts of it) runs perfectly when invoked manually from the Terminal: #!/bin/bash [[ "`ps -e | grep -c $(basename $0)`" -gt "2" ]] && echo -e "`basename $0`: Mutiple instances ...