Questions tagged [openpgp]
The openpgp tag has no usage guidance.
97
questions
0
votes
0
answers
105
views
How to use OpenPGP smartcard with Avtor CR-371M reader?
I have an OpenPGP card that was setup on a different computer with a different cardreader and is known to work fine for signing emails with GnuPG. Now I am trying to use it on a Windows 10 desktop ...
- 588
0
votes
0
answers
199
views
4096 bit key generation on OpenPGP card
What is the corresponding command to create a 4096 bit RSA key on an OpenPGP card via gpg(2) --card-edit? The documentation just indicates --algo=. I tried RSAwith different values like 3072 and 4096 -...
- 63
1
vote
0
answers
136
views
private key on OpenPGP smardcard
I am using OpenPGP card (ISO/IEC 7816-4, -8) and a class 3 smart card reader (Reiner SCT Cyber Jack RFID komfort).
Following several guides by using gpg --card-edit -> admin -> GENERATE --force -...
- 63
0
votes
0
answers
382
views
GPG Decrypt command not returning any output file
I generated gpg public and Private Key using gnupg (2.4.0) on windows cmd(let's call it: Source Machine) and encrypted a .csv file.
Now I am on DataBrick workspace and created cluster with following ...
- 1
1
vote
1
answer
90
views
Will bad thing happed if i remove an uid from my pgp key?
I added an photo uid to my openpgp keyring a few days ago.
If i want to update this image later, do i have to revoke the old one and keep it on the key? I don't want to because it would obviously make ...
- 13
0
votes
0
answers
455
views
Kleopatra won't open
Out of the blue Kleopatha just refuses to open, I have dug through the internet and found nothing that works. I ran it as an admin and for some reason it shows in task manager that its there but ...
f0p
0
votes
1
answer
483
views
What does "Authentication" mean creating key with Kleopatra?
What does "Authentication" mean creating key with Kleopatra ? (see image)
The image is in french sorry, please help me
- 3
0
votes
1
answer
146
views
gpg auto-locate-key selects revoked key
I just configured WKD on my server, and
gpg -v --auto-key-locate clear,wkd,nodefault --locate-key [email protected]
works as expected for most of my uid/key combos, except for one address (olduser@...
- 425
0
votes
2
answers
3k
views
How to use pgp to send email?
So I was reading a post where it seems the author provides its email through a pgp. How am I supposed to use that pgp to send him an email?
https://decovar.dev/about/#contacts
- 584
2
votes
2
answers
494
views
How do i combine both "PGP signature" and "S/MIME signature" in one email?
Two is always better than one! Is that possible?
If yes, any idea what application and configuration should i use?
- 33
0
votes
1
answer
368
views
Can't retrieve gpg public key from Web Key Directory: Certificate expired
I'm trying to set up a Web Key Directory but both, the Direct and Advanced configuration according to https://wiki.gnupg.org/WKDHosting fail.
Testing the setup with gpg -v --auto-key-locate clear,wkd,...
1
vote
0
answers
156
views
Decrypt >4GB files on Windows
I am trying to decrypt a bunch of large encrypted files (some are > 4GB) on Windows 10 (64 bit). I have been given the instructions to double click on each file then a "PGP Self Decrypting ...
- 45
2
votes
1
answer
2k
views
Unable to distribute a GPG public key when never expires, because it has expired
I have previously distributed a public public key successfully ( for signing open source ), but having returned to the open source project after a few months the build has been unable to locate the ...
- 23
0
votes
1
answer
1k
views
Import OpenPGP key (on NixOS)
I am trying to import a PGP key into NixOS (exported from Openkeychain). This key is used to encrypt and decrypt a list of passwords (with pass).
The following are the steps to reproduce the issue (...
- 101
0
votes
2
answers
847
views
Gpg4Win's Kleopatra not uploading to servers due to a "no name" error
The server is visible and functional on my side, I just can't upload anything to any servers due to the same "No Name" error, I've tried different certificates (*.asc files) and nothing ...
1
vote
1
answer
426
views
How to encrypt a mail in Thunderbird?
I have been using PGP for a long time now but recently Thunderbird replaced the Enigmail encryption-plugin with a native PGP solution.
That's maybe good news, however, I cannot figure out how to ...
- 1,152
3
votes
1
answer
442
views
GPG subkey seems to have different password
I have recently created a new OpenGPG key with Thunderbird and exported it to use it with gpg. However, I cannot decrypt anything outside Thunderbird because my subkey - which is used for encryption - ...
- 33
0
votes
0
answers
137
views
What are the use cases for a certification PGP subkey?
What are the use cases for a certification only PGP subkey?
I am not sure if GnuPG supports it but I know Sequoia does.
- 361
1
vote
0
answers
130
views
Ask for key password when OpenPGP signing mail in Thunderbird 78
Thunderbird 78 has native OpenPGP functionality and I have imported my keys (after using Enigmail for many years). Upon doing so, it asked me for the key passwords and I presume it stores these ...
- 523
0
votes
1
answer
1k
views
Cannot upload my GPG keys to any key server - "Server indicated a failure"
I have extended the expiry date of my GPG keys, and now I want the network to synchronise them. So I'm trying
$ gpg --send-keys 0578BBA15F19661D18F7C3457437FCBA03E4CB85
gpg: sending key ...
user281318
0
votes
1
answer
554
views
OpenPGP: smart card / device not found on Windows 10
I'm trying to read my new GnuPG V3.3 smart card with OpenPGP on Windows 10, Lenovo keyboard with smart card reader, latest driver installed. When launching from CMD command gpg.exe --card-status ...
- 217
5
votes
1
answer
2k
views
Is it possible to use macOS 'Keychain' + 'TouchID' for pinentry-program?
Is there some way of configuring pinentry-mac, which I currently use to enter the passphrase for my OpenPGP card (a Yubikey), or a different program that'll store the passphrase in the macOS 'Keychain'...
- 621
2
votes
0
answers
3k
views
Convert GPG private key to QR code?
How can I generate a QR code from a OpenPGP/GnuPG private key on Windows 7?
Context:
I created a private key pair on a Windows computer and want to import the key to my phone. The phone app has ...
- 115
2
votes
1
answer
2k
views
How to convert gpg4win's binary to ascii, with Notepad++
I can reliably convert gpg4win's ascii to binary using Notepad++ option "Base64 Decode" (credit: James K Polk). Works every time.
But when I attempt the reverse, i.e. convert binary to ascii, it ...
- 115
0
votes
1
answer
1k
views
How to convert gpg4win's ascii to binary?
gpg4win can save and read encrypted files in two forms:
Binary with .gpg extension
Base64/ascii with .asc extension
Is there a way to convert the Base64/ascii output to binary?
I tried with Notepad+...
- 115
0
votes
1
answer
1k
views
Verifying/decrypt email using PGP signature/public key
UPDATED QUESTION:
Using Outlook 2013 64bit on Windows 7 64bit, I have setup GnuPG which allows me to send encrypted emails. To do that, I asked someone for their public key. I sent them an email ...
- 1,710
0
votes
1
answer
918
views
Make git ask Kleopatra to unlock GPG key for specific e-mail address
I'm on a Windows 10 machine with Gpg4win and Kleopatra installed, as well as the most recent version of git. In Kleopatra I have two OpenPGP certificates loaded, let's say for these e-mails:
john.doe@...
- 1,813
6
votes
2
answers
18k
views
How to setup SSH/PuTTY to use Yubikey OpenPGP authentication?
I would like to use YubiKey's OpenPGP interface to authenticate myself against my OpenSSH server on Windows 10:
I created the keys according to this:
gpg --card-status
Reader ...........: Yubico ...
- 426
0
votes
1
answer
137
views
Is using OpenPGP for long term encrypted files bad practice?
I've recently been playing around with GnuPG using a yubikey, and its very nice but I have some concerns I like to ask about.
PGP seems geard toward emails and short lived messages. Is the OpenPGP ...
- 125
1
vote
2
answers
745
views
GnuPG: Add passphrase to passphrase-less key
I've created my PGP keypair using an online site.
The thing is, I didn't provide a passphrase upon creation; The site didn't make supplying a passphrase mandatory.
Since this key is passphraseless, ...
1
vote
1
answer
246
views
Do I need a PGP key?
I've recently got familiar with the concept of OpenPGP public-private keys, and how to use GnuPG tool to manage PGP keys. I have three questions:
1- Is it necessary for me to have a PGP (or an ...
1
vote
0
answers
1k
views
Minimum length of detached PGP signature
How small can a detached PGP signature be? The only size I get is 287 bytes for a 2048-bit key and 543 bytes for a 4096-bit key, regardless of the size of the data being signed. However, on this post ...
- 108
0
votes
2
answers
138
views
Unable to descrypt mp3 file via gpg
I'm trying to decrypt a binary/mp3 file of 100Mb of size.
gpg2 --decrypt my_audio.mp3.gpg
And it results into a long binary text in the terminal and it won't create a pure mp3 file:
binary text
...
Koodi
0
votes
1
answer
80
views
When should I backup my primary OpenPGP key?
When should I backup my primary OpenPGP key?
I recently generated an OpenPGP key using the following setup (output of gpg2 --list-keys):
pub rsa4096/KEYIDSC 2017-10-19 [SC]
uid [ultimate] ...
user775750
2
votes
1
answer
4k
views
Is it possible to find signer's email address(es) from an OpenPGP (GnuPG) signed message?
I have two files bla.txt and bla.txt.sig.
The latter is the signature for the first.
I do not (yet) know who is the signer.
GnuPG just says (correctly): "No public key".
With the email address I could ...
user734746
0
votes
0
answers
276
views
How to load data from a old virtual disk generated using PGP 6.0.2?
I have a virtual disk file (.pgd) and I think that I remember the passphrase, is there possible recovery my data? I have try install the PGP Freeware 6.0.2 but it not run in windows 10. I did some ...
8
votes
1
answer
2k
views
How to use GnuPG to get the smallest possible output (symmetric encryption)?
I'm trying to produce very small OpenPGP-encrypted files that can be embedded into QR codes.
However, in comparison to for example OpenSSL, GnuPG seems to produce very large results for a simple ...
- 183
3
votes
1
answer
2k
views
Why does PostgreSQL's pgp_sym_encrypt return different output although invoked for the same input?
I am getting different results while executing PostgreSQL's pgp_sym_encrypt command with same plaintext and passphrase as input. When decrypting those different results with the same passphrase, I get ...
- 151
6
votes
1
answer
4k
views
Retrieve public keys that signed a key I have
I am trying to figure out how to do the following in one command.
I have an ISO image along with its signature file *.sig. I tried to verify it via GnuPG 2 but it reported a missing public key giving ...
- 682
6
votes
3
answers
6k
views
What determines the clearsign hash algorithm used by GnuPG?
When using GnuPG to clear sign a text, there is a hash part in signed message. Take the example:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
abc
-----BEGIN PGP SIGNATURE-----
...
- 85
0
votes
1
answer
226
views
sFTP Encoding in Cleo VLTrader
I want to secure a zip file using Base64 OpenPGP encryption. some application have the option in command line, I wonder if such feature is available in Cleo VLTrader's GUI?
- 91
4
votes
3
answers
1k
views
Handling and security of GnuPG private key
I am new GnuPG, thus, this might be a silly question. Yet:
I want to encrypt my emails, thus using gpg4win. Alongside I use Kleopatra, a tool for creating my own certificates and managing the public ...
- 53
1
vote
2
answers
368
views
GnuPG with CAPI smartcard / NOT an OpenPGP card
I have a RSA SecurId loaded with two keys and their corresponding certificate (signature and authentication).
I'm already using the authentication key pair for SSH login (from my Windows desktop) ...
- 257
1
vote
1
answer
443
views
gpg2 --edit-key addphoto / keytocard without password prompt
I am trying export subkeys to card for a keyring without any keyboard interaction using the command keytocard. This type of command is the same as addphoto as it requires to edit the keyring with --...
- 41
1
vote
2
answers
1k
views
Thunderbird Enigmail does not recognize key - "error - no matching/private key found"
A few month ago I set up enigmail for one of my computers. I imported a fried's key and was successful in decrypting his messages.
I switched computers now and tried to replicate all the steps I did ...
- 111
1
vote
1
answer
70
views
What makes OpenPGP keyrings trustworthy?
I've started reading the Linux From Scratch book and in the first few chapters, you are required to download the sources of all software packages you will need during the installation.
The book ...
- 343
2
votes
1
answer
971
views
Paperkey output file significantly larger than original secret key
Ok ok, so I'm probably missing something super obvious, but here is my scenario.
Few months back, I decided "Hey, I should probably start keeping paper copies of sensitive data in case all my hard ...
- 111
18
votes
1
answer
11k
views
gpg2 asking for passphrase when importing secret keys
I am trying to transfer my gpg secret keyring from gpg1 (1.4.21) to gpg2 (2.1.15) using
gpg2 --import ~/.gnupg/secring.gpg
gpg2 is asking for the passphrases of all the secret keys in the keyring.
...
- 800
0
votes
2
answers
783
views
Signing and verifying a file using GnuPG
I created an RSA signing key using GnuPG.
I have few files and I want to sign these files and store online.
I signed these using GnuPG. If the original file is a.txt, GnuPG created a 1 KB file with ...
- 2,733
0
votes
1
answer
2k
views
Decrypt file using a different public key
We are using GnuPG to secure our files and didn't encounter any challenges when decrypting or encrypting files. However we have another public key that we imported from another client, let's call them ...
- 123