Questions tagged [openpgp]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

Is it possible to use macOS 'Keychain' + 'TouchID' for pinentry-program?

Is there some way of configuring pinentry-mac, which I currently use to enter the passphrase for my OpenPGP card (a Yubikey), or a different program that'll store the passphrase in the macOS 'Keychain'...
0
votes
0answers
79 views

Verify PGP Signature on Fedora

I am attempting to very a PGP Signature using Fedora and have no prior experience using PGP but did manage to get urandom set up correctly. I have the Public Key and a document downloadable from this ...
0
votes
0answers
22 views

.sig signature file not valid after uploading to web server

I've got a security.txt file for my web app, and to go with that, I've got a security.txt.sig file. When I test the verification process using Kleopatra on my windows 7 PC (incidentally, this is the ...
0
votes
0answers
729 views

Convert GPG private key to QR code?

How can I generate a QR code from a OpenPGP/GnuPG private key on Windows 7? Context: I created a private key pair on a Windows computer and want to import the key to my phone. The phone app has ...
1
vote
1answer
245 views

How to convert gpg4win's binary to ascii, with Notepad++

I can reliably convert gpg4win's ascii to binary using Notepad++ option "Base64 Decode" (credit: James K Polk). Works every time. But when I attempt the reverse, i.e. convert binary to ascii, it ...
0
votes
0answers
56 views

How to set defaults for gpg4win/Kleopatra

When encrypting a file with ggp4win/Kleopatra, some options are checked by default. See screenshot below: Is there a way to have a different set of boxes checked automatically?
0
votes
1answer
136 views

How to convert gpg4win's ascii to binary?

gpg4win can save and read encrypted files in two forms: Binary with .gpg extension Base64/ascii with .asc extension Is there a way to convert the Base64/ascii output to binary? I tried with Notepad+...
0
votes
0answers
86 views

How to recover an OpenPGP Card which factory reset cycle has been interrupted?

I have a OpenPGP Card V3.3. Yesterday, I performed a full factory reset. Unfortunately, the reset procedure was interrupted by an power outage. While the activity LED with my card reader indicates ...
0
votes
1answer
335 views

Verifying/decrypt email using PGP signature/public key

UPDATED QUESTION: Using Outlook 2013 64bit on Windows 7 64bit, I have setup GnuPG which allows me to send encrypted emails. To do that, I asked someone for their public key. I sent them an email ...
0
votes
1answer
247 views

Make git ask Kleopatra to unlock GPG key for specific e-mail address

I'm on a Windows 10 machine with Gpg4win and Kleopatra installed, as well as the most recent version of git. In Kleopatra I have two OpenPGP certificates loaded, let's say for these e-mails: john.doe@...
4
votes
0answers
4k views

How to setup SSH/PuTTY to use Yubikey OpenPGP authentication?

I would like to use my Yubikey's OpenPGP interface to authenticate myself against my OpenSSH server on my Windows 10 computer as showcased here. I had created the keys according to the documentation. ...
0
votes
1answer
39 views

Is using OpenPGP for long term encrypted files bad practice?

I've recently been playing around with GnuPG using a yubikey, and its very nice but I have some concerns I like to ask about. PGP seems geard toward emails and short lived messages. Is the OpenPGP ...
1
vote
2answers
383 views

GnuPG: Add passphrase to passphrase-less key

I've created my PGP keypair using an online site. The thing is, I didn't provide a passphrase upon creation; The site didn't make supplying a passphrase mandatory. Since this key is passphraseless, ...
1
vote
1answer
92 views

Do I need a PGP key?

I've recently got familiar with the concept of OpenPGP public-private keys, and how to use GnuPG tool to manage PGP keys. I have three questions: 1- Is it necessary for me to have a PGP (or an ...
1
vote
0answers
387 views

Minimum length of detached PGP signature

How small can a detached PGP signature be? The only size I get is 287 bytes for a 2048-bit key and 543 bytes for a 4096-bit key, regardless of the size of the data being signed. However, on this post ...
0
votes
2answers
66 views

Unable to descrypt mp3 file via gpg

I'm trying to decrypt a binary/mp3 file of 100Mb of size. gpg2 --decrypt my_audio.mp3.gpg And it results into a long binary text in the terminal and it won't create a pure mp3 file: binary text ...
0
votes
1answer
36 views

When should I backup my primary OpenPGP key?

When should I backup my primary OpenPGP key? I recently generated an OpenPGP key using the following setup (output of gpg2 --list-keys): pub rsa4096/KEYIDSC 2017-10-19 [SC] uid [ultimate] ...
1
vote
1answer
751 views

Is it possible to find signer's email address(es) from an OpenPGP (GnuPG) signed message?

I have two files bla.txt and bla.txt.sig. The latter is the signature for the first. I do not (yet) know who is the signer. GnuPG just says (correctly): "No public key". With the email address I could ...
0
votes
0answers
102 views

How to load data from a old virtual disk generated using PGP 6.0.2?

I have a virtual disk file (.pgd) and I think that I remember the passphrase, is there possible recovery my data? I have try install the PGP Freeware 6.0.2 but it not run in windows 10. I did some ...
6
votes
1answer
678 views

How to use GnuPG to get the smallest possible output (symmetric encryption)?

I'm trying to produce very small OpenPGP-encrypted files that can be embedded into QR codes. However, in comparison to for example OpenSSL, GnuPG seems to produce very large results for a simple ...
2
votes
1answer
818 views

Why does PostgreSQL's pgp_sym_encrypt return different output although invoked for the same input?

I am getting different results while executing PostgreSQL's pgp_sym_encrypt command with same plaintext and passphrase as input. When decrypting those different results with the same passphrase, I get ...
5
votes
1answer
3k views

Retrieve public keys that signed a key I have

I am trying to figure out how to do the following in one command. I have an ISO image along with its signature file *.sig. I tried to verify it via GnuPG 2 but it reported a missing public key giving ...
5
votes
3answers
2k views

What determines the clearsign hash algorithm used by GnuPG?

When using GnuPG to clear sign a text, there is a hash part in signed message. Take the example: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 abc -----BEGIN PGP SIGNATURE----- ...
0
votes
1answer
135 views

sFTP Encoding in Cleo VLTrader

I want to secure a zip file using Base64 OpenPGP encryption. some application have the option in command line, I wonder if such feature is available in Cleo VLTrader's GUI?
4
votes
2answers
349 views

Handling and security of GnuPG private key

I am new GnuPG, thus, this might be a silly question. Yet: I want to encrypt my emails, thus using gpg4win. Alongside I use Kleopatra, a tool for creating my own certificates and managing the public ...
1
vote
2answers
197 views

GnuPG with CAPI smartcard / NOT an OpenPGP card

I have a RSA SecurId loaded with two keys and their corresponding certificate (signature and authentication). I'm already using the authentication key pair for SSH login (from my Windows desktop) ...
1
vote
0answers
202 views

gpg2 --edit-key addphoto / keytocard without password prompt

I am trying export subkeys to card for a keyring without any keyboard interaction using the command keytocard. This type of command is the same as addphoto as it requires to edit the keyring with --...
1
vote
2answers
611 views

Thunderbird Enigmail does not recognize key - “error - no matching/private key found”

A few month ago I set up enigmail for one of my computers. I imported a fried's key and was successful in decrypting his messages. I switched computers now and tried to replicate all the steps I did ...
1
vote
1answer
37 views

What makes OpenPGP keyrings trustworthy?

I've started reading the Linux From Scratch book and in the first few chapters, you are required to download the sources of all software packages you will need during the installation. The book ...
1
vote
1answer
542 views

Paperkey output file significantly larger than original secret key

Ok ok, so I'm probably missing something super obvious, but here is my scenario. Few months back, I decided "Hey, I should probably start keeping paper copies of sensitive data in case all my hard ...
9
votes
1answer
4k views

gpg2 asking for passphrase when importing secret keys

I am trying to transfer my gpg secret keyring from gpg1 (1.4.21) to gpg2 (2.1.15) using gpg2 --import ~/.gnupg/secring.gpg gpg2 is asking for the passphrases of all the secret keys in the keyring. ...
0
votes
2answers
274 views

Signing and verifying a file using GnuPG

I created an RSA signing key using GnuPG. I have few files and I want to sign these files and store online. I signed these using GnuPG. If the original file is a.txt, GnuPG created a 1 KB file with ...
0
votes
1answer
334 views

Decrypt file using a different public key

We are using GnuPG to secure our files and didn't encounter any challenges when decrypting or encrypting files. However we have another public key that we imported from another client, let's call them ...
6
votes
2answers
3k views

How to list trust level of OpenPGP public keys in GnuPG?

While I can determine the trust level I have placed on an individual OpenPGP public key by using the --edit-key command, is there a simple way to list all the public keys along with their trust levels ...
0
votes
1answer
127 views

How can I retrieve original data from a signature with GnuPG?

I am currently in a situation where using the --clearsign flag would be impractical. I have established via the size of a signature that it does contain some form of the input data (so when I typed ...
1
vote
1answer
928 views

How to encrypt and sign a file using OpenPGP on Mac

I fear I may have sent a message without encryption when I thought it was being encrypted and signed. I don't use OpenPGP on a Mac too often (I can't remember the last time), so I'm trying to ...
6
votes
2answers
2k views

What is the relationship between an OpenPGP key and its subkey?

I'm coming from using plain old RSA with OpenSSL for all my asymmetric encryption needs, which I learned fairly well, but I'm having a bit of a hard time wrapping my head around the OpenPGP protocol. ...
1
vote
2answers
305 views

How to prevent an OpenPGP private key from being exported?

Is there anyway to prevent exporting of a private OpenPGP key, like asking for the password before each export? I tried export my private key several times and GnuPG didn't ask me for the password ...
-3
votes
1answer
738 views

Remove unnecessary under-the-hood GPG public key cryptography

Background: Some existing programs, such as git-annex (git-annex encryption) and pass, delegate cryptography to GPG, "a complete and free implementation of the OpenPGP standard". More specifically, ...
4
votes
1answer
2k views

Synchronize GnuPG 1.4 and GnuPG 2.1 keychains

While importing my keys to GnuPG on a new system, I considered the following: Question Is it possible to synchronize the gpg and gpg2 (gpg2.1) keychains? Is it wise to do so? Considering I found ...
1
vote
1answer
191 views

Github not verifying with OpenPGP key?

I generated a public/private key pair using GnuPG (following Github's instructions) and am getting the following error when trying to push my commit to a newly created repository: git push origin ...
2
votes
1answer
269 views

Are OpenPGP-encrypted files vulnerable to data corruption?

I have used GnuPG to encrypt some long-term backups, but I am concerned whether over time data corruption might make it impossible to recover the archives. Can you decrypt partially corrupted OpenPGP ...
1
vote
1answer
4k views

GPG2 Encryption - No public key error

When I generate my keys using gpg2 --gen-key and then I try to try to encrypt the file using gpg2 --batch --yes -r myemail@test.com --always-trust --homedir . -e test.text I get an error "...
5
votes
3answers
2k views

How does public/private key cryptography work, who generates the key pair?

I have a requirement to encrypt a file, get it to an external partner who will then decrypt the file using a key. My "basic" understanding is that I can generate the public and private keys, encode ...
3
votes
1answer
151 views

Can uploading an OpenPGP key to a keyserver cause more spam mail?

Public OpenPGP key servers synchronize their public keys with each other and as far as I know anyone could set up their own keyserver and synchronize it with other keyservers. This made me wonder if ...
1
vote
2answers
541 views

Updating OpenPGP keyserver adding and removing identities

When adding new identities to my OpenPGP key, I can upload the public key to a keyserver for others to update their copy. Now, when I remove an identity, will the keyserver update to the new version ...
1
vote
1answer
24 views

Another people's OpenPGP key in my computer?

Today, when I executed gpg --list-keys, I saw another people's key list here. I search in seahorse, but can not find it. Is this key stored in my pubring.gpg file? I only have one OpenPGP key for ...
1
vote
1answer
130 views

Best way to signal no longer used (lost) key

I have an old PGP key for which I don't have the secret anymore, nor the revocation certificate, and when I created the key I did it without expiration date. So I know, I have to move on, and so I ...
1
vote
1answer
921 views

How to query for all recipient OpenPGP keys with GnuPG?

I cannot find a reliable method for asking gpg the list of (public) keys used to encrypt a given file. One plausible solution doesn't work for me -- it never lists my key: gpg --list-only --no-...
1
vote
1answer
684 views

How to set a custom creation date for OpenPGP certificates?

Can I create an OpenPGP Certificate containing a custom creation (start validity) Date? I need to create an OpenPGP certificate today, but made it valid from next week only (for example). Using ...