GNU Privacy Guard (GnuPG or GPG) is a GPL Licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF standards track specification of OpenPGP.

learn more… | top users | synonyms (1)

0
votes
2answers
14 views

How to remove OpenPGP private keys from computer?

As the title reads, I wonder how I could securely, physically remove my private keys from my computer. I can't seem to find a way to do that on Kleopatra. These keys I'm talking about are used for ...
0
votes
1answer
7 views

Is it possible to generate GnuPG keys without subkeys?

I have been using PGP and then GnuPG for over 20 years now, and my oldest key is still on MIT server since 1996. (RSA 1024 without subkeys...) Over the time the keys became pairs of Main and Subkey. ...
0
votes
0answers
19 views

Gpg Asymmetric cryptography, public key in a txt file [closed]

may I use your gpg key by encrypting the data asymmetrically, giving the public key in a txt file? I want to use duplicati to encrypt data and as one of the parameters I want to communicate to key in ...
0
votes
1answer
17 views

Is it possible to encrypt an email for two keys but the same email?

I started using Enigmail with Thunderbird to encrypt and sign my mails. It works fine with my brother and some other people. Yesterday I got a reply from someone with whom I did communicate via ...
3
votes
1answer
13 views

Enigmial does not put the secret key into the secret keyring

I've been using Enigmail 1.8.2 on Thunderbird 38.5.0 from the Fedora 23 repository. I generated a key pair by using Enigmail and I can send encrypted and signed emails by using Thunderbird (or even by ...
0
votes
3answers
22 views

Calculate SHA1 sum of file with GnuPG on OS X

I'm looking at the GnuPG download page, that's telling me that I can check the hash sum of a file with the following command: sha1sum apache-tomcat-9.0.0.M1-src.tar This unfortunately does not ...
0
votes
0answers
25 views

Sign GMail using GnuPG manually

Is there a way to send mail through GMail signed with GnuPG or OpenPGP without using browser extensions? I want to create cross-platform Python script (or use one if it is already available) to send ...
3
votes
2answers
20 views

Where is the revoke.asc file once I've created it from the command line?

Where is the revoke.asc file once I've created it from the command line? I've looked in the root of my home directory: C:\Users\Me and cannot find it. I've searched *.asc - no luck. If I run gpg ...
3
votes
0answers
30 views

Error with GPG Smartcard fetching public subkey

I'm trying to setup an OpenPGP smartcard using a YubiKey. It's a YubiKey 4, so in theory should accept a 4096 bit secret key, but I'm using 2048 bit subkeys. I have a master key (set for cert only), ...
1
vote
1answer
23 views

Which reason in GPG for revoking key should I choose?

I want to generate revocation certificate for my GPG key, print it out and keep securely in closed envelope up till I'll loose access to this key (accidental removal/pen drive loss/theft). Which ...
0
votes
0answers
14 views

Export lots gpg keys to pem format

I have a lot of public keys (several hundreds all in one gpg file) and i would like to export each one to a separate pem file. I've found many examples in internet where you need to explicitly type ...
1
vote
0answers
17 views

How to link .asc / .pgp / etc. files with Kleopatra on Windows?

Having an *.asc or *.pgp file on e-mail attachments displayed in Thunderbird, but also having files with these extensions on the harddrive: How do I link them with Kleopatra (always open with), on ...
1
vote
2answers
47 views

How do I manage multiple e-mail addresses with GnuPG?

I feel like this is a question that should have plenty of coverage, yet I found nothing that explained this to me in a way that I understood. It may be (and feels like it) that I misunderstood ...
0
votes
0answers
13 views

Can't decrypt immediately after encryption

I want to use GPG to create an encyrpted backup. I am testing the encryption before I use it and it's not working like I expect. I am using this script to test it: gpg --gen-key gpg --encrypt $0 ...
3
votes
0answers
37 views

Mail encryption on Windows RT

Is it somehow possible to use mail encryption preferably via GPG on Windows RT? Since on a Windows RT Surface tablet you only have access to Windows Mail as an app in the store, there is no fancy ...
1
vote
1answer
13 views

What is the function of gpgkeys_finger.exe, gpgkeys_ldap.exe

I downloaded GnuPG 1.4.19. Among the executable, there are gpgkeys_hkp.exe, gpgkeys_finger.exe and gpgkeys_ldap.exe. I found that the first of the three executable is necessary for communication ...
1
vote
1answer
22 views

Can I use GnuPG connect to PGP public key servers?

I use gpg 1.4.19 on Windows. Can I communicate with the server directly from the command line? I tried this many things, but nothing worked: Tried: >gpg --keyserver hkp://pgp.mit.edu ...
3
votes
1answer
23 views

GnuPG Domain to Domain email encryption

I'm running a Debian mail server and am looking forward to encrypt mails from my domain to the domain of a business partner. Also, the encryption should happen on the mail server itself not on a mail ...
1
vote
1answer
44 views

GPG Tools: location of private keys

I moved to another Macbook. Because of expensive SSDs and really smaller disk size, and because I wanted to start clean with this install, I couldn't transfer the user folder. I have the old disk in ...
2
votes
1answer
50 views

Getting error im decrypting .gpg file

I'm getting an error in decrypting .gpg file. I've already imported the public keys through below method. $gpg --import key1.asc directory `/user_home/.gnupg' created gpg: new configuration file ...
1
vote
1answer
21 views

GPG giving bad signature when email is downloaded as .eml

I'm trying to test whether someone with a copy of my public gpg key can verify a signed email that they receive from me. I'm using two computers for this. On the first, I have my key generated and ...
2
votes
1answer
51 views

Why is GnuPG returning “decryption failed: secret key not available”?

I am new to the world of GnuPG. I am attempting to decrypt a message via terminal and this is the result: [snip] -----END PGP MESSAGE----- gpg: encrypted with RSA key, ID F6B86794 gpg: decryption ...
0
votes
1answer
87 views

How to use gpg --gen-key in a script?

GnuPG is one of these annoying tools that has a non-scriptable command line. I want to run gpg --gen-key in a script, the rest of the process is simple commands. Any one had any luck with this? ...
2
votes
2answers
33 views

Why is package/code signing considered more secure, and how does it work?

Kind of a noob question, but I've been reading about signing and how it makes linux distros more secure. Docker recently added image signing, which seems cool. Why is this so important? Just because I ...
0
votes
1answer
25 views

GnuPG - web of trust possible for offline device?

I plan to issue software updates to offline machines via USB sticks. Machies will be dispatched, and on site for potentially many years, During that time, new developers will be hired and fired. I ...
0
votes
0answers
43 views

How to verify downloads by GPG4Win

In particular, I am installing Gentoo Linux following this manual up to this point: Verifying the downloaded files Through the .DIGESTS and .DIGESTS.asc files, the validity of the ISO file ...
1
vote
0answers
57 views

How to verify a software package using SHA256 checksums and PGP or GnuPG keys, on Windows?

I'd like to verify the Vagrant installation method using their recommended verification method. On the installation page it says: You can find the SHA256 checksums for Vagrant 1.7.4 online and you ...
0
votes
1answer
14 views

GPG keyserver says my key is not public

I have created a GPG key with gpg --gen-key, accepted all the default options. I do gpg --list-keys and receive: C:/Users/Myname/AppData/Roaming/gnupg/pubring.gpg pub 2048R/B296038B 2015-11-10 ...
1
vote
1answer
27 views

GPG keys for mailinglists

There are two mailing-lists (e.g. list1@foo.bar and list2@foo.bar) for which I'd like to generate GPG keys and send the respective private keys to the members of the lists, so mails to the lists can ...
1
vote
1answer
16 views

Did I lose my GPG data?

I copied my GPG data from another computer by just copying ~/.gnupg/* to an external drive. I can't quite figure out where this leaves me. I'd read that this works, but can't figure out how to get it ...
2
votes
3answers
31 views

What GnuPG files need backing up?

Which GnuPG files (the ones typically under ~/.gnupg/) do I need? I have a script for backing up "private information" that tars it all up and password protects it using openssl with AES256. Is this ...
1
vote
1answer
31 views

One-liner for viewing a gpg encrypted pdf

I'd like to open an encrypted pdf document without saving its decrypted content to my disk/ramdisk using a standard document viewer. I already tried something like gpg --decrypt foo.pdf.gpg | evince ...
2
votes
1answer
54 views

How to prevent the popup password prompt when using GnuPG with mutt?

My mail user agent of choice is mutt, and I'm signing my mail using GnuPG. To make them work together, I have set crypt_use_gpgme=yes in .muttrc. Reading mail, I am asked to enter my OpenPGP key's ...
0
votes
1answer
47 views

How does apt-get checks for the integrity of the files downloaded?

I've been reading about why encryption is not normally deployed on the apt-get network activities. And learned that it checks the signature of the data that comes from the repo, right? But now, how ...
0
votes
2answers
34 views

How to import OpenPGP key given the key ID in GnuPG?

I'm having a heck of a time installing a Debian Chroot for PPC64. The problem is not debootstrap, rather, its getting GnuPG to locate and install the key I need. The man pages for gpg are fairly ...
1
vote
1answer
31 views

Should I install GPG Suite as root in Mac OS X?

I am learning the command line on Mac OS X and also learning PGP. In the PGP & GPG book it says that I should install GnuPG as root but MacAir has me and always has had as a user on the command ...
1
vote
1answer
33 views

Why does GPG decryption with subkeys fail on one computer but not another?

I have been attempting to create a system of GPG subkeys to distribute to my various computers. I have created subkey pairs for each computer with the master secret key removed as per the instructions ...
0
votes
0answers
47 views

Linux “pass” utility for multiple users

I am trying to setup a, business internal, password storage to be used by various scripts (and people). I have looked at many alternatives but the easiest to modify to achieve my goal seems to be the ...
0
votes
0answers
13 views

An error when signin with for-your-eyes only

On Ubuntu, a line sudo gpg -r myself --for-your-eyes-only --digest-algo SHA512 --clearsign ~/testing produces a sign document, but then the first option for opening it becomes Open with Import Key. ...
2
votes
2answers
209 views

Duplicity restore failing: No secret key

I'm setting up a backup from a local machine to a remote server. I generated gpg keys on the local machine and ran a test backup with: PASSPHRASE="MyGPGPassphrase" duplicity --encrypt-key KeyID ...
1
vote
3answers
246 views

Is it safe to store (encrypted) passwords on GitHub?

I am using pass to handle all my passwords. They are encrypted using GPG with a 4096 bits key, using the SHA256 algorithm. I am using a different password for every login in my password store. One of ...
3
votes
0answers
59 views

Why does using Enigmail with Icedove on Debian fail if I don't start gpg-agent manually?

I'm using Icedove on a Debian Sid installation, and now I try to use Enigmail with it. But I encounter some issues: I had to create my keys with gpg2 instead of Enigmail, because it didn't want to ...
4
votes
1answer
68 views

How to find out my GnuPG key length?

It may be a dumb question, but I haven't been able to find an answer so far... I've created a key-pair some time ago, and I can see that ls -l ~/.gnupg -rw------- 1 xxx xxx 7912 sept. 24 20:08 ...
1
vote
1answer
150 views

Is GnuPG symmetric encryption vulnerable to brute force attacks on the passphrase?

The handbook suggests that symmetric encryption is appropriate (and therefore not less secure than public key encryption?) when only you need to access the plaintext. But according to this post, ...
0
votes
1answer
76 views

How to decrypt GnuPG encrypted folder?

I received a file with ".pgp" extension. I decrypted it successfully, but the resulting file seems to be wrong: the sender encrypted a folder, not a single file. However, I do not see a folder after ...
2
votes
1answer
100 views

How GPG generates an MD5 fingerprint given a public key?

I have the following GPG public key stored inside a file called publickey.pub and encoded in ASCII Armor (Radix-64): -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3ia ...
1
vote
1answer
26 views

How do I prevent Enigmail from encrypting my email, even when encryption is turned off?

Enigmail add-on to Thunderbird is encrypting all emails, even when encryption is turned off. I save the email as a draft, and when I view it in Drafts folder (or if it was sent), then it shows as ...
2
votes
2answers
72 views

How to use GnuPG with --passphrase?

I want to write a script that will run gpg a file called "file" with the passphrase "test". Normally, when I use gpg, I usually just run gpg -c file and it asks me for the passphrase. But since I ...
1
vote
1answer
184 views

Ranked Order of Security for Encryption Algorithm Preferences: For GPG

GPG & PGP negotiate the encryption & hashing algorithm to use based on the recipient key's prioritized list of supported algorithms. The problem is DES/MD5 are forced to be included as the ...
0
votes
0answers
147 views

GPG agent dying after 20-30 min with use of YubiKey. Can someone help me debug it?

I have set up my YubiKey NEO to use GPG. I am mostly using it for SSH. But the problem is every 20-30 min I have to kill gpg-agent and restart it because the key stops working. The only clue I have is ...