Questions tagged [gnupg]
GNU Privacy Guard (GnuPG or GPG) is a GPL Licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF standards track specification of OpenPGP.
825
questions
0
votes
1
answer
23
views
How to pipe GPG decryption into GPG encryption?
I would like to decrypt a file and edit it without writing its clear content to a temporary file, to avoid leaks of sensitive data.
I've already created the original file with this command:
echo -n &...
- 103
0
votes
0
answers
12
views
In thunderbird how to use pub key id from system gpg keyring?
I actually enabled external gpg key id for my email account, so I can decrypt/sign without problem.
However, I found that I cannot use the public key in my system keyring now. I discovered this today ...
- 892
0
votes
0
answers
48
views
Update gpg-agent version past the most recent apt version
I built the latest gnupg from the source code, but when I try generating a GPG key using gpg, I get the following warning:
gpg: WARNING: server 'gpg-agent' is older than us (2.2.27 < 2.4.5)
gpg: ...
- 1
0
votes
0
answers
16
views
gpg erroneously reporting key not self-signed
I am trying to sign another key with my key and gpg is complaining that the it's not self-signed, but when I do --list-sigs the self signatures show up. What's going on?
$ gpg --sign-key ...
- 142
0
votes
0
answers
81
views
Windows YubiKey GPG works with putty but not terminal
I created three gpg subkeys stored on my YubiKey as described here. I added enable-ssh-support and enable-putty-support to my gpg-agent.conf file. Everything works when accessing a server with the ssh-...
Marvin34565
4
votes
1
answer
542
views
Why is a key marked as a "Personal Key" in gpg?
In my list of keys visible when I do gpg --list-keys, one key that I have revoked is marked with "(Personal Key)", which comes after my user id name and before my email. What does this ...
- 193
2
votes
1
answer
31
views
Truncate history of a GPG key
When you create a GnuPG key, edit it, and list packages, it still shares hints to the past changes. How can I clear/truncate the history of a GPG key?
Consider the following gpg --list-packets output ...
- 121
0
votes
0
answers
207
views
What does gpg: skipped "user": no secret key mean?? (How to solve)?
I am doing a git commit and I am getting the following error:
gpg: skipped "user <email>": No secret key
gpg: signing failed: No secret key
error: gpg failed to sign the data
fatal: ...
- 101
1
vote
0
answers
24
views
How do I hide the size of GPG message?
When constructing encrypted GPG messages I've noticed that the size of the output seems to be correlated to the size of the input. This makes sense in an information-theoretic sense. However, this is ...
- 270
3
votes
0
answers
2k
views
"gpg: no valid OpenPGP data found" - how to tell whether it is a gpg file?
I am trying to decrypt a file that I created back then in October 2009 on a Linux machine:
gpg -d mydata.tar.gpg
Instead of being prompted for the password (which I still keep), I am getting an error:...
- 319
1
vote
0
answers
34
views
GnuPG: is it possible to sign a precreated digest/hash?
With gpg -s <input file> will create the hash of the file and sign it.
Is there an option to let the caller prepare the hash and let gpg just sign the hash provided?
- 111
0
votes
0
answers
33
views
Does ~/.gnupg/gpg.conf accept shell environment variables?
I need to add my GPG key to some lines in
~/.gnupg/gpg.conf
such as
default-key XXX
default-recipient XXX
Does it accept shell environment variables? Can I use
default-key $GPGKEY
default-recipient $...
- 2,995
0
votes
1
answer
28
views
do subkeys on other devices needs to be re-issued and imported again after changing secret passphrase?
I need to change the passphrase initially set for my gpg key to a new one. I have three devices/hosts that each have their own signing subkey issued from the master, and a shared encrypt subkey used ...
- 5
1
vote
1
answer
299
views
GPG cannot generate keys
The files in ~/.gnugpg have been accidentally corrupted and now when I generate a new key I get this error:
gpg: agent_genkey failed: No such file or directory Key generation
failed: No such file or ...
- 131
0
votes
0
answers
210
views
gpg decrypt giving blank output
In Python, trying to decrypt a file using gnupg.
Using 'import gnupg'. (NOT python-gnupg).
Getting error message - (gnupg:FAILURE status emitted from gpg process: decrypt 4294967295") AND its not ...
- 1
0
votes
1
answer
180
views
Is it possible to recover pass passwords from backup?
I was missing some passwords for some quite old accounts, when I remembered I'd made a backup of my drive at the time. There, I found a ~/.local/share/password-store directory, in which my passwords ...
- 13
0
votes
0
answers
503
views
Should one really disable AEAD for recent GnuPG created PGP keys?
Apparently, there are some problems with the new defaults that are set when one creates a PGP key using a recent version of GnuPG (2.4).
I ran into this after generating a new ECC/ED25519 key to ...
- 165
1
vote
1
answer
110
views
Encrypting with generic GPG key in gpg4win
One of our business partners has a PGP domain key where the key is valid for encryption to any email address of the business.
The user id of the key is like [email protected] - and for the life of ...
jhoffrichter
1
vote
0
answers
38
views
Decrypting with gnupg
In Linux, I'm familiar with decrypting .gpg files at the command line. But it seems to me that if I want to save a decrypted file in the same folder from where the unencrypted file was, then I always ...
- 111
1
vote
1
answer
400
views
gpg: failed to create temporary file - problematic hostname
I've stumbled upon an interesting case with setting up gpg on Mac OS:
gpg: failed to create temporary file '/Users/pprazak/.gnupg/.#lk0x000060000145c100.NAME WITH SPACES.53297': No such file or ...
- 287
0
votes
1
answer
341
views
Creating PGP key for file encryption in a single command
I am looking for a single, non-interactive command to generate a PGP key that can be used for file encryption.
According to the gpg docs, I should be able to run this to create a key capable of ...
- 283
0
votes
1
answer
180
views
How to retrieve past Github GPG keys?
Github's public GPG key very recently (2024-01-16) expired.
I have deleted my locally stored public key copy of that key and cannot verify old commits of our repo.
Now to retrieve the Github public ...
- 121
0
votes
1
answer
292
views
Dangerous vulnerability: pinentry-mac completely and continuously disables prompt for GPG passphrase
The short story:
I just installed pinentry-mac and this asks me my passphrase only once but then decrypt gpg files without asking for passphrase
The long story:
I am running macos and I use gpg and ...
- 165
0
votes
1
answer
346
views
I generated a new GPG key using GnuPG and associated multiple email addresses with it. Is it possible to remove some of these email addresses now?
I'd like to clarify that the GPG key has not been uploaded to any server yet; it only exists on my local machine. In this scenario, can I proceed with using deluid to remove certain email addresses? ...
- 151
0
votes
1
answer
371
views
GnuPG: Updated gpg setpref for 2024
Using Ubuntu 22.04.3 LTS with GnuPG 2.2.27 and libgcrypt 1.9.4.
Would someone in the know please suggest what the gpg --edit-key, setpref input should look like for 2024? Or a current gpg.conf file? ...
- 1
3
votes
1
answer
375
views
Cannot protect GPG key using TPM2 on Ubuntu 22.04
I'm trying to protect a GPG key using the TPM2 available on my laptop, but I'm not having any success. Probably I'm doing something wrong, but I cannot figure out what this is.
My system is running ...
- 171
2
votes
0
answers
511
views
VSCode unable to sign commits
If I try to commit something, I'm getting this error.
> git -c user.useConfigOnly=true commit --quiet --allow-empty-message --file - -S
error: gpg failed to sign the data:
gpg: skipped <redacted&...
- 175
0
votes
0
answers
616
views
The command sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys does not work for me
i tried several fixes i could find for GPG issues, like sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys PUB_KEY, also using the port 80 and even adding manually the pub_key but i still ...
0
votes
1
answer
995
views
Cannot bypass GPG check to reinstall packages/update on Debian 7
I am trying to reinstall some packages on a debian 7.11
# lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description: Debian GNU/Linux 7.11 (wheezy)
Release: 7.11
Codename: ...
- 11
1
vote
1
answer
125
views
How can I verify a package installer when there is no public key
I am preparing to install privoxy and I expected to find the privoxy public key somewhere on their website or on SourceForge or on a keyserver. I can't find it. All gpg tutorials I have found suggest ...
- 417
1
vote
1
answer
537
views
Kali Download Verification
I am having difficulty getting the results I expect from the Kali Linux download verification steps below. I realize there is a Kali forum on their website but they aren't accepting new registrations ...
- 23
2
votes
1
answer
2k
views
Cannot find GPG Key
Please help me debug this set of terminal commands.
I have created a GPG key and added it to github, and am trying to sign my commits:
me@my-macbook myproject % gpg --list-secret-keys --keyid-format=...
- 123
0
votes
0
answers
108
views
Save Key Pair - From Terminal - Not To Persistent Storage - Tails
So . . . I am not using the persistent storage since it defeats the whole point of Tails. I am trying to save my PGP key pair to a secondary thumb drive (not the one tails is on) to be able to either ...
0
votes
1
answer
203
views
Security implications between doing gpg --export vs copying ~/.gnupg entirely
I'm trying to transfer over my private gpg keys, and I'm running into some weird advice. On one hand, I'm being told to do gpg --export and gpg --export-secret-keys, and on another, I was recommended ...
- 3
4
votes
1
answer
4k
views
GPG stops doing anything on Mac
Twice now GPG has completely stopped working for me after some time (days or weeks) of not using it. When trying to use it, no errors show up and it simply sits and does nothing until i use ctrl-c to ...
0
votes
0
answers
537
views
GPG: AllowSetForegroundWindow(13116) failed: The parameter is incorrect
I'm trying to generate a key pair in GnuGPG and receiving "GPG: AllowSetForegroundWindow(13116) failed: The parameter is incorrect."
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O We ...
- 13
0
votes
0
answers
110
views
Is it possible to recover a zip file corrupted by GnuPG?
I recently started encrypting a zip file with:
gpg --symmetric my_file.zip
It was taking a long time - the archive is about 300 MB - and so I decided to cancel the operation part way through. The zip ...
0
votes
1
answer
1k
views
GPG: Which key is GPG exactly using for encrypting and decrypting?
Sometime back I installed GPG and been using it to encrypt files and text.
Command used to encrypt:
gpg -c file.zip > file.zip.gpg
Command used to decrypt:
gpg -d file.zip.gpg > file.zip
Till ...
- 179
4
votes
2
answers
2k
views
Can anyone with the passphrase decrypt a file encrypted with GnuPG plus the symmetric flag?
Say that I own Laptop A. Say that, on Laptop A, I encrypt a file using the command:
gpg --symmetric my_file.txt
And say that I then install that encrypted file on a USB stick.
Now suppose that six ...
1
vote
0
answers
69
views
GPG allows importing an invalid secp256k1 public key
I came across a PGP public key that seems invalid. The key is a secp256k1 public key that supported by GPG. In fact, GPG allows importing that key even if it has an invalid secp256k1 public key inside....
- 131
0
votes
0
answers
182
views
How to use OpenPGP smartcard with Avtor CR-371M reader?
I have an OpenPGP card that was setup on a different computer with a different cardreader and is known to work fine for signing emails with GnuPG. Now I am trying to use it on a Windows 10 desktop ...
- 598
0
votes
1
answer
121
views
I decided that my gnupg key I generated is not okay. I removed the ".gnupg" folder which contained it. Is that enough before generating a new key?
I generated my key with gpg --full-generate-key then it got placed inside the HOME folder's .gnupg folder. I removed the entire .gnupg folder now. Is that enough if I decide to generate a brand new ...
- 151
1
vote
0
answers
454
views
4096 bit key generation on OpenPGP card
What is the corresponding command to create a 4096 bit RSA key on an OpenPGP card via gpg(2) --card-edit? The documentation just indicates --algo=. I tried RSAwith different values like 3072 and 4096 -...
- 83
0
votes
0
answers
88
views
Hide gpg passphrase from process list
I have made a script that lets me edit gpg encrypted files in vim:
#!/bin/sh
read_password() {
printf "Enter passphrase: "
stty -echo
read password
stty echo
echo
}
...
- 1
0
votes
1
answer
434
views
Edit symmetrically encrypted file with gpg
I am writing a script that lets the user edit a gpg encrypted file with vim. I have already done it with asymmetric encryption like this:
#!/bin/sh
# TODO: add support for symmetric encryption
if [ $...
- 13
1
vote
1
answer
914
views
`gpg: key XXX not found: Not found` when listing public keys
Recently, when doing a gpg --list-keys <email> against my own personal email, I've noticed that GnuPG started giving me a number of errors before proceeding with normal output:
$ gpg --list-keys ...
- 184
0
votes
1
answer
463
views
Can `gpg --symmetric` produce reproducible output?
Out of curiosity, I would like to know if it possible to use gpg --symmetric in a way that encrypting the same data with the same password (and algorithms) will generate the same output each time.
I ...
- 105
0
votes
1
answer
491
views
How to sign somebody else's gpg key when master key somewhere else?
Along the same lines as this post, in which they never posted the solution.
How to finally do it?
What steps to follow to sign somebody else's key?
I am just starting to use GPG and run into the same ...
- 1
3
votes
2
answers
24k
views
Unable to update with dnf because of a GPG check FAILED
Since last week I can´t update anything. If I try sudo dnf update, the process starts normally but then I get the following error:
error: Verifying a signature using certificate ...
- 71
1
vote
2
answers
1k
views
GPG keys not working when using su - <user>
I've two accounts on my home machine, one work, one general. Occassionally I want to access my pass password database from my general account whilst logged in as my work user. Problem is I get the ...
- 113