PGP (Pretty Good Privacy) is a computer program for encryption and decryption of data that provides cryptographic privacy and authentication for data communication.

learn more… | top users | synonyms

40
votes
1answer
2k views

Short, easy to understand explanation of GPG/PGP for nontechnical people?

Does anyone have a link to a good, but short (1-2 paragraphs) explanation of the benefits of using GPG/PGP signing and encryption for Email focused at non-technical readers? That is, why would someone ...
29
votes
1answer
13k views

Where to upload PGP public key? Are KeyServers still surviving?

I want to upload my PGP public key on a public server. Till the time PGP was an independent organization, I heard a lot about KeyServers, but after Symantec acquired PGP, what is the future of these ...
28
votes
2answers
9k views

One GnuPG/PGP key pair, two emails?

I have two emails I use frequently, for both of which I'd like to use PGP keys generated/managed by GnuPG. I'd like to avoid creating a different key pair for each email, if possible, as that's ...
21
votes
2answers
5k views

How to manage GPG keys across multiple systems?

I'm new to using GnuPG and trying to understand how best to use it. I've reviewed Short, easy to understand explanation of GPG/PGP for nontechnical people?, but most guides explain PGP with a ...
15
votes
1answer
4k views

Are files encrypted with gpg compatible with pgp?

Are files encrypted with gpg compatible with pgp? What about the other way? I recently learned the very basics of the procedures of using gpg to encrypt and decrypt files. But I don't have a lot of ...
12
votes
1answer
4k views

How does S/MIME differ from PGP/GPG, for the purpose of signing and/or encrypting email?

In addition to the titular question, are the two technologies compatible? If so, under what circumstances? What are the relative benefits of the two technologies?
11
votes
1answer
3k views

PGP encrypt single message for multiple recipients

Is it possible to encrypt a message using PGP so that multiple recipients (each with their own public private keypair) can decrypt it? I'd like to email one message which can be decrypted by each ...
9
votes
5answers
369 views

Infer PGP private key using an encoded decoded sample

If I have both an encoded message and its original, is it possible to infer the private key?
8
votes
1answer
847 views

Un-revoke PGP key

Whilst playing with GPG (and trying to figure out a safe way to store my revocation cert so nobody else could use it), I accidentally revoked my PGP key. The revocation was only local; not sent to a ...
8
votes
1answer
432 views

How to migrate my old PGP key to a more secure algorithm?

I have an old PGP using old GnuPG algorithm defaults. According to Best encryption and signing algorithm for GnuPG: RSA/RSA or DSA/Elgamal?, those algorithm settings are no longer sufficient, so I ...
8
votes
3answers
2k views

Why does GPG/PGP by default use different keys for signing/encryption?

If you create a new GPG key, you'll by default get a signing-only master key pair and an encryption-only sub-key pair. pub 2048R/XXXXXXXX created: 2013-02-09 expires: 2014-02-09 usage: SC sec ...
7
votes
1answer
1k views

PGP (GnuPG) - what was the original filename?

John wants to send 1.txt to Paul. He encrypts it. Now the file is named myFile.pgp, and he sends it to Paul. Paul gets the file. How (if possible) can Paul know what the original file name (1.txt) ...
7
votes
2answers
3k views

Why do people share their PGP Keys and how to use it?

I just learned how to generate PGP keys on Ubuntu (using Terminal or Seahorse). I have 2 very basic questions. Why do people share their PGP Keys? example How can we sent an authenticated mail ...
7
votes
6answers
3k views

What's the best way of keeping a PGP private key file generated by GnuPG?

What's the best way of keeping a PGP private key file generated by GnuPG? I will just store my public key online, in Gmail, on many of my computers. Where/how best to protect and store the private ...
7
votes
2answers
9k views

How to use gpg and SSH together? [duplicate]

Possible Duplicate: Are GPG and SSH keys interchangable? How to use gpg and SSH together? I know the basic procedures of 1) using gpg to encrypt and decrypt text files and 2) generating ...
6
votes
2answers
1k views

How long would it take to break a 1024 bit OpenPGP encrypted email?

For WPA, there are calculators to determine the time needed to crack a passphrase, but I have found nothing for OpenPGP. How long would it take to break a 1024 bit OpenPGP encrypted email (depending ...
6
votes
1answer
1k views

Do PGP private key blocks “contain” the public key as well?

I've noticed that if I import my ASCII-armored PGP private key into an otherwise empty GnuPG keyring (by deleting ~/.gnupg beforehand), the keyring contains both the public and private keys. Also, the ...
5
votes
2answers
6k views

Public/Private key locations with Enigmail and Thunderbird on Windows

Sorry if this is a simple answered question, I just cannot find what I'm looking for. I'd like to find the location of my public/private key combinations on my Windows machine that I made through ...
5
votes
1answer
3k views

Does the right half of the rsa public key matter?

In a public key file "id_rsa.pub" generated by ssh-keygen, does the part after the == matter? I ask because when I changed "root@somedomain.com" to "root", it seems to still work. More generally, I ...
5
votes
2answers
378 views

How can I get a new / non-technical user to verify my GnuPG / PGP signed email?

I'm looking for a web front-end or some easy way to get a user who's never been exposed to cryptography / digital signatures etc. to simply copy/paste my GPG signed (not encrypted) email and specify ...
5
votes
1answer
5k views

How do I create a PGP Key Revocation Certificate in Kleopatra

I was successfully able to create a PGP Key using Seahorse in Ubuntu's Passwords and Keys (13.04). I was also able to create a revocation certificate, if needed in the future, using the terminal in ...
5
votes
2answers
862 views

if one doesn't care about protecting a gpg secret key, is it still as secure as using gpg --symmetric?

Each of Alice and Bob is using gpg just to protect his/her own personal files and not using it as a way to send encrypted text to others. Alice has generated a key (gpg --gen-key) that she uses to ...
5
votes
1answer
372 views

Is it possible to find a sender's Public PGP (GPG) key from an encoded message?

Could you find the sender's Public PGP (GPG) key from an encoded message?
5
votes
1answer
2k views

How do I integrate GPG with alpine?

I have tried a couple of howtos, but they seem to either be too out of date or just plain don't work (don't work for me, at least). How do I sign and encrypt messages, as well as check integrity of ...
4
votes
3answers
4k views

How to store Kleopatra PGP keys on USB drive?

I'm using Kleopatra (actually gpg4win) on Windows. I've created PGP Private keys, and I would like to store them on my usb stick (e.g. be able to encrypt files only if the private key is available - ...
4
votes
1answer
17k views

what is PGP public key block?

There's PGP public key block posted on some websites (eg. http://phrack.org/index.html). It's not hex code. it uses much more alphabet characters. What is it? Why is this information posted? how can ...
4
votes
1answer
130 views

When I've signed a key with GPG, how do I send this information to a keyserver?

I just signed a friend's public key using gpg --sign-key. How can I send the signed key back to the key server, so that other people can see that I've signed it?
4
votes
1answer
387 views

How can I fix a corrupted PGP file?

I've encrypted a file with PGP but for "security reasons" I thought it would be good to damage the header and add some extra bytes so that even if someone finds it it won't know for sure it's a PGP ...
4
votes
1answer
433 views

gpg - Is the MDC check redundant if the file is signed?

I understand that gpg 1.4.9 computes a MDC code by default. According to my research this corresponds to to Sym. Encrypted and Integrity Protected Data Packet (tag 18) in the PGP spec. If the file is ...
4
votes
1answer
1k views

How do I verify a PGP signature?

What GUI (no command line) software or websites can I use to verify a PGP signature? If I have a message like this -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Because anyone can claim to be me. ...
3
votes
2answers
250 views

Is it possible to encrypt files without knowing the public key of person I am willing to share the data?

If I have files that I would like share with another person however if this person does not have a public key e.g. they have not yet installed PGP, etc how can I encrypt the data so that only that ...
3
votes
1answer
12k views

Decrypt PGP file using ASC key

I installed the command line version of pgp and I received a .pgp file and its key in a .asc file. How can I decrypt the pgp file using command line and the asc key?
3
votes
1answer
41 views

pgp: using subkey to sign, but should I publicize the fingerprints of both my master key and subkey?

I used gpg to create a key pair. I understand that a master key for signing only and a sub key for encryption only are generated. Following the Debian Wiki, I created a sub key for signing for better ...
3
votes
1answer
2k views

What is a GPG key ID?

After some google-fu and poking around on here, I'm still not clear on this. I understand the utility of the key block itself, and of a hash of the key, but I don't know why additional information ...
3
votes
3answers
390 views

Is it possible to associate a secondary email address with an existing *public* key?

For example, if I have a friend's public key that's associated with, say, email address john@domain.com, but I want to send him a message at john@other.net, is there a sensible way to do this? Is ...
3
votes
2answers
659 views

how to verify the trust path to a gpg key?

I want to check whether the gpg key used by Julien Danjou for his emacs snapshot repository can be trusted. There are many trust paths from my key to Juliens key. But I can't believe that there ...
3
votes
1answer
1k views

Microsoft Word and digital signatures using PGP?

I have a document for a project that I am working on with my team, and I need to digitally sign the document in a way that can be verified by other members of the team. The catch is, internally, we ...
3
votes
2answers
9k views

Authenticating and adding public key for apt

I was trying to get the official mongodb for Ubuntu, following the instructions at http://www.mongodb.org/display/DOCS/Ubuntu+and+Debian+packages After adding the deb ...
3
votes
1answer
204 views

Are there no further developments in GnuPG?

Though the GnuPG website shows the last stable release date to be: 2010-10-18, I feel there are no major improvements. Till the year 2003-2004, I used to see active developments and releases. I ...
3
votes
1answer
568 views

How can I use a PGP key on Windows to sign/verify and encrypt/decrypt documents?

Occasionally I need to encrypt a file, cryptographically sign something, etc. GNU PG and PGP are good tools for this, but how can I get them working on Windows? When I try to search for an installer, ...
3
votes
2answers
787 views

How can I disable prompt about trust when encrypting file with gpg in emacs

I want to use emacs to edit files encrypted with gnu privacy guard. Im using the gpg support built into emacs 23 which I think is easy pg assistant. I import keys created at the command line with M-x ...
3
votes
1answer
4k views

How to make use of pubring.gpg and secring.gpg

I just found my pubring.gpg and secring.gpg files, which I created for experimenting purposes years ago. I also know, in ascii, my public key. Because I can't remember how I generated my keys and what ...
3
votes
1answer
21 views

Is the PGP version number required?

ASCII-armored GnuPG data usually has a Version header: -----BEGIN PGP MESSAGE----- Version: GnuPG v2.0.22 (GNU/Linux) hQIMAxfkjOs8YMF+AQ//e9yWfwKBddUX/1YfghKfF/xJhuirYmAdxhsLaO5Fj0QJ ...
3
votes
1answer
10 views

How to generate the revocation certificate after being made a revoker with GnuPG

I read the "How should GnuPG's `--desig-revoke` command be used?" question/answer, so now I know when to use the --desig-revoke. So, I have two different private keys -- one at work (WORKWORK), ...
3
votes
2answers
201 views

Bad sector with PGP Whole Disk Encryption on MacOS X Mountain Lion

I have a MacBook Air from late 2012 that is running Mountain Lion. I also have PGP Whole Disk Encryption 10.2.1 installed and use it. On Monday night, I suddenly encountered a bad sector and the ...
3
votes
1answer
249 views

How can I revoke a user's PGP key?

We have a user who has since left the company who had PGP Desktop & Email encryption. We have just received a request to change the addresses on the account, but our corporate addresses are still ...
2
votes
3answers
1k views

Does the use of Tor makes additional encryption unnecessary?

I know Tor uses encryption to guarantee anonymity, but I if wish to guarantee the privacy of my conversations should I use an additional layer of encryption? Can my home router or ISP intercept Tor ...
2
votes
3answers
463 views

Moving PGP Keys

I am using gpg and generated, imported and signed keys. How can I take all of the work that I have done and export all of my keys then import them into another machine?
2
votes
2answers
602 views

How to restrict the usage flags for primary key-pairs in OpenPGP certificates?

More than one time I read recommendations to use the primary key-pair in my OpenPGP certificate only to sign sub-key-pairs and not for general daily use (even to keep the private key stored on a ...
2
votes
1answer
49 views

Why is the ASCII-armored version of my OpenPGP public key so long?

My OpenPGP key pair was generated by 2048 RSA. The ASCII-armored version of the public key is much longer than most others that I see on the OpenPGP key servers. Mine is several screens worth of ...