4
votes
1answer
713 views

Why does GPG/PGP by default use different keys for signing/encryption?

If you create a new GPG key, you'll by default get a signing-only master key pair and an encryption-only sub-key pair. pub 2048R/XXXXXXXX created: 2013-02-09 expires: 2014-02-09 usage: SC sec ...
0
votes
1answer
157 views

How to show (for copy&paste) a secret GPG/PGP key without creating a file

I need to access my secret GPG/PGP key to copy/paste it into another application. How do I show my secret key without generating too much traces of it? I only know of the export command to gpg (or ...
0
votes
2answers
225 views

GPG4WIN Keys and Transferring them

I have installed www.gpg4win.org and have generated a keys that will allow me to both sign and encrypt files. On windows it uses the (KDE) / Kleopatra Certificate Manager - Version 2.1.0. What is the ...
1
vote
1answer
788 views

Does the right half of the rsa public key matter?

In a public key file "id_rsa.pub" generated by ssh-keygen, does the part after the == matter? I ask because when I changed "root@somedomain.com" to "root", it seems to still work. More generally, I ...
1
vote
1answer
627 views

gpg: import failure key xxxxxxxx: no valid user IDs

i am getting this error while importing a public key on gpg (GnuPG) 1.4.2 gpg: armor header: Version: GnuPG v2.0.14 (GNU/Linux) gpg: pub xxxxx/xxxxxxxx 2012-05-25 abcd xyz <email@address.com> ...
2
votes
2answers
283 views

how to verify the trust path to a gpg key?

I want to check whether the gpg key used by Julien Danjou for his emacs snapshot repository can be trusted. There are many trust paths from my key to Juliens key. But I can't believe that there ...
0
votes
1answer
199 views

How to embed an ASCII logo into an ASCII-armored RSA key?

The cryptoparty site publishes an RSA key with an ASCII art logo embedded in it. Is there a way to put arbitrary characters in an ASCII-armored RSA key? From https://github.com/cryptoparty/handbook ...
4
votes
2answers
294 views

How can I get a new / non-technical user to verify my GnuPG / PGP signed email?

I'm looking for a web front-end or some easy way to get a user who's never been exposed to cryptography / digital signatures etc. to simply copy/paste my GPG signed (not encrypted) email and specify ...