Tagged Questions

0
votes
2answers
14 views

Verifying files with GPG, without a .sig or .asc file, and with only a key id and fingerprint?

From my limited knowledge of PGP/GPG, one must have 2 things to verify a file: The file's "signature" (essentially a hash of the file encrypted with the trusted entity's private key; normally ...
1
vote
2answers
61 views

Is it possible to associate a secondary email address with an existing *public* key?

For example, if I have a friend's public key that's associated with, say, email address john@domain.com, but I want to send him a message at john@other.net, is there a sensible way to do this? Is ...
0
votes
2answers
37 views

How to prevent an openPGP key from being uploaded to a keyserver?

Is there flag or something in an openPGP key that can be used to communicate my wish that this key should never be uploaded to a keyserver? If not, can I create a key that is broken in such a way ...
1
vote
2answers
114 views

Is it possible using symmetric encryption to encrypt a file with two different keys?

GPG/PGP and other public key encryptions allow encrypting to several recipients using their public keys. Is it possible to use only symmetric encryption to do that same? In other words is it possible ...
5
votes
1answer
149 views

PGP (GnuPG) - what was the original filename?

John wants to send 1.txt to Paul. He encrypts it. Now the file is named myFile.pgp, and he sends it to Paul. Paul gets the file. How (if possible) can Paul know what the original file name (1.txt) ...
0
votes
1answer
404 views

gpg: import failure key xxxxxxxx: no valid user IDs

i am getting this error while importing a public key on gpg (GnuPG) 1.4.2 gpg: armor header: Version: GnuPG v2.0.14 (GNU/Linux) gpg: pub xxxxx/xxxxxxxx 2012-05-25 abcd xyz <email@address.com> ...
0
votes
1answer
35 views

Sign PGP key to which I added identity once again (i.e. also sign new identities)

I am using the Key Management dialog of Enigmail (in Thunderbird) to manage my keys, as it's more convenient than command line, but also more stable than the GnuPG alternative (Kleopatra). So now I ...
2
votes
2answers
55 views

how to verify the trust path to a gpg key?

I want to check whether the gpg key used by Julien Danjou for his emacs snapshot repository can be trusted. There are many trust paths from my key to Juliens key. But I can't believe that there ...
0
votes
1answer
86 views

How to embed an ASCII logo into an ASCII-armored RSA key?

The cryptoparty site publishes an RSA key with an ASCII art logo embedded in it. Is there a way to put arbitrary characters in an ASCII-armored RSA key? From https://github.com/cryptoparty/handbook ...
8
votes
1answer
538 views

How to manage GPG keys across multiple systems?

I'm new to using GnuPG and trying to understand how best to use it. I've reviewed Short, easy to understand explanation of GPG/PGP for nontechnical people?, but most guides explain PGP with a ...
3
votes
1answer
141 views

How can I use a PGP key on Windows to sign/verify and encrypt/decrypt documents?

Occasionally I need to encrypt a file, cryptographically sign something, etc. GNU PG and PGP are good tools for this, but how can I get them working on Windows? When I try to search for an installer, ...
2
votes
1answer
265 views

Simple PGP encryption in one step?

I would like to run gpg encryption on a file without having to register the keys with the system at all. Ideally, there would be a way to pass in a path to the key file and have the encryption run on ...
3
votes
2answers
298 views

if one doesn't care about protecting a gpg secret key, is it still as secure as using gpg --symmetric?

Each of Alice and Bob is using gpg just to protect his/her own personal files and not using it as a way to send encrypted text to others. Alice has generated a key (gpg --gen-key) that she uses to ...
2
votes
1answer
70 views

Sending an encrypted email to a public key

A person I wish to contact, posted his public key as his contact info. I have setup Thunderbird and generated my on key pairs but I am missing something. I do not understand how to use just his public ...
2
votes
1answer
435 views

Do PGP private key blocks “contain” the public key as well?

I've noticed that if I import my ASCII-armored PGP private key into an otherwise empty GnuPG keyring (by deleting ~/.gnupg beforehand), the keyring contains both the public and private keys. Also, the ...
0
votes
1answer
2k views

Using the GNUPG Encrypt Command on Windows 7 Professional

I am using the Windows port of GNU Privacy Guard "light" release for version 1.0.9 installed on a windows 7 professional laptop. Installed in the default directory of : C:\Program Files ...
0
votes
2answers
374 views

What is the file format for storing PGP private keys?

I tried to understand it from RFC and from source code (mainly from gnupg and gpgme) and I didn't get the way the data should be stored when someone export secret keys. I know there should be ...
0
votes
2answers
624 views

Formatting OpenSSL encrypted message, and signature in the same plaintext file

I'm working on designing an API which requires encrypted messages to be signed and sent over TLS. The TLS is HTTP/SSL. The messages themselves are a few hundred Kb (at most) of JSON data, encrypted ...
5
votes
1answer
1k views

Are files encrypted with gpg compatible with pgp?

Are files encrypted with gpg compatible with pgp? What about the other way? I recently learned the very basics of the procedures of using gpg to encrypt and decrypt files. But I don't have a lot of ...
4
votes
2answers
3k views

How to use gpg and SSH together? [duplicate]

Possible Duplicate: Are GPG and SSH keys interchangable? How to use gpg and SSH together? I know the basic procedures of 1) using gpg to encrypt and decrypt text files and 2) generating ...
0
votes
1answer
158 views

What's a good example of showcasing the advantage of gnupg2 over gnupg?

Q1) What's a good example of showcasing the advantage of gnupg2 over gnupg? Q2) I'm trying to build encryption into a small piece of software for internal project management. Is gnupg a good tool to ...
4
votes
1answer
186 views

gpg - Is the MDC check redundant if the file is signed?

I understand that gpg 1.4.9 computes a MDC code by default. According to my research this corresponds to to Sym. Encrypted and Integrity Protected Data Packet (tag 18) in the PGP spec. If the file is ...
1
vote
2answers
271 views

How can I disable prompt about trust when encrypting file with gpg in emacs

I want to use emacs to edit files encrypted with gnu privacy guard. Im using the gpg support built into emacs 23 which I think is easy pg assistant. I import keys created at the command line with M-x ...
0
votes
1answer
134 views

What's the easiest way to revoke a PGP key using MacOSX?

I haven't used PGP in ages and since then I most likely lost the keys. I want to revoke them regardless and I do have the revocation keys printed in paper. I already typed and proof-read them a couple ...
0
votes
2answers
4k views

Problem adding public key for apt

I was trying to get the official mongodb for Ubuntu, following the instructions at http://www.mongodb.org/display/DOCS/Ubuntu+and+Debian+packages After adding the deb ...
4
votes
4answers
980 views

What's the best way of keeping a PGP private key file generated by GnuPG?

What's the best way of keeping a PGP private key file generated by GnuPG? I will just store my public key online, in Gmail, on many of my computers. Where/how best to protect and store the private ...
1
vote
2answers
2k views

One GnuPG/PGP key pair, two emails?

I have two emails I use frequently, for both of which I'd like to use PGP keys generated/managed by GnuPG. I'd like to avoid creating a different key pair for each email, if possible, as that's ...
0
votes
1answer
118 views

Can I use GnuPG to verify that a file is unmodified and comes from the correct sender?

Can I use GnuPG to verify that a file is unmodified and comes from the correct sender? Let's take a simple use case: I have this file with some important content, let's say it is in a .tar.gz file. ...
1
vote
1answer
1k views

How does S/MIME differ from PGP/GPG, for the purpose of signing and/or encrypting email?

In addition to the titular question, are the two technologies compatible? If so, under what circumstances? What are the relative benefits of the two technologies?
1
vote
4answers
274 views

Email utopia: cross-platform (inc mobile), encryption, signing, threading, account aggregation. Is it possible? If so, how?

I'd like to achieve the following: Be able to aggregate my email accounts such that I can receive an email sent to one of my email accounts and reply to it from any other email account of mine, ...
3
votes
1answer
143 views

Is it possible to find a sender's Public PGP (GPG) key from an encoded message?

Could you find the sender's Public PGP (GPG) key from an encoded message?
2
votes
0answers
451 views

How to customize Seahorse plugin behavior in Nautilus?

I use Fedora 14. The seahorse-plugins package adds a nifty context menu option in Nautilus that allows you to encrypt/decrypt files easily with your GPG key. But is it possible to customize its ...
3
votes
1answer
161 views

Are there no further developments in GnuPG?

Though the GnuPG website shows the last stable release date to be: 2010-10-18, I feel there are no major improvements. Till the year 2003-2004, I used to see active developments and releases. I ...
4
votes
2answers
177 views

How can I get a new / non-technical user to verify my GnuPG / PGP signed email?

I'm looking for a web front-end or some easy way to get a user who's never been exposed to cryptography / digital signatures etc. to simply copy/paste my GPG signed (not encrypted) email and specify ...
4
votes
1answer
789 views

How do I integrate GPG with alpine?

I have tried a couple of howtos, but they seem to either be too out of date or just plain don't work (don't work for me, at least). How do I sign and encrypt messages, as well as check integrity of ...
1
vote
1answer
394 views

Does PGP work like Zip sometimes?

Can you put multiple files in a GPG/PGP encrypted file? Just wondering.
1
vote
1answer
687 views

What is the best PGP program, commercial products included?

What is the best PGP program, commercial products included? Must have: Easy and streamlined email integration for common clients. Easy to encrypt single files with simple GUI. Some kind of trusted ...
0
votes
2answers
107 views

the encoding mechanism

can i know what the encoding mechanism is used here to encode the key below ? -----BEGIN PGP PUBLIC KEY BLOCK-----Version: SKS ...
0
votes
1answer
79 views

GnuPG: verifying the sender

A person emailed me his PGP signature. When I compared it to the signature from the PGP server, it is much shorter not matching at all. I use the version 1.4.9. Why is the signature so short? Why ...
30
votes
1answer
1k views

Short, easy to understand explanation of GPG/PGP for nontechnical people?

Does anyone have a link to a good, but short (1-2 paragraphs) explanation of the benefits of using GPG/PGP signing and encryption for Email focused at non-technical readers? That is, why would someone ...