GNU Privacy Guard (GnuPG or GPG) is a GPL Licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF standards track specification of OpenPGP.

learn more… | top users | synonyms (1)

2
votes
1answer
21 views

Found GPG old keys on keyserver but accounts long since gone - cleanup?

So I went to MIT's keyserver and discovered a few old public keys were there after dong a search. I don't have any of these keys anymore. Is it possible to have the public keys removed from the ...
1
vote
0answers
33 views

gpg --gen-key not working on “su -l”, but working on local terminal

When I try to use "gpg --gen-key" (v2.1.2 on archlinux) with an user I just created ("backtest"), it works when I open a terminal for that, but not when I'm logged in with another user and then "su -l ...
1
vote
1answer
28 views

Why must I enter a passphrase to encrypt a file with my own key?

I have created a 4096-bit, password protected, RSA key for use during development efforts. I have my environment setup such that this key is the only private key I have on my secret key ring. Why ...
0
votes
2answers
36 views

Is it possible to decrypt files which were encrypted by gpg with a very strong password?

I have encrypted my important files by gpg with a 32-length password, includeing upper-case characters, numbers and some special characters. I have stored them online so they can be download by ...
0
votes
0answers
18 views

Drafts are not deleted after sending email with Thunderbird/Enigmail/Gmail

When I write a longer email, Thunderbird creates occasional drafts to save the message. But instead of overwriting the old draft, it creates a new one every time it saves the message. These drafts are ...
2
votes
0answers
92 views

Thunderbird GnuPG + Enigmail: encryption command failed

Yesterday Thunderbird complained that I used GnuPG 1.x and the next update of TB would not work with this version. So I upgraded my Mac (OSX 10.10 Yosemite) to GnuPG 2. Now I see that TB has a new ...
0
votes
0answers
7 views

Properly setting up gpg4win to use Comod Email Certificate

I am looking to properly setup and import an email certificate from Comodo to use with GPG on Windows (gpg4win). I obtained my email certificate from Comodo, and successfully imported it into ...
1
vote
1answer
27 views

How to reimport gpg key replaced by stub

I've got a subkey which was moved to a card. This resulted in replacing it with a stub in the local keychain. This means every time I try to use that subkey, I get: gpg: public key decryption failed: ...
1
vote
1answer
24 views

What are the risks of creating a gnupg private key with no passphrase?

On a multi-user system (linux), I created a private key with no passphrase. I can now encrypt a file and decrypt it locally without supplyng a passphrase. This is very convenient and appears to be ...
1
vote
0answers
30 views
+100

Preveting DNS Leaks using gnupg over TOR while allowing key-fetching via DNS

Using DANE to associate OpenPGP public keys with email addresses becomes more and more popular. There are different methods implemented in GnuPG and used like pka and cert. IETF just released a new ...
0
votes
1answer
59 views

Set up gpg to decrypt own local files without supplying passphrase

This is a question about gpg. When I log into a linux system as a particular user ("opsacc"), I can encrypt a file using gpg. I can then decrypt the file without supplying a passphrase. The gpg ...
1
vote
1answer
50 views

Use gpg2 as gpg replacement OSX

I installed the gnupg2 formula from Homebrew successfully and can run gpg2 from the command line. However, certain programs such as git expect to run gpg rather than gpg2. I resolved this problem by ...
0
votes
0answers
24 views

Export the secret key without the export file being passphrase-encrypted

I have a secret key encrypted with a passphrase. Take this: gpg --export-secret-keys --armor KEYID >backupfile.asc This does its job without asking me for a passphrase. I conclude, therefore, ...
0
votes
1answer
22 views

GPG 2 decrypt from STDIN via pasting inconsistency

Does anyone know why in some cases you can do this: gpg2 -d And paste your GPG message into the terminal, type ctrl+D, get prompted for your passphrase and get the results to STDOUT? But in other ...
0
votes
0answers
29 views

Encrypt file with password from Gpg4Win Context Menu?

I have a list of usernames and passwords sitting on my desktop for work related stuff. I'd like to encrypt it under a master password. I believe this is called the String-to-Key (S2K) Specifiers (but ...
1
vote
1answer
31 views

Verify GPG tarballs from command line with signer's public key block?

I've got a script to fetch Gcrypt's five source packaes from GnuPG Download. I also fetch the signature for each package. For example: FILE=libassuan-2.2.0 wget -q ...
3
votes
1answer
18 views

How to generate the revocation certificate after being made a revoker with GnuPG

I read the "How should GnuPG's `--desig-revoke` command be used?" question/answer, so now I know when to use the --desig-revoke. So, I have two different private keys -- one at work (WORKWORK), ...
1
vote
0answers
89 views

Using OpenSSL to generate encryption key for Outlook users

A private web application needs to receive encrypted email from perhaps 20 known users. How can I use OpenSSL to generate a valid encryption certificate that Outlook users can import and use to ...
2
votes
4answers
53 views

GPG public key created with GnuPG is rejected by MS Outlook 2010, why?

I created a GPG keypair with GnuPG on the CentOS 7 command line and I have exported the public key into a .asc file and successfully used that public key to encrypt emails sent from another email ...
7
votes
2answers
1k views

How long would it take to break a 1024 bit OpenPGP encrypted email?

For WPA, there are calculators to determine the time needed to crack a passphrase, but I have found nothing for OpenPGP. How long would it take to break a 1024 bit OpenPGP encrypted email (depending ...
1
vote
0answers
27 views

Export P12 from GnuPG for PDF signing field

It seems to be possible to export a PGP .asc file to .p12, but I'm unable to use the generated .p12 file for a signature field in a PDF file. Is there a way to export it so it's usable for that field, ...
1
vote
1answer
28 views

How to have a different pass phrase for a gpg subkey?

I need to automate a deployment process and the tool will sign the release artifacts automatically. My key ring has a primary key which I use only for creating subkeys, and two subkeys. One subkey for ...
2
votes
1answer
47 views

Explain gpg --list-keys output

I run gpg --list-keys and it shows me the keys present in the keyring: /home/kshitiz/.gnupg/pubring.gpg -------------------------------- pub 4096R/8F64D7E0 2015-02-18 uid Kshitiz ...
1
vote
1answer
111 views

How to automatically delete the original files after encrypting with GPG?

I need to use GPG on a folder with a lot of files and subfolders. I can use "find" + "gpg" for that and I can encrypt all the files but my issue is GPG does not delete the original file after ...
0
votes
1answer
22 views

How can I send an email using a GPG public key?

I would like to send an email (on Windows), which I would like to encrypt using a GPG public key. I tried to use a Thunderbird plugin, but it requires both the public and the private key. But I have ...
0
votes
1answer
10 views

GPG truncating lines

I'm attempting to send a signed file to a recipient. When they received the file, they noticed that some of the lines had been truncated to 80 characters. If I look at the original file, it looks ...
0
votes
1answer
41 views

gpg-keyring-daemon apparently caches passphrase for ever (across reboots)

I have been decrypting my GPG-encrypted files for years. My private key was encrypted with a passphrase. Upon attempting to decrypt, a dialog box appeared, asking for my passphrase. This only happened ...
0
votes
1answer
72 views

gpg-agent is not requested in git calls

In git commits (gpg), git command always asks for passphrase while gpg-agent is running. I launch gpg-agent with $ eval `gpg-agent -s --enable-ssh-support --daemon --write-env-file ...
0
votes
0answers
23 views

gpg-agent rejects correct password for ssh key

I'm trying to connect to my ssh server with my private key (~/.ssh/id_rsa) which is protected by a passphrase. I set up gpg-agent to cache the passphrase. When I get to the pinentry, it won't accept ...
2
votes
1answer
39 views

How to let gpg-agent confirm each key usage

When running gpg-agent as part of my login session each program I run has access to my (possibly) unlocked PGP-key. It might be paranoid, but I want to get confirmation about each key usage, so I wish ...
0
votes
1answer
37 views

are gpg keyservers synchronised with each other? pgp mit server too?

A question regarding the gpg keyservers: Are the servers found in the list here synchronised with each other?: http://www.gpg4win.org/doc/de/gpg4win-compendium_22.html So uploading a pub key to one ...
0
votes
1answer
29 views

gpg key, submit to keyserver and find again using webbrowser

I am using Kleopatra to create gpg keys (gpg4win). However, I also want to use openkeychain on android. openkeychain uses pgp.mit.edu as keyserver, Kleopatra uses keys.gnupg.net keyserver. How can I ...
0
votes
1answer
64 views

How to generate a gpg4win keypair without passphrase?

I would like to generate a gpg keypair using gpg4win. I am at the point where a personal OpenPGP key pair is generated, but: How can I generate a keypair using gpg4win with no passphrase? The private ...
0
votes
0answers
36 views

Verifying GnuPG itself

Following the steps indicated in http://www.deepdotweb.co/jolly-rogers-security-guide-for-beginners/how-to-verify-your-downloaded-files-are-authentic/ , which first verifies that the verification ...
2
votes
2answers
39 views

How to replicate GPA's Sign and Compress option on command line in Windows

As the title says, I need to replicate GPA's "Sign and Compress" option on the command line. I'm trying to automate some encryption of files for submission to a bank and the instructions they gave me ...
0
votes
1answer
49 views

GnuPG in Thunderbird w/ Enigmail on dual OS machine

I am running a computer with two OS, namely Ubuntu 14.04 and Windows. I'd like to write encypted Mails from both OS, which runs well (i.e., every program needed is installed). The only problem I have ...
2
votes
0answers
154 views

How can OpenSSL Secret Keys be imported into GnuPG?

I want to import the secret key from a OpenSSL x509 (Client) Certificate into GnuPG (NOT gpgsm for S/MIME!) I have seen there are utilities to convert GPG Keys into SSH Format [1] and even create ...
0
votes
0answers
77 views

How to properly check signature with opkg

I would like to use a GPG key to verify packages before installing on my embedded system. I see the option check_signature 1 in the default opkg.conf file, but cannot find any information on how to ...
0
votes
1answer
83 views

Reading HTML mail with PGP/Mime encryption in Thunderbird with Enigmail

Yesterday I asked how to configure Thunderbird with Enigmail to use PGP/Mime encryption for signing emails. This works, but I noticed one problem. I don't know if this is common to Thunderbird, or ...
1
vote
1answer
162 views

Use PGP/Mime with Thunderbird and Enigmail

I would like to sign all my mail with my PGP key, and no matter if the recipient uses PGP or not, it should not confuse them. Last week I read a discussion that inline PGP is not good pratice, and I ...
0
votes
2answers
302 views

How to get GPG working with Outlook 2013?

My OS is Windows 8.1 Update 1 x64. I have Outlook 2013 and just installed GPG4Win (latest, 2.2.2, full version). When I now launch Outlook 2013, I still don't see any UI/options to setup certificates ...
0
votes
1answer
40 views

How to remove Version Information from Encrypted OpenPGP message in Windows?

I am using Keybase.io with GnuPG on Windows 8.1 via Powershell. I am wondering how to remove the Version line from the encrypted and or signed message. Here is example if what I mean: -----BEGIN PGP ...
1
vote
1answer
65 views

how to strip a subkey from a gpg key?

I am trying to remove the subkey from my OpenPGP key. Here is the current state: gpg> uid 1 pub 3072R/C08D1F4B created: 2014-01-05 expires: never usage: SCEA trust: ...
0
votes
1answer
51 views

Why does GPG not like this encrypted message?

I had the following encrypted message laying around on my computer from back when I was playing around with GPG (and in this case, Enigmail) -----BEGIN PGP MESSAGE----- Charset: ISO-8859-15 Version: ...
3
votes
1answer
55 views

pgp: using subkey to sign, but should I publicize the fingerprints of both my master key and subkey?

I used gpg to create a key pair. I understand that a master key for signing only and a sub key for encryption only are generated. Following the Debian Wiki, I created a sub key for signing for better ...
1
vote
1answer
72 views

GPG Symmetric Encryption: No Secret Key

Using gpg 2.0.22 I do the following as user A: A@~: touch tmp A@~: gpg -c --cipher-algo AES256 tmp A@~: chmod 777 tmp.gpg A@~: su -l root -c 'mv tmp.gpg /' Then, as user B: B@~: gpg /tmp.gpg Now ...
2
votes
1answer
169 views

Do GPG and GPGSM use the same key database?

I need to export one of my GPG keys as a PKCS12 key/certificate. gpg is incapable of doing this, but the tool gpgsm is. However, entering gpgsm -o <file> --export-secret-key-p12 <key-id> ...
2
votes
1answer
30 views

Why is gpg --list-keys sometimes printing subkeys, sometimes not?

This question occured in the comments of "How do I display the usage flags for my encryption keys in a less hackish way?", and seems worth being answered in a Q&A form as the answer is not ...
2
votes
1answer
45 views

How do I display the usage flags for my encryption keys in a less hackish way?

I am trying to educate myself on the use of encryption keys and I've been experimenting with this old Linus Torvalds’ key that I found 956EB7BF449FA3AB. I am interested to display the usage flags but ...
1
vote
1answer
31 views

How to hide Gnupg passwords when doing back ups with Duplicity?

I have been following some tutorials for Duplicity back ups. It is all fine except that everyone seems to be putting their Gnupg passwords in scripts or plain text files which sounds crazy stupid ...