Questions tagged [openpgp]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
25 views

gpg auto-locate-key selects revoked key

I just configured WKD on my server, and gpg -v --auto-key-locate clear,wkd,nodefault --locate-key user@domain.com works as expected for most of my uid/key combos, except for one address (olduser@...
user avatar
  • 415
0 votes
2 answers
93 views

How to use pgp to send email?

So I was reading a post where it seems the author provides its email through a pgp. How am I supposed to use that pgp to send him an email? https://decovar.dev/about/#contacts
user avatar
  • 524
1 vote
2 answers
78 views

How do i combine both "PGP signature" and "S/MIME signature" in one email?

Two is always better than one! Is that possible? If yes, any idea what application and configuration should i use?
user avatar
0 votes
1 answer
87 views

Can't retrieve gpg public key from Web Key Directory: Certificate expired

I'm trying to set up a Web Key Directory but both, the Direct and Advanced configuration according to https://wiki.gnupg.org/WKDHosting fail. Testing the setup with gpg -v --auto-key-locate clear,wkd,...
user avatar
1 vote
0 answers
55 views

Decrypt >4GB files on Windows

I am trying to decrypt a bunch of large encrypted files (some are > 4GB) on Windows 10 (64 bit). I have been given the instructions to double click on each file then a "PGP Self Decrypting ...
user avatar
  • 123
2 votes
1 answer
1k views

Unable to distribute a GPG public key when never expires, because it has expired

I have previously distributed a public public key successfully ( for signing open source ), but having returned to the open source project after a few months the build has been unable to locate the ...
user avatar
  • 23
0 votes
1 answer
259 views

Import OpenPGP key (on NixOS)

I am trying to import a PGP key into NixOS (exported from Openkeychain). This key is used to encrypt and decrypt a list of passwords (with pass). The following are the steps to reproduce the issue (...
user avatar
  • 101
0 votes
2 answers
469 views

Gpg4Win's Kleopatra not uploading to servers due to a "no name" error

The server is visible and functional on my side, I just can't upload anything to any servers due to the same "No Name" error, I've tried different certificates (*.asc files) and nothing ...
user avatar
1 vote
1 answer
309 views

How to encrypt a mail in Thunderbird?

I have been using PGP for a long time now but recently Thunderbird replaced the Enigmail encryption-plugin with a native PGP solution. That's maybe good news, however, I cannot figure out how to ...
user avatar
  • 1,132
2 votes
1 answer
214 views

GPG subkey seems to have different password

I have recently created a new OpenGPG key with Thunderbird and exported it to use it with gpg. However, I cannot decrypt anything outside Thunderbird because my subkey - which is used for encryption - ...
user avatar
  • 23
0 votes
0 answers
80 views

What are the use cases for a certification PGP subkey?

What are the use cases for a certification only PGP subkey? I am not sure if GnuPG supports it but I know Sequoia does.
user avatar
  • 301
1 vote
0 answers
100 views

Ask for key password when OpenPGP signing mail in Thunderbird 78

Thunderbird 78 has native OpenPGP functionality and I have imported my keys (after using Enigmail for many years). Upon doing so, it asked me for the key passwords and I presume it stores these ...
user avatar
0 votes
1 answer
923 views

Cannot upload my GPG keys to any key server - "Server indicated a failure"

I have extended the expiry date of my GPG keys, and now I want the network to synchronise them. So I'm trying $ gpg --send-keys 0578BBA15F19661D18F7C3457437FCBA03E4CB85 gpg: sending key ...
user avatar
0 votes
1 answer
370 views

OpenPGP: smart card / device not found on Windows 10

I'm trying to read my new GnuPG V3.3 smart card with OpenPGP on Windows 10, Lenovo keyboard with smart card reader, latest driver installed. When launching from CMD command gpg.exe --card-status ...
user avatar
3 votes
1 answer
962 views

Is it possible to use macOS 'Keychain' + 'TouchID' for pinentry-program?

Is there some way of configuring pinentry-mac, which I currently use to enter the passphrase for my OpenPGP card (a Yubikey), or a different program that'll store the passphrase in the macOS 'Keychain'...
user avatar
  • 561
2 votes
0 answers
2k views

Convert GPG private key to QR code?

How can I generate a QR code from a OpenPGP/GnuPG private key on Windows 7? Context: I created a private key pair on a Windows computer and want to import the key to my phone. The phone app has ...
user avatar
  • 115
2 votes
1 answer
2k views

How to convert gpg4win's binary to ascii, with Notepad++

I can reliably convert gpg4win's ascii to binary using Notepad++ option "Base64 Decode" (credit: James K Polk). Works every time. But when I attempt the reverse, i.e. convert binary to ascii, it ...
user avatar
  • 115
0 votes
1 answer
967 views

How to convert gpg4win's ascii to binary?

gpg4win can save and read encrypted files in two forms: Binary with .gpg extension Base64/ascii with .asc extension Is there a way to convert the Base64/ascii output to binary? I tried with Notepad+...
user avatar
  • 115
0 votes
1 answer
1k views

Verifying/decrypt email using PGP signature/public key

UPDATED QUESTION: Using Outlook 2013 64bit on Windows 7 64bit, I have setup GnuPG which allows me to send encrypted emails. To do that, I asked someone for their public key. I sent them an email ...
user avatar
  • 2,130
0 votes
1 answer
696 views

Make git ask Kleopatra to unlock GPG key for specific e-mail address

I'm on a Windows 10 machine with Gpg4win and Kleopatra installed, as well as the most recent version of git. In Kleopatra I have two OpenPGP certificates loaded, let's say for these e-mails: john.doe@...
user avatar
  • 1,733
6 votes
2 answers
13k views

How to setup SSH/PuTTY to use Yubikey OpenPGP authentication?

I would like to use YubiKey's OpenPGP interface to authenticate myself against my OpenSSH server on Windows 10: I created the keys according to this: gpg --card-status Reader ...........: Yubico ...
user avatar
  • 416
0 votes
1 answer
109 views

Is using OpenPGP for long term encrypted files bad practice?

I've recently been playing around with GnuPG using a yubikey, and its very nice but I have some concerns I like to ask about. PGP seems geard toward emails and short lived messages. Is the OpenPGP ...
user avatar
1 vote
2 answers
690 views

GnuPG: Add passphrase to passphrase-less key

I've created my PGP keypair using an online site. The thing is, I didn't provide a passphrase upon creation; The site didn't make supplying a passphrase mandatory. Since this key is passphraseless, ...
user avatar
1 vote
1 answer
174 views

Do I need a PGP key?

I've recently got familiar with the concept of OpenPGP public-private keys, and how to use GnuPG tool to manage PGP keys. I have three questions: 1- Is it necessary for me to have a PGP (or an ...
user avatar
1 vote
0 answers
894 views

Minimum length of detached PGP signature

How small can a detached PGP signature be? The only size I get is 287 bytes for a 2048-bit key and 543 bytes for a 4096-bit key, regardless of the size of the data being signed. However, on this post ...
user avatar
0 votes
2 answers
101 views

Unable to descrypt mp3 file via gpg

I'm trying to decrypt a binary/mp3 file of 100Mb of size. gpg2 --decrypt my_audio.mp3.gpg And it results into a long binary text in the terminal and it won't create a pure mp3 file: binary text ...
user avatar
0 votes
1 answer
63 views

When should I backup my primary OpenPGP key?

When should I backup my primary OpenPGP key? I recently generated an OpenPGP key using the following setup (output of gpg2 --list-keys): pub rsa4096/KEYIDSC 2017-10-19 [SC] uid [ultimate] ...
user avatar
2 votes
1 answer
3k views

Is it possible to find signer's email address(es) from an OpenPGP (GnuPG) signed message?

I have two files bla.txt and bla.txt.sig. The latter is the signature for the first. I do not (yet) know who is the signer. GnuPG just says (correctly): "No public key". With the email address I could ...
user avatar
0 votes
0 answers
228 views

How to load data from a old virtual disk generated using PGP 6.0.2?

I have a virtual disk file (.pgd) and I think that I remember the passphrase, is there possible recovery my data? I have try install the PGP Freeware 6.0.2 but it not run in windows 10. I did some ...
user avatar
8 votes
1 answer
2k views

How to use GnuPG to get the smallest possible output (symmetric encryption)?

I'm trying to produce very small OpenPGP-encrypted files that can be embedded into QR codes. However, in comparison to for example OpenSSL, GnuPG seems to produce very large results for a simple ...
user avatar
3 votes
1 answer
2k views

Why does PostgreSQL's pgp_sym_encrypt return different output although invoked for the same input?

I am getting different results while executing PostgreSQL's pgp_sym_encrypt command with same plaintext and passphrase as input. When decrypting those different results with the same passphrase, I get ...
user avatar
6 votes
1 answer
4k views

Retrieve public keys that signed a key I have

I am trying to figure out how to do the following in one command. I have an ISO image along with its signature file *.sig. I tried to verify it via GnuPG 2 but it reported a missing public key giving ...
user avatar
  • 572
6 votes
3 answers
5k views

What determines the clearsign hash algorithm used by GnuPG?

When using GnuPG to clear sign a text, there is a hash part in signed message. Take the example: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 abc -----BEGIN PGP SIGNATURE----- ...
user avatar
0 votes
1 answer
176 views

sFTP Encoding in Cleo VLTrader

I want to secure a zip file using Base64 OpenPGP encryption. some application have the option in command line, I wonder if such feature is available in Cleo VLTrader's GUI?
user avatar
  • 81
4 votes
3 answers
699 views

Handling and security of GnuPG private key

I am new GnuPG, thus, this might be a silly question. Yet: I want to encrypt my emails, thus using gpg4win. Alongside I use Kleopatra, a tool for creating my own certificates and managing the public ...
user avatar
1 vote
2 answers
318 views

GnuPG with CAPI smartcard / NOT an OpenPGP card

I have a RSA SecurId loaded with two keys and their corresponding certificate (signature and authentication). I'm already using the authentication key pair for SSH login (from my Windows desktop) ...
user avatar
  • 247
1 vote
1 answer
319 views

gpg2 --edit-key addphoto / keytocard without password prompt

I am trying export subkeys to card for a keyring without any keyboard interaction using the command keytocard. This type of command is the same as addphoto as it requires to edit the keyring with --...
user avatar
1 vote
2 answers
1k views

Thunderbird Enigmail does not recognize key - "error - no matching/private key found"

A few month ago I set up enigmail for one of my computers. I imported a fried's key and was successful in decrypting his messages. I switched computers now and tried to replicate all the steps I did ...
user avatar
1 vote
1 answer
64 views

What makes OpenPGP keyrings trustworthy?

I've started reading the Linux From Scratch book and in the first few chapters, you are required to download the sources of all software packages you will need during the installation. The book ...
user avatar
2 votes
1 answer
839 views

Paperkey output file significantly larger than original secret key

Ok ok, so I'm probably missing something super obvious, but here is my scenario. Few months back, I decided "Hey, I should probably start keeping paper copies of sensitive data in case all my hard ...
user avatar
18 votes
1 answer
9k views

gpg2 asking for passphrase when importing secret keys

I am trying to transfer my gpg secret keyring from gpg1 (1.4.21) to gpg2 (2.1.15) using gpg2 --import ~/.gnupg/secring.gpg gpg2 is asking for the passphrases of all the secret keys in the keyring. ...
user avatar
  • 770
0 votes
2 answers
486 views

Signing and verifying a file using GnuPG

I created an RSA signing key using GnuPG. I have few files and I want to sign these files and store online. I signed these using GnuPG. If the original file is a.txt, GnuPG created a 1 KB file with ...
user avatar
  • 2,623
0 votes
1 answer
1k views

Decrypt file using a different public key

We are using GnuPG to secure our files and didn't encounter any challenges when decrypting or encrypting files. However we have another public key that we imported from another client, let's call them ...
user avatar
  • 123
9 votes
2 answers
7k views

How to list trust level of OpenPGP public keys in GnuPG?

While I can determine the trust level I have placed on an individual OpenPGP public key by using the --edit-key command, is there a simple way to list all the public keys along with their trust levels ...
user avatar
  • 1,212
0 votes
1 answer
612 views

How can I retrieve original data from a signature with GnuPG?

I am currently in a situation where using the --clearsign flag would be impractical. I have established via the size of a signature that it does contain some form of the input data (so when I typed ...
user avatar
1 vote
1 answer
2k views

How to encrypt and sign a file using OpenPGP on Mac

I fear I may have sent a message without encryption when I thought it was being encrypted and signed. I don't use OpenPGP on a Mac too often (I can't remember the last time), so I'm trying to ...
user avatar
  • 11.2k
6 votes
2 answers
3k views

What is the relationship between an OpenPGP key and its subkey?

I'm coming from using plain old RSA with OpenSSL for all my asymmetric encryption needs, which I learned fairly well, but I'm having a bit of a hard time wrapping my head around the OpenPGP protocol. ...
user avatar
1 vote
2 answers
487 views

How to prevent an OpenPGP private key from being exported?

Is there anyway to prevent exporting of a private OpenPGP key, like asking for the password before each export? I tried export my private key several times and GnuPG didn't ask me for the password ...
user avatar
  • 21
-3 votes
1 answer
1k views

Remove unnecessary under-the-hood GPG public key cryptography

Background: Some existing programs, such as git-annex (git-annex encryption) and pass, delegate cryptography to GPG, "a complete and free implementation of the OpenPGP standard". More ...
user avatar
5 votes
1 answer
3k views

Synchronize GnuPG 1.4 and GnuPG 2.1 keychains

While importing my keys to GnuPG on a new system, I considered the following: Question Is it possible to synchronize the gpg and gpg2 (gpg2.1) keychains? Is it wise to do so? Considering I found ...
user avatar
  • 471