Questions tagged [gnupg]
GNU Privacy Guard (GnuPG or GPG) is a GPL Licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF standards track specification of OpenPGP.
810
questions
0
votes
0
answers
39
views
Should one really disable AEAD for recent GnuPG created PGP keys?
Apparently, there are some problems with the new defaults that are set when one creates a PGP key using a recent version of GnuPG (2.4).
I ran into this after generating a new ECC/ED25519 key to ...
1
vote
1
answer
81
views
Encrypting with generic GPG key in gpg4win
One of our business partners has a PGP domain key where the key is valid for encryption to any email address of the business.
The user id of the key is like [email protected] - and for the life of ...
0
votes
0
answers
28
views
Decrypting with gnupg
In Linux, I'm familiar with decrypting .gpg files at the command line. But it seems to me that if I want to save a decrypted file in the same folder from where the unencrypted file was, then I always ...
1
vote
1
answer
90
views
gpg: failed to create temporary file - problematic hostname
I've stumbled upon an interesting case with setting up gpg on Mac OS:
gpg: failed to create temporary file '/Users/pprazak/.gnupg/.#lk0x000060000145c100.NAME WITH SPACES.53297': No such file or ...
0
votes
1
answer
84
views
Creating PGP key for file encryption in a single command
I am looking for a single, non-interactive command to generate a PGP key that can be used for file encryption.
According to the gpg docs, I should be able to run this to create a key capable of ...
0
votes
1
answer
60
views
How to retrieve past Github GPG keys?
Github's public GPG key very recently (2024-01-16) expired.
I have deleted my locally stored public key copy of that key and cannot verify old commits of our repo.
Now to retrieve the Github public ...
0
votes
1
answer
71
views
Dangerous vulnerability: pinentry-mac completely and continuously disables prompt for GPG passphrase
The short story:
I just installed pinentry-mac and this asks me my passphrase only once but then decrypt gpg files without asking for passphrase
The long story:
I am running macos and I use gpg and ...
0
votes
1
answer
179
views
I generated a new GPG key using GnuPG and associated multiple email addresses with it. Is it possible to remove some of these email addresses now?
I'd like to clarify that the GPG key has not been uploaded to any server yet; it only exists on my local machine. In this scenario, can I proceed with using deluid to remove certain email addresses? ...
0
votes
1
answer
123
views
GnuPG: Updated gpg setpref for 2024
Using Ubuntu 22.04.3 LTS with GnuPG 2.2.27 and libgcrypt 1.9.4.
Would someone in the know please suggest what the gpg --edit-key, setpref input should look like for 2024? Or a current gpg.conf file? ...
2
votes
1
answer
187
views
Cannot protect GPG key using TPM2 on Ubuntu 22.04
I'm trying to protect a GPG key using the TPM2 available on my laptop, but I'm not having any success. Probably I'm doing something wrong, but I cannot figure out what this is.
My system is running ...
2
votes
0
answers
182
views
VSCode unable to sign commits
If I try to commit something, I'm getting this error.
> git -c user.useConfigOnly=true commit --quiet --allow-empty-message --file - -S
error: gpg failed to sign the data:
gpg: skipped <redacted&...
0
votes
0
answers
355
views
The command sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys does not work for me
i tried several fixes i could find for GPG issues, like sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys PUB_KEY, also using the port 80 and even adding manually the pub_key but i still ...
0
votes
0
answers
294
views
Cannot bypass GPG check to reinstall packages/update on Debian 7
I am trying to reinstall some packages on a debian 7.11
# lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description: Debian GNU/Linux 7.11 (wheezy)
Release: 7.11
Codename: ...
1
vote
1
answer
77
views
How can I verify a package installer when there is no public key
I am preparing to install privoxy and I expected to find the privoxy public key somewhere on their website or on SourceForge or on a keyserver. I can't find it. All gpg tutorials I have found suggest ...
1
vote
1
answer
248
views
Kali Download Verification
I am having difficulty getting the results I expect from the Kali Linux download verification steps below. I realize there is a Kali forum on their website but they aren't accepting new registrations ...
1
vote
1
answer
734
views
Cannot find GPG Key
Please help me debug this set of terminal commands.
I have created a GPG key and added it to github, and am trying to sign my commits:
me@my-macbook myproject % gpg --list-secret-keys --keyid-format=...
0
votes
0
answers
54
views
Save Key Pair - From Terminal - Not To Persistent Storage - Tails
So . . . I am not using the persistent storage since it defeats the whole point of Tails. I am trying to save my PGP key pair to a secondary thumb drive (not the one tails is on) to be able to either ...
0
votes
1
answer
90
views
Security implications between doing gpg --export vs copying ~/.gnupg entirely
I'm trying to transfer over my private gpg keys, and I'm running into some weird advice. On one hand, I'm being told to do gpg --export and gpg --export-secret-keys, and on another, I was recommended ...
3
votes
1
answer
2k
views
GPG stops doing anything on Mac
Twice now GPG has completely stopped working for me after some time (days or weeks) of not using it. When trying to use it, no errors show up and it simply sits and does nothing until i use ctrl-c to ...
0
votes
0
answers
358
views
GPG: AllowSetForegroundWindow(13116) failed: The parameter is incorrect
I'm trying to generate a key pair in GnuGPG and receiving "GPG: AllowSetForegroundWindow(13116) failed: The parameter is incorrect."
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O We ...
0
votes
0
answers
73
views
Is it possible to recover a zip file corrupted by GnuPG?
I recently started encrypting a zip file with:
gpg --symmetric my_file.zip
It was taking a long time - the archive is about 300 MB - and so I decided to cancel the operation part way through. The zip ...
0
votes
1
answer
507
views
GPG: Which key is GPG exactly using for encrypting and decrypting?
Sometime back I installed GPG and been using it to encrypt files and text.
Command used to encrypt:
gpg -c file.zip > file.zip.gpg
Command used to decrypt:
gpg -d file.zip.gpg > file.zip
Till ...
4
votes
2
answers
2k
views
Can anyone with the passphrase decrypt a file encrypted with GnuPG plus the symmetric flag?
Say that I own Laptop A. Say that, on Laptop A, I encrypt a file using the command:
gpg --symmetric my_file.txt
And say that I then install that encrypted file on a USB stick.
Now suppose that six ...
0
votes
0
answers
45
views
GPG allows importing an invalid secp256k1 public key
I came across a PGP public key that seems invalid. The key is a secp256k1 public key that supported by GPG. In fact, GPG allows importing that key even if it has an invalid secp256k1 public key inside....
0
votes
0
answers
141
views
How to use OpenPGP smartcard with Avtor CR-371M reader?
I have an OpenPGP card that was setup on a different computer with a different cardreader and is known to work fine for signing emails with GnuPG. Now I am trying to use it on a Windows 10 desktop ...
0
votes
1
answer
113
views
I decided that my gnupg key I generated is not okay. I removed the ".gnupg" folder which contained it. Is that enough before generating a new key?
I generated my key with gpg --full-generate-key then it got placed inside the HOME folder's .gnupg folder. I removed the entire .gnupg folder now. Is that enough if I decide to generate a brand new ...
0
votes
0
answers
138
views
GPG: [unknown] in a showpref output?
I'm inspecting my key pair by showpref and get something like this:
[ unknown] (1). [email protected] <[email protected]>
Cipher: AES256, AES, AES192, 3DES
AEAD:
Digest: SHA256, ...
0
votes
0
answers
260
views
How do I tell pass to update my key if `pass init` isn't working?
I am trying to use pass again after a longish lull, and it was (reasonably) complaining that my gpg key was expired. I used the instructions at Can you extend the expiration date of an already expired ...
0
votes
0
answers
327
views
4096 bit key generation on OpenPGP card
What is the corresponding command to create a 4096 bit RSA key on an OpenPGP card via gpg(2) --card-edit? The documentation just indicates --algo=. I tried RSAwith different values like 3072 and 4096 -...
0
votes
0
answers
72
views
Hide gpg passphrase from process list
I have made a script that lets me edit gpg encrypted files in vim:
#!/bin/sh
read_password() {
printf "Enter passphrase: "
stty -echo
read password
stty echo
echo
}
...
0
votes
1
answer
282
views
Edit symmetrically encrypted file with gpg
I am writing a script that lets the user edit a gpg encrypted file with vim. I have already done it with asymmetric encryption like this:
#!/bin/sh
# TODO: add support for symmetric encryption
if [ $...
1
vote
1
answer
863
views
`gpg: key XXX not found: Not found` when listing public keys
Recently, when doing a gpg --list-keys <email> against my own personal email, I've noticed that GnuPG started giving me a number of errors before proceeding with normal output:
$ gpg --list-keys ...
0
votes
1
answer
279
views
Can `gpg --symmetric` produce reproducible output?
Out of curiosity, I would like to know if it possible to use gpg --symmetric in a way that encrypting the same data with the same password (and algorithms) will generate the same output each time.
I ...
0
votes
1
answer
281
views
How to sign somebody else's gpg key when master key somewhere else?
Along the same lines as this post, in which they never posted the solution.
How to finally do it?
What steps to follow to sign somebody else's key?
I am just starting to use GPG and run into the same ...
2
votes
2
answers
15k
views
Unable to update with dnf because of a GPG check FAILED
Since last week I can´t update anything. If I try sudo dnf update, the process starts normally but then I get the following error:
error: Verifying a signature using certificate ...
1
vote
2
answers
735
views
GPG keys not working when using su - <user>
I've two accounts on my home machine, one work, one general. Occassionally I want to access my pass password database from my general account whilst logged in as my work user. Problem is I get the ...
1
vote
0
answers
70
views
Recover Kleopatra Notepad
TL;DR
Where does Kleopatra store it's notepad, if it does at all ? Where can I find information on the internal notepad feature ?
Details
Is Kleopatra's notepad stored somewhere ? where ?
Kleopatra ...
1
vote
0
answers
1k
views
How can I extend the expiration date of an expired GPG key?
I am trying to extend the expiration date of an expired GPG/PGP key, mainly using the results from this post. My steps look like this :
$ gpg --list-keys
pub rsa4096 2021-01-01 [C] [expired: 2023-01-...
0
votes
0
answers
35
views
Managing signed commits as an organization
We are looking to introduce signing of commits into our company.
Currently we are leaning towards using GPG kays, but we can consider SSH if what we want cannot be achieved with GPG.
We are using a ...
1
vote
1
answer
125
views
Will bad thing happed if i remove an uid from my pgp key?
I added an photo uid to my openpgp keyring a few days ago.
If i want to update this image later, do i have to revoke the old one and keep it on the key? I don't want to because it would obviously make ...
0
votes
1
answer
190
views
Error on exported gpg secret key from linux to Mac [duplicate]
I have exported a gpg key from linux to Mac. Exporting commands on linux are as follows
gpg --export-secret-keys -a test_01.asc
gpg --export -a test_01_pub.asc
Importing commands on Mac are as ...
0
votes
1
answer
195
views
Adding gpg-exported ssh key to ssh-agent
I exported one authentication key from gpg to a public ssh key (with the --export-ssh-key), now I'd like to add its privat key with ssh-add to be able to clone a repository on github through the ssh ...
0
votes
0
answers
605
views
Kleopatra won't open
Out of the blue Kleopatha just refuses to open, I have dug through the internet and found nothing that works. I ran it as an admin and for some reason it shows in task manager that its there but ...
0
votes
1
answer
268
views
GnuPG and TPM : IPC error
Ι installed the latest version of gpg in manjaro OS:
$lsb_release -a
LSB Version: n/a
Distributor ID: ManjaroLinux
Description: Manjaro Linux
Release: 22.0.4
Codename: Sikaris
and test tpm ...
1
vote
1
answer
110
views
Is situation (with GPG) possibly a malware attack?
I am taking care of an ubuntu server (22.04) and suddenly I was not able to access some files via FTP. I checked a few things and noticed a gpg root process consuming a lot of CPU. It kept restarting ...
0
votes
2
answers
397
views
Is there a way to import PGP keys *interactively* using GPG?
I'm using PGP since version 2.3a, and I had liked the interactive user interface of it.
Specifically when opening a file with PGP keys, PGP asked me what I want to do with it, allowing me to confirm ...
0
votes
0
answers
666
views
gpg --pinentry-mode loopback too much data for the ICP layer in CLI (non-gui) mode?
When I use X11 GUI mode, I can enter my passphrase through the prompt without errors: 'gpg -d <my encrypted file>'.
However, when I try the same from a CLI (windowless mode) specifying pinentry-...
1
vote
1
answer
837
views
aws-vault: prompt for pass password if necessary
I'm using pass as a backend to aws-vault on a remote machine and it seems like I need to manually add the "password" for the profile into gpg-agent before aws-vault can make use of it. ...
1
vote
1
answer
2k
views
KWallet Error when attempting to decrypt the wallet ... Inappropriate ioctl for device
Whenever I try to open something that needs access to KWallet (e.g. Browser), this dialog box pops up:
I've read elsewhere that to fix this you need to set the GPG_TTY environment variable to $(tty), ...
0
votes
0
answers
298
views
Generate GPG key on Windows 10 gives error message
gpg --generate-key
This is the error message I'm getting:
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
...