Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [pgp]

PGP (Pretty Good Privacy) is a computer program for encryption and decryption of data that provides cryptographic privacy and authentication for data communication.

0
votes
0answers
12 views

GnuPG - Share secret key across users on server

We are calling C:\Program Files (x86)\GnuPG\bin\gpg.exe in an execute step from a third-party client-side tool. Currently, as an intitial step, each user logs into the server and loads the key via a ...
0
votes
0answers
32 views

Why is it that pgp keyservers do not respond when I request keys?

I tried the Linux command line (bash 4.4.23 on Arch Linux kernel 4.18.16) with various key servers: $ gpg -v --keyserver subkeys.pgp.net --recv-keys F434104235DA97EB gpg: using character set 'utf-8' ...
0
votes
1answer
39 views

Decrypt PGP message with private keys but forgotten passphrase

I forgot the passphrase of my PGP, but I have the private keys. Is there any "easy" method which doesn't take years to decrypt the PGP message?
0
votes
0answers
44 views

Verify PGP Signature on Fedora

I am attempting to very a PGP Signature using Fedora and have no prior experience using PGP but did manage to get urandom set up correctly. I have the Public Key and a document downloadable from this ...
0
votes
0answers
33 views

Revoke user ID from revoked gpg key?

Being a total gpg noob, I fooled around generating keys on my ubuntu pc and copying those keys to the OpenKeychain phone app. I managed to successfully revoke a key from the app, so now that key sits ...
0
votes
2answers
34 views

Why does Keybase not include my public PGP key fingerprint in my GitHub proof?

I have set up a Keybase identity and added my PGP public key, seen here. When validating my GitHub identity the text Keybase provides me includes the line I have a public key ...
0
votes
0answers
9 views

How does Efail work in PGP/GnuPg mail applications?

I would like to check my understanding of the reported Efail attacks on PGP / GPG mail applications. I have been reading https://efail.de/, as well as this article by Phil Zimmerman: https://www....
0
votes
1answer
61 views

Which of my GPG public keys should I be publishing? Primary, subkeys, all?

Original question I have been learning about GPG and the use of subkeys. I feel I have developed a good understanding of the benefits of using subkeys and keeping your primary key offline, but there ...
0
votes
0answers
16 views

Keyring in mailvelope not able to sign other keys

Maybe I'm not getting the tool - but is it correct that in the keyring of mailvelope you can't sign keys of other users? This makes it impossible using it exclusively to built the famous network of ...
0
votes
0answers
22 views

Is there a maximum number of subkeys in GnuPG?

The GnuPG documentation describes a process to generate subkeys for a gpg-master-key with the option to have different validity settings for subkeys. This works perfectly for a small amount of subkeys,...
0
votes
0answers
17 views

.sig signature file not valid after uploading to web server

I've got a security.txt file for my web app, and to go with that, I've got a security.txt.sig file. When I test the verification process using Kleopatra on my windows 7 PC (incidentally, this is the ...
2
votes
1answer
150 views

Sign only using GpgOL in Outlook

I currently have the Outlook plugging GpgOL which lets me encrypt/sign emails using an OpenPGP encryption key. Is it possible to somehow remove the encryption option or somehow hide the encryption ...
1
vote
1answer
141 views

GnuPG package: Difference between pgp and gpg

I feel there's a not much of general user friendly content on the internet about GnPG and it's utilities. At least I couldn't find any to my satisfaction. It's probably because people (except ...
0
votes
1answer
27 views

shell: pgp: not found

I installed pgp on one of my AIX machines (AIX 7.2). When I try to run pgp from my id I get the below error: $ pgp shell: pgp: not found. But this works as expected using root account. Can ...
1
vote
1answer
202 views

Backing up PGP key pairs

I am new to PGP and have created a keypair using Kleopatra. The public key is now published on certain sites so ppl can message me securely. The private key is held in Kleopatra software and when I ...
2
votes
1answer
213 views

Unable to delete private subkeys in GnuPG if no master key present

I have a GnuPG key pair with a master key (only Certify capability) and 3 subkeys (Sign, Encrypt and Authenticate capabilities respectively). Actually, when I start, I only have the private keys of ...
1
vote
1answer
619 views

Trying to verify a download signature with PGP, but getting “no signed data” when passing in the .asc file?

I tried the following steps from Verifying Signatures on the Tor Project: gpg.exe --keyserver pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290 imported: 1 gpg.exe --fingerprint ...
0
votes
1answer
78 views

Filezilla on Mac: yubikey authentication?

I am trying to connect to a remote server over ssh using a YubiKey smartcard device. The device contains a GPG authentication key to be used. This works flawlessly on commandline, but I cannot get ...
0
votes
3answers
23 views

I forgot what I used to encrypt a file, what can I do?

I have a file I'm needing to decrypt, but my operating system was reinstalled and I don't remember which software I should use to decrypt it. Fortunately, the data is still preserved, including what I ...
0
votes
0answers
593 views

Convert GPG private key to QR code?

How can I generate a QR code from a OpenPGP/GnuPG private key on Windows 7? Context: I created a private key pair on a Windows computer and want to import the key to my phone. The phone app has ...
1
vote
1answer
173 views

How to convert gpg4win's binary to ascii, with Notepad++

I can reliably convert gpg4win's ascii to binary using Notepad++ option "Base64 Decode" (credit: James K Polk). Works every time. But when I attempt the reverse, i.e. convert binary to ascii, it ...
0
votes
1answer
99 views

How to convert gpg4win's ascii to binary?

gpg4win can save and read encrypted files in two forms: Binary with .gpg extension Base64/ascii with .asc extension Is there a way to convert the Base64/ascii output to binary? I tried with Notepad+...
19
votes
3answers
8k views

I got “BEGIN PGP PUBLIC KEY BLOCK” attached to an email and I don't know what it is [duplicate]

Okay, I have no clue what this is, but I just received an email that has this in it. -----BEGIN PGP PUBLIC KEY BLOCK----- [redacted] -----END PGP PUBLIC KEY BLOCK----- If this means something, ...
0
votes
0answers
929 views

gpg decryption failed: no secret key

I have copied my PGP key pairs on a newly installed ubuntu server. But they are not working: I get the error "operation cancelled" when trying to decrypt a file: $ echo TEST | gpg -e -a -r emanuele....
1
vote
1answer
114 views

How to verify sks-keyservers HKPS certificate?

I’m trying to make sense of how PGP is supposed to be used securely, but coherent and helpful information on the subject is surprisingly hard to find. So, SKS keyservers provide their HKPS ...
1
vote
2answers
2k views

gpg remove passphrase

I want to remove the passphrase from gpg key after creating it. Why? . Because the tigase-kontalk documentation says so and I want to compile and setup my own version of this server . But am stuck at ...
1
vote
0answers
102 views

gnome-keyring can't clear passphrase

Under Ubuntu 18.04, gnome-keyring caches PGP passphrases and will retain them, even through logout or reboot. I'm using the program pass to retain my passwords, so I want to be challenged every time I ...
0
votes
1answer
1k views

“gpg: keyserver receive failed: No route to host” error when running 'yay'

I'm fairly new to Arch Linux, and trying to update my packages. I'm running the latest version of Antergos. Using yay with no arguments, it mostly goes well, up until this: ==> PGP keys need ...
3
votes
1answer
298 views

What is the cryptographic purpose of the gpg “--enarmor” command?

The gpg command "--enarmor" or "--enarmour" gpg2 --enarmor /home/none/testing.asc creates a file with a .gpg extension such as: -----BEGIN PGP ARMORED FILE----- Comment: Use "gpg --dearmor" for ...
1
vote
0answers
176 views

Can one get gpg's s2k functions to work fully?

According to RFC 4880, String-to-key (S2K) specifiers are used to convert passphrase strings into symmetric-key encryption/decryption keys. They are used in two places, currently: to ...
0
votes
1answer
295 views

Verifying/decrypt email using PGP signature/public key

UPDATED QUESTION: Using Outlook 2013 64bit on Windows 7 64bit, I have setup GnuPG which allows me to send encrypted emails. To do that, I asked someone for their public key. I sent them an email ...
1
vote
0answers
38 views

GNUPG - Creating a subkey in a single command

With the following commands: gpg --edit-key [KEY] gpg> addkey # Add a new key gpg> 4 # RSA (Sign only) gpg> 4096 # Keysize gpg> 0 # Expiration gpg> y # Correct? gpg> y # Really ...
1
vote
1answer
698 views

Uploading PGP keys to keyserver

I recently got a new ID and decided to activate the eID function. Among other things it allows you to have your public key verified by a trusted source. So, I tried to do that, but it told me that it ...
0
votes
1answer
66 views

Gpg4win download integrity check

I just downloaded gpg4win onto Windows 8. I wanted to check the integrity, and apparently you can do so with certutil. So I navigated to my downloads folder and typed: C:\Users\xxx\Downloads> ...
1
vote
2answers
349 views

GnuPG: Add passphrase to passphrase-less key

I've created my PGP keypair using an online site. The thing is, I didn't provide a passphrase upon creation; The site didn't make supplying a passphrase mandatory. Since this key is passphraseless, ...
1
vote
1answer
91 views

Do I need a PGP key?

I've recently got familiar with the concept of OpenPGP public-private keys, and how to use GnuPG tool to manage PGP keys. I have three questions: 1- Is it necessary for me to have a PGP (or an ...
2
votes
1answer
1k views

PGP - Do I share my Public Key or Fingerprint or KeyID?

I have seen people on Twitter posting a relative short key format. The actual Public Key is very long. What is that they share - Fingerprint or Key ID? How can I identify and Verify that person with ...
0
votes
0answers
39 views

PGP help - primary user IDs not showing up on server

So I have two email addresses, personal and work, and I want both to be user IDs for one PGP public key. I'm not super techy so I am going to try to be overly clear here. I am using Mac OS. In GPG ...
1
vote
0answers
358 views

Minimum length of detached PGP signature

How small can a detached PGP signature be? The only size I get is 287 bytes for a 2048-bit key and 543 bytes for a 4096-bit key, regardless of the size of the data being signed. However, on this post ...
0
votes
1answer
36 views

When should I backup my primary OpenPGP key?

When should I backup my primary OpenPGP key? I recently generated an OpenPGP key using the following setup (output of gpg2 --list-keys): pub rsa4096/KEYIDSC 2017-10-19 [SC] uid [ultimate] ...
0
votes
1answer
3k views

Decrypt with GPG, says I need a passphrase when I am inputting passphrase

I have 2 boxes, box A and B. Box A and B both use the same public/private key pair to encrypt and decrypt data. Everything works fine in box A, but in box B I can't decrypt the files i encrypt with ...
1
vote
3answers
2k views

How to get Id of public key without importing private key?

If I run the following on a private key to install it in my keyserver: gpg --allow-secret-key-import --import my_private.key It will import an associated public key presumably from a keyserver? gpg:...
1
vote
1answer
676 views

Is it possible to find signer's email address(es) from an OpenPGP (GnuPG) signed message?

I have two files bla.txt and bla.txt.sig. The latter is the signature for the first. I do not (yet) know who is the signer. GnuPG just says (correctly): "No public key". With the email address I could ...
1
vote
1answer
4k views

Why am I unable to fetch PGP keys from commandline?

I hit this issue several times with different calls of gpg (recommended in tutorials). This time it is: $ gpg --keyserver pgp.mit.edu --recv-keys 0x4ABA2F66DBD5A95894910E0673D770CDA59047B9 gpg: ...
0
votes
0answers
88 views

How to load data from a old virtual disk generated using PGP 6.0.2?

I have a virtual disk file (.pgd) and I think that I remember the passphrase, is there possible recovery my data? I have try install the PGP Freeware 6.0.2 but it not run in windows 10. I did some ...
0
votes
1answer
163 views

GPG and keyservers: how do I mark a key as unused invalid? [duplicate]

I while ago I uploaded my key to the MIT keyserver. Problem is, I lost my private key, and did not generate a revocation certificate. The key pair was generated with gpg < 2.1, so a revocation ...
0
votes
1answer
186 views

Do I have to decrypt a signed and encypted file twice to get the actual data file?

I have file that had to be decrypted twice to get that actual data file. The command that I used to decrypt file is: gpg -o Tesfile.txt -d Testfile.txt.pgp What I read is, if the decrypted file is ...
6
votes
1answer
624 views

How to use GnuPG to get the smallest possible output (symmetric encryption)?

I'm trying to produce very small OpenPGP-encrypted files that can be embedded into QR codes. However, in comparison to for example OpenSSL, GnuPG seems to produce very large results for a simple ...
1
vote
1answer
619 views

How can I remove “Real name” from my PGP key?

I use GnuPG and, as it was mentioned in this answer, the mail address can be left out of a user ID when edited through the command line interface. Is there any way - even if it means using a manual ...
3
votes
1answer
72 views

When is a PGP private key modified?

I store my PGP private key offline in a few different locations, in case of disk failure. However, in order to sign someone else's key, I must first import my private key back into my keyring. But ...