PGP (Pretty Good Privacy) is a computer program for encryption and decryption of data that provides cryptographic privacy and authentication for data communication.

learn more… | top users | synonyms

1
vote
1answer
10 views

GnuPG keeps looking for my dead smart card

My smart card died (physically). I made offline backups of my keys, and those are successfully imported back into GnuPG. However, it keeps asking for the key whenever I try to decrypt using the keys. ...
0
votes
1answer
17 views

GPG2 Encryption - No public key error

When I generate my keys using gpg2 --gen-key and then I try to try to encrypt the file using gpg2 --batch --yes -r myemail@test.com --always-trust --homedir . -e test.text I get an error ...
5
votes
3answers
110 views

How does public/private key cryptography work, who generates the key pair?

I have a requirement to encrypt a file, get it to an external partner who will then decrypt the file using a key. My "basic" understanding is that I can generate the public and private keys, encode ...
2
votes
1answer
16 views

Can uploading an OpenPGP key to a keyserver cause more spam mail?

Public OpenPGP key servers synchronize their public keys with each other and as far as I know anyone could set up their own keyserver and synchronize it with other keyservers. This made me wonder if ...
1
vote
2answers
12 views

Updating OpenPGP keyserver adding and removing identities

When adding new identities to my OpenPGP key, I can upload the public key to a keyserver for others to update their copy. Now, when I remove an identity, will the keyserver update to the new version ...
0
votes
0answers
10 views

How to get PGP encryption status of MAC from commandline

I encrypted my mac using symantec product, Encryption Desktop. I am getting the status from commandline using pgpwde --status But some times i am unable to get output of this ...
1
vote
1answer
29 views

How can I export my public GnuPG keychain into one block?

I'd like to send my entire public keychain to a friend of mine (and back it up for obvious reasons) and would like to export it into one single block, like GPA does. Bonus points if it's signed with ...
0
votes
1answer
12 views

Best way to signal no longer used (lost) key

I have an old PGP key for which I don't have the secret anymore, nor the revocation certificate, and when I created the key I did it without expiration date. So I know, I have to move on, and so I ...
0
votes
1answer
41 views

How to set a custom creation date for OpenPGP certificates?

Can I create an OpenPGP Certificate containing a custom creation (start validity) Date? I need to create an OpenPGP certificate today, but made it valid from next week only (for example). Using ...
0
votes
0answers
19 views

PGP - encrypt file passing only file and public key as parameters

Security noob here.. We need to encrypt a file before sending it to vendor. They gave us their public key .asc file. I want to encrypt using just minimum required parameters as pseudocode below : ...
0
votes
0answers
49 views

OS X disk encryption with GPG

OS X has it's own encryption solution FileVault. It encrypts all data with AES. Is it possible to encrypt disk with PGP cypher with FileVault or GnuPG?
1
vote
2answers
28 views

Can PGP messages be verified with just the fingerprint of the public key?

What is the difference between sharing a public key and sharing just its 40-digit fingerprint? The public key is very long, so if I wanted someone to be able to verify my messages, could I just mail ...
3
votes
1answer
31 views

Enigmial does not put the secret key into the secret keyring

I've been using Enigmail 1.8.2 on Thunderbird 38.5.0 from the Fedora 23 repository. I generated a key pair by using Enigmail and I can send encrypted and signed emails by using Thunderbird (or even by ...
1
vote
0answers
44 views

How to link .asc / .pgp / etc. files with Kleopatra on Windows?

Having an *.asc or *.pgp file on e-mail attachments displayed in Thunderbird, but also having files with these extensions on the harddrive: How do I link them with Kleopatra (always open with), on ...
2
votes
2answers
69 views

How do I manage multiple e-mail addresses with GnuPG?

I feel like this is a question that should have plenty of coverage, yet I found nothing that explained this to me in a way that I understood. It may be (and feels like it) that I misunderstood ...
0
votes
0answers
22 views

Can't decrypt immediately after encryption

I want to use GPG to create an encyrpted backup. I am testing the encryption before I use it and it's not working like I expect. I am using this script to test it: gpg --gen-key gpg --encrypt $0 ...
1
vote
1answer
109 views

“Email address or key ID cannot be matched to a valid, not expired OpenPGP key” in Enigmail after moving to a new computer/account

When I write a new email in Thunderbird while signing the mail using Enigmail, I get an error message: Enigmail Alert Encrypt draft messages on saving The email address or key ID ...
1
vote
1answer
135 views

generating RSA private key from PGP PRIVATE KEY BLOCK

I downloaded my private key block from keybase.io (into file keybase.ppk). It starts with: -----BEGIN PGP PRIVATE KEY BLOCK----- Version: Keybase OpenPGP v2.0.49 I would now like to create a ssh ...
2
votes
1answer
27 views

GnuPG Domain to Domain email encryption

I'm running a Debian mail server and am looking forward to encrypt mails from my domain to the domain of a business partner. Also, the encryption should happen on the mail server itself not on a mail ...
1
vote
1answer
161 views

GPG Tools: location of private keys

I moved to another Macbook. Because of expensive SSDs and really smaller disk size, and because I wanted to start clean with this install, I couldn't transfer the user folder. I have the old disk in ...
0
votes
1answer
48 views

Best practice to send OpenPGP encrypted messages to K-9 Mail on Android [closed]

In K-9 Mail, some OpenPGP encrypted messages are shown directly, some you have to download separately to decrypt them in APG. There are some PGP/MIME or PGP/INLINE options in Thunderbird, you can ...
3
votes
2answers
57 views

Why does PGP encrypt differently when piping into a file instead of printing the result?

I'll use the following PGP key stored in pub.pem: -----BEGIN PGP PUBLIC KEY BLOCK----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> ...
0
votes
1answer
51 views

GPG giving bad signature when email is downloaded as .eml

I'm trying to test whether someone with a copy of my public gpg key can verify a signed email that they receive from me. I'm using two computers for this. On the first, I have my key generated and ...
1
vote
1answer
243 views

How to use gpg --gen-key in a script?

GnuPG is one of these annoying tools that has a non-scriptable command line. I want to run gpg --gen-key in a script, the rest of the process is simple commands. Any one had any luck with this? ...
0
votes
1answer
33 views

GnuPG - web of trust possible for offline device?

I plan to issue software updates to offline machines via USB sticks. Machies will be dispatched, and on site for potentially many years, During that time, new developers will be hired and fired. I ...
2
votes
1answer
23 views

What is the minimum amount of data I need to sign a file?

Let's say I have a multi-gigabyte file on a work computer, and (2) I have my private GnuPG key on my home computer. I want to sign the really big file with my private key. I trust my home computer ...
0
votes
2answers
373 views

How can I perform PGP encryption and decryption method using openssl commands

I have a PGP public key of B. Now A wants to send an encrypted message to B using his PGP Public key by using PGP method. How can I do this with OpenSSL? Edit I have seen wiki page for PGP method ...
2
votes
1answer
778 views

Sign & Encrypt vs. Encrypt & Sign - What does GPG do?

I’ve already read the discussion Should we sign-then-encrypt, or encrypt-then-sign? and the paper Defective Sign & Encrypt in S/MIME, PKCS#7, MOSS, PEM, PGP, and XML. My question has to do with ...
2
votes
2answers
115 views

Sending email using my GPG public key: Trying understand how to encrypt a PDF I will email

I am working on Mac OS X and using GPG KeyChain software to send an email to someone with my public key. It looks like the following: I am trying to understand the following two cases: When I ...
2
votes
1answer
375 views

Ranked Order of Security for Encryption Algorithm Preferences: For GPG

GPG & PGP negotiate the encryption & hashing algorithm to use based on the recipient key's prioritized list of supported algorithms. The problem is DES/MD5 are forced to be included as the ...
0
votes
1answer
82 views

GnuPG and cipher mode of operation

What cipher mode of operation does the GnuPG software use? And how I can change the mode? In openssl, I can explicit say "aes-256-ecb" or "aes-256-cbc".
0
votes
1answer
35 views

Where to find signing certificates in Thunderbird?

I have recently installed a Linux version besides Windows on my laptop. I am now copying over important programs and settings. I used to sign messages in Thunderbird with a certificate in Windows. I ...
4
votes
0answers
88 views

Send email via Thunderbird (Enigmail) as HTML

I'm having a problem that I want to use Thunderbird in combination with the Enigmail addodn to send and recieve emails that are enrypted by PGP. I can already view emails that are sent to me as HTML, ...
1
vote
1answer
97 views

open a pgp file and edit the decrypted content, re-encrypt on save [closed]

I use dropbox to backup my data, but I don't trust it. It's mostly for .txt files Is there a way of opening them (with emacs or sublime text or something else), and edit the underlying content like ...
0
votes
0answers
21 views

Can I use a pair of subkeys in isolation, without the master key

I understand that upon generation, I get a Master signing key (alpha), and I get a encryption subkey (beta 1). If I create two keys, beta 2 sign-only and beta 3 encrypt-only, push them to a ...
0
votes
0answers
13 views

Enigmail local caching of decrypted emails?

I received some encrypted emails with large attachments which delays opening the mails in Thunderbird by several seconds which seriously hampers my workflow. Can Enigmail decrypt my emails only once ...
1
vote
2answers
50 views

Is it possible to encrypt only certain data when a laptop hibernates?

I would like to achieve protection from both ends of the spectrum: On the one end you have the need to protect the sensitive data on the laptop. Encryption of the system disk means the data will be ...
2
votes
2answers
331 views

How to remove the gpg signature from a signed file without creating a new file on disk?

If I have a 100 MB signed binary file that I download over the internet, I need 200 MB of disk space to open it. The file is just signed, not encrypted. When disk space is low, It is not possible to ...
1
vote
0answers
285 views

Possible to Load/Unload DiskDrive Filter Driver On-The-Fly Without Restarting?

As the title implies, I want to know if I can load or unload a diskdrive filter driver without restarting the machine and have the change take effect immediately. I'm doing this in a WinPE ...
3
votes
1answer
67 views

How to generate the revocation certificate after being made a revoker with GnuPG

I read the "How should GnuPG's `--desig-revoke` command be used?" question/answer, so now I know when to use the --desig-revoke. So, I have two different private keys -- one at work (WORKWORK), ...
1
vote
1answer
552 views

Using OpenSSL to generate encryption key for Outlook users

A private web application needs to receive encrypted email from perhaps 20 known users. How can I use OpenSSL to generate a valid encryption certificate that Outlook users can import and use to ...
2
votes
4answers
192 views

GPG public key created with GnuPG is rejected by MS Outlook 2010, why?

I created a GPG keypair with GnuPG on the CentOS 7 command line and I have exported the public key into a .asc file and successfully used that public key to encrypt emails sent from another email ...
8
votes
2answers
10k views

How long would it take to break a 1024 bit OpenPGP encrypted email?

For WPA, there are calculators to determine the time needed to crack a passphrase, but I have found nothing for OpenPGP. How long would it take to break a 1024 bit OpenPGP encrypted email (depending ...
1
vote
0answers
54 views

Export P12 from GnuPG for PDF signing field

It seems to be possible to export a PGP .asc file to .p12, but I'm unable to use the generated .p12 file for a signature field in a PDF file. Is there a way to export it so it's usable for that field, ...
0
votes
1answer
121 views

Supress password prompt in GPG

Using GnuPG one can symmetrically encrypt a file using: gpg -c --cipher-algo TWOFISH --digest-algo SHA512 secret.txt and decrypt using: gpg -d -o secret.txt secret.txt.gpg After running these ...
0
votes
1answer
117 views

are gpg keyservers synchronised with each other? pgp mit server too?

A question regarding the gpg keyservers: Are the servers found in the list here synchronised with each other?: http://www.gpg4win.org/doc/de/gpg4win-compendium_22.html So uploading a pub key to one ...
0
votes
1answer
96 views

gpg key, submit to keyserver and find again using webbrowser

I am using Kleopatra to create gpg keys (gpg4win). However, I also want to use openkeychain on android. openkeychain uses pgp.mit.edu as keyserver, Kleopatra uses keys.gnupg.net keyserver. How can I ...
0
votes
1answer
524 views

How to generate a gpg4win keypair without passphrase?

I would like to generate a gpg keypair using gpg4win. I am at the point where a personal OpenPGP key pair is generated, but: How can I generate a keypair using gpg4win with no passphrase? The private ...
3
votes
1answer
162 views

Why is the ASCII-armored version of my OpenPGP public key so long?

My OpenPGP key pair was generated by 2048 RSA. The ASCII-armored version of the public key is much longer than most others that I see on the OpenPGP key servers. Mine is several screens worth of ...
2
votes
2answers
113 views

How to replicate GPA's Sign and Compress option on command line in Windows

As the title says, I need to replicate GPA's "Sign and Compress" option on the command line. I'm trying to automate some encryption of files for submission to a bank and the instructions they gave me ...