Questions tagged [openpgp]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
3 votes
2 answers
647 views

How do i combine both "PGP signature" and "S/MIME signature" in one email?

Two is always better than one! Is that possible? If yes, any idea what application and configuration should i use?
0 votes
0 answers
154 views

How to use OpenPGP smartcard with Avtor CR-371M reader?

I have an OpenPGP card that was setup on a different computer with a different cardreader and is known to work fine for signing emails with GnuPG. Now I am trying to use it on a Windows 10 desktop ...
0 votes
0 answers
351 views

4096 bit key generation on OpenPGP card

What is the corresponding command to create a 4096 bit RSA key on an OpenPGP card via gpg(2) --card-edit? The documentation just indicates --algo=. I tried RSAwith different values like 3072 and 4096 -...
1 vote
0 answers
198 views

private key on OpenPGP smardcard

I am using OpenPGP card (ISO/IEC 7816-4, -8) and a class 3 smart card reader (Reiner SCT Cyber Jack RFID komfort). Following several guides by using gpg --card-edit -> admin -> GENERATE --force -...
0 votes
0 answers
669 views

GPG Decrypt command not returning any output file

I generated gpg public and Private Key using gnupg (2.4.0) on windows cmd(let's call it: Source Machine) and encrypted a .csv file. Now I am on DataBrick workspace and created cluster with following ...
10 votes
2 answers
25k views

How long would it take to break a 1024 bit OpenPGP encrypted email?

For WPA, there are calculators to determine the time needed to crack a passphrase, but I have found nothing for OpenPGP. How long would it take to break a 1024 bit OpenPGP encrypted email (depending ...
1 vote
1 answer
137 views

Will bad thing happed if i remove an uid from my pgp key?

I added an photo uid to my openpgp keyring a few days ago. If i want to update this image later, do i have to revoke the old one and keep it on the key? I don't want to because it would obviously make ...
0 votes
0 answers
640 views

Kleopatra won't open

Out of the blue Kleopatha just refuses to open, I have dug through the internet and found nothing that works. I ran it as an admin and for some reason it shows in task manager that its there but ...
6 votes
2 answers
19k views

How to setup SSH/PuTTY to use Yubikey OpenPGP authentication?

I would like to use YubiKey's OpenPGP interface to authenticate myself against my OpenSSH server on Windows 10: I created the keys according to this: gpg --card-status Reader ...........: Yubico ...
2 votes
1 answer
679 views

What does "Authentication" mean creating key with Kleopatra?

What does "Authentication" mean creating key with Kleopatra ? (see image) The image is in french sorry, please help me
0 votes
1 answer
214 views

gpg auto-locate-key selects revoked key

I just configured WKD on my server, and gpg -v --auto-key-locate clear,wkd,nodefault --locate-key [email protected] works as expected for most of my uid/key combos, except for one address (olduser@...
17 votes
2 answers
16k views

How to use gpg --gen-key in a script?

GnuPG is one of these annoying tools that has a non-scriptable command line. I want to run gpg --gen-key in a script, the rest of the process is simple commands. Any one had any luck with this? ...
0 votes
2 answers
4k views

How to use pgp to send email?

So I was reading a post where it seems the author provides its email through a pgp. How am I supposed to use that pgp to send him an email? https://decovar.dev/about/#contacts
0 votes
1 answer
424 views

Can't retrieve gpg public key from Web Key Directory: Certificate expired

I'm trying to set up a Web Key Directory but both, the Direct and Advanced configuration according to https://wiki.gnupg.org/WKDHosting fail. Testing the setup with gpg -v --auto-key-locate clear,wkd,...
3 votes
1 answer
504 views

GPG subkey seems to have different password

I have recently created a new OpenGPG key with Thunderbird and exported it to use it with gpg. However, I cannot decrypt anything outside Thunderbird because my subkey - which is used for encryption - ...
2 votes
1 answer
2k views

Unable to distribute a GPG public key when never expires, because it has expired

I have previously distributed a public public key successfully ( for signing open source ), but having returned to the open source project after a few months the build has been unable to locate the ...
1 vote
0 answers
216 views

Decrypt >4GB files on Windows

I am trying to decrypt a bunch of large encrypted files (some are > 4GB) on Windows 10 (64 bit). I have been given the instructions to double click on each file then a "PGP Self Decrypting ...
1 vote
1 answer
2k views

How to set a custom creation date for OpenPGP certificates?

Can I create an OpenPGP Certificate containing a custom creation (start validity) Date? I need to create an OpenPGP certificate today, but made it valid from next week only (for example). Using ...
0 votes
1 answer
2k views

Import OpenPGP key (on NixOS)

I am trying to import a PGP key into NixOS (exported from Openkeychain). This key is used to encrypt and decrypt a list of passwords (with pass). The following are the steps to reproduce the issue (...
6 votes
1 answer
2k views

Is it possible to use macOS 'Keychain' + 'TouchID' for pinentry-program?

Is there some way of configuring pinentry-mac, which I currently use to enter the passphrase for my OpenPGP card (a Yubikey), or a different program that'll store the passphrase in the macOS 'Keychain'...
0 votes
2 answers
905 views

Gpg4Win's Kleopatra not uploading to servers due to a "no name" error

The server is visible and functional on my side, I just can't upload anything to any servers due to the same "No Name" error, I've tried different certificates (*.asc files) and nothing ...
4 votes
3 answers
1k views

Handling and security of GnuPG private key

I am new GnuPG, thus, this might be a silly question. Yet: I want to encrypt my emails, thus using gpg4win. Alongside I use Kleopatra, a tool for creating my own certificates and managing the public ...
1 vote
1 answer
468 views

How to encrypt a mail in Thunderbird?

I have been using PGP for a long time now but recently Thunderbird replaced the Enigmail encryption-plugin with a native PGP solution. That's maybe good news, however, I cannot figure out how to ...
1 vote
0 answers
165 views

What are the use cases for a certification PGP subkey?

What are the use cases for a certification only PGP subkey? I am not sure if GnuPG supports it but I know Sequoia does.
1 vote
0 answers
136 views

Ask for key password when OpenPGP signing mail in Thunderbird 78

Thunderbird 78 has native OpenPGP functionality and I have imported my keys (after using Enigmail for many years). Upon doing so, it asked me for the key passwords and I presume it stores these ...
2 votes
1 answer
479 views

gpg2 --edit-key addphoto / keytocard without password prompt

I am trying export subkeys to card for a keyring without any keyboard interaction using the command keytocard. This type of command is the same as addphoto as it requires to edit the keyring with --...
0 votes
1 answer
1k views

Cannot upload my GPG keys to any key server - "Server indicated a failure"

I have extended the expiry date of my GPG keys, and now I want the network to synchronise them. So I'm trying $ gpg --send-keys 0578BBA15F19661D18F7C3457437FCBA03E4CB85 gpg: sending key ...
0 votes
1 answer
597 views

OpenPGP: smart card / device not found on Windows 10

I'm trying to read my new GnuPG V3.3 smart card with OpenPGP on Windows 10, Lenovo keyboard with smart card reader, latest driver installed. When launching from CMD command gpg.exe --card-status ...
1 vote
1 answer
3k views

Trying to verify file signature in GPG4win: Not enough information to check signature validity

I've downloaded enigmail for Thunderbird and I'm trying to verify the PGP signature with GPG4win. I imported the public certificate, certified it with my own, downloaded the Open PGP signature, and ...
6 votes
3 answers
7k views

What determines the clearsign hash algorithm used by GnuPG?

When using GnuPG to clear sign a text, there is a hash part in signed message. Take the example: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 abc -----BEGIN PGP SIGNATURE----- ...
2 votes
0 answers
3k views

Convert GPG private key to QR code?

How can I generate a QR code from a OpenPGP/GnuPG private key on Windows 7? Context: I created a private key pair on a Windows computer and want to import the key to my phone. The phone app has ...
2 votes
1 answer
3k views

How to convert gpg4win's binary to ascii, with Notepad++

I can reliably convert gpg4win's ascii to binary using Notepad++ option "Base64 Decode" (credit: James K Polk). Works every time. But when I attempt the reverse, i.e. convert binary to ascii, it ...
0 votes
1 answer
2k views

How to convert gpg4win's ascii to binary?

gpg4win can save and read encrypted files in two forms: Binary with .gpg extension Base64/ascii with .asc extension Is there a way to convert the Base64/ascii output to binary? I tried with Notepad+...
7 votes
4 answers
8k views

gpg2 on Mac: How to enter passphrase on terminal instead of getting a GUI prompt?

I am using Mountain Lion and when I encrypt a file using gpg an annoying GUI prompts for me to enter the passphrase. I would like to be prompted for the passphrase in the terminal, not in an external ...
1 vote
2 answers
374 views

GnuPG with CAPI smartcard / NOT an OpenPGP card

I have a RSA SecurId loaded with two keys and their corresponding certificate (signature and authentication). I'm already using the authentication key pair for SSH login (from my Windows desktop) ...
23 votes
1 answer
17k views

Why is gpg --list-keys sometimes printing subkeys, sometimes not?

This question occured in the comments of "How do I display the usage flags for my encryption keys in a less hackish way?", and seems worth being answered in a Q&A form as the answer is not ...
0 votes
1 answer
1k views

Verifying/decrypt email using PGP signature/public key

UPDATED QUESTION: Using Outlook 2013 64bit on Windows 7 64bit, I have setup GnuPG which allows me to send encrypted emails. To do that, I asked someone for their public key. I sent them an email ...
0 votes
1 answer
994 views

Make git ask Kleopatra to unlock GPG key for specific e-mail address

I'm on a Windows 10 machine with Gpg4win and Kleopatra installed, as well as the most recent version of git. In Kleopatra I have two OpenPGP certificates loaded, let's say for these e-mails: john.doe@...
0 votes
1 answer
155 views

Is using OpenPGP for long term encrypted files bad practice?

I've recently been playing around with GnuPG using a yubikey, and its very nice but I have some concerns I like to ask about. PGP seems geard toward emails and short lived messages. Is the OpenPGP ...
1 vote
2 answers
771 views

GnuPG: Add passphrase to passphrase-less key

I've created my PGP keypair using an online site. The thing is, I didn't provide a passphrase upon creation; The site didn't make supplying a passphrase mandatory. Since this key is passphraseless, ...
1 vote
1 answer
276 views

Do I need a PGP key?

I've recently got familiar with the concept of OpenPGP public-private keys, and how to use GnuPG tool to manage PGP keys. I have three questions: 1- Is it necessary for me to have a PGP (or an ...
5 votes
1 answer
3k views

Synchronize GnuPG 1.4 and GnuPG 2.1 keychains

While importing my keys to GnuPG on a new system, I considered the following: Question Is it possible to synchronize the gpg and gpg2 (gpg2.1) keychains? Is it wise to do so? Considering I found ...
1 vote
0 answers
1k views

Minimum length of detached PGP signature

How small can a detached PGP signature be? The only size I get is 287 bytes for a 2048-bit key and 543 bytes for a 4096-bit key, regardless of the size of the data being signed. However, on this post ...
0 votes
2 answers
149 views

Unable to descrypt mp3 file via gpg

I'm trying to decrypt a binary/mp3 file of 100Mb of size. gpg2 --decrypt my_audio.mp3.gpg And it results into a long binary text in the terminal and it won't create a pure mp3 file: binary text ...
0 votes
1 answer
89 views

When should I backup my primary OpenPGP key?

When should I backup my primary OpenPGP key? I recently generated an OpenPGP key using the following setup (output of gpg2 --list-keys): pub rsa4096/KEYIDSC 2017-10-19 [SC] uid [ultimate] ...
12 votes
2 answers
9k views

How to list trust level of OpenPGP public keys in GnuPG?

While I can determine the trust level I have placed on an individual OpenPGP public key by using the --edit-key command, is there a simple way to list all the public keys along with their trust levels ...
2 votes
1 answer
4k views

Is it possible to find signer's email address(es) from an OpenPGP (GnuPG) signed message?

I have two files bla.txt and bla.txt.sig. The latter is the signature for the first. I do not (yet) know who is the signer. GnuPG just says (correctly): "No public key". With the email address I could ...
0 votes
0 answers
291 views

How to load data from a old virtual disk generated using PGP 6.0.2?

I have a virtual disk file (.pgd) and I think that I remember the passphrase, is there possible recovery my data? I have try install the PGP Freeware 6.0.2 but it not run in windows 10. I did some ...
0 votes
3 answers
4k views

How to remove OpenPGP private keys from computer?

As the title reads, I wonder how I could securely, physically remove my private keys from my computer. I can't seem to find a way to do that on Kleopatra. These keys I'm talking about are used for ...
8 votes
1 answer
3k views

How to use GnuPG to get the smallest possible output (symmetric encryption)?

I'm trying to produce very small OpenPGP-encrypted files that can be embedded into QR codes. However, in comparison to for example OpenSSL, GnuPG seems to produce very large results for a simple ...