gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications ...

learn more… | top users | synonyms

1
vote
2answers
24 views

GPG keys copied, not working

I have copied my GPG keys from 1 server to another, on the first server everything is working correctly, on the new I get the following: (I have included the output of list-keys and list-secret-keys ...
5
votes
2answers
100 views

Silent GnuPG password request with bash commands

I'm trying to hide the "output" of a gnupg command, but it seems that it is always printed. the command is: echo "thisprogramwørks" | gpg -q --status-fd 1 --no-use-agent --sign --local-user D30BDF86 ...
2
votes
1answer
10 views

How to migrate GPG trust database from one machine to another?

I'm trying to copy my gpg related files over from an old machine to a new one. I've worked out how to copy the keys over: How to import secret gpg key (copied from one machine to another)? but this ...
1
vote
2answers
58 views

Encrypting directories with gpg

I want to use GPG for local encryption only, and after reading the man file, I'm doing the following in order to encrypt a whole directory: I zip the directory with a password "zip -r -e foo foo", ...
1
vote
0answers
8 views

Use GnuPG by default in Evolution

Is there a way to make Evolution default to encrypting messages with GnuPG? It'd be acceptable if Evolution complains and refuses to send unencrypted emails to addresses for which it lacks a gpg ...
2
votes
1answer
18 views

Which keys gpg exports and what is in the keyrings?

I've been making my way through what's on the internet concerning gpg lately. And I must say it's pretty confusing. Particularly, the importing/exporting part. When you generate a key, you basically ...
2
votes
1answer
40 views

Installation of GPG alongside a running one: configure problem?

I already have a production version of GPG from a previous installation. I would like to build and test the last version of GPG without interfering with the production one. I am performing this test ...
2
votes
2answers
42 views

GPG decrypt returns empty file

Im decrypting a file sent by a client using gpg. The file is Obviusly encrypted, and theoretically, using my public key. I have installed both his public key and my private key. So, im running: ...
0
votes
1answer
100 views

GPG error with http://volatile.debian.org : 'The following signatures were invalid: NODATA 1 NODATA 2'

I am currently trying to add a new repository to apt-get but it is not working. I'm adding it like this: deb http://volatile.debian.org/debian-volatile wheezy/volatile non-free Then I get this ...
1
vote
0answers
62 views

Decrypting with GPG after a “su - different user”

I have cron job running a script in the cron of "USER A" that encrypts many files in a loop using the gpg command below: gpg --batch --cipher-algo AES256 --passphrase "PASSWORDISHERE" -c FILENAME ...
1
vote
0answers
35 views

How can I have pinentry ask if a password should be remembered?

In this answer, the password prompt for gpg-agent includes options for how long the password should be remembered. However, in my system I get a much simpler prompt, without that option How can ...
1
vote
2answers
56 views

Is there a way to edit a password-protected file without having to retype the password all the time?

I want to encrypt a text file using a password and a way to safely edit that file. The problem I am having is that I haven't managed to find a simple way to do that while only requiring the password ...
1
vote
1answer
23 views

How do I get the Truecrypt CLI installed?

I have a unix machine with truecrypt 7.1a installed. I'm trying to mount a volume to test with the command line but I don't have the truecrypt command installed evidently. Did the command line ...
3
votes
1answer
42 views

Not possible to use batch mode?! FreeBSD gpg 1.4.19

I use a script to decrypt my password for offlineimap, but somehow it's not working anymore ... The file was encrypted with gpg --symmetric password For offlineimap I use this combination. gpg ...
1
vote
1answer
52 views

How can I tell gpg that I do not want password caching for a specific program?

I'm using gnupg 2.1.2. Usually it is quite handy when gnupg caches my passwords. But for some sensitive programs I would prefer that gnupg does not cache them with gpg-agent. I searched a good while ...
2
votes
3answers
88 views

gpg key generation on Tails live cd - why so quick?

I just used gpg2 --gen-key to generate a 2048 bit RSA key pair on an OS running on a live cd (Tails). This happened much faster than I expected. When I have done this before on a regular machine it ...
2
votes
1answer
135 views

What are gpg-pubkey* packages?

I compared the packages list reported by RPM and YUM on a CentOS 6 and 7. I noticed the lists were slightly different (same issue with RHEL). See Listing installed packages with yum and rpm mismatch ...
3
votes
1answer
61 views

Zsh gpg2 autocompletion

I am using zsh with oh-my-zsh on OSX. I installed gnupg2 from homebrew giving me the executable gpg2. Unfortunately zsh auto completion appears to only support gpg (even though that executable is not ...
1
vote
1answer
116 views

How does GPG agent work?

I have a line in my gpg.conf file which says use-agent I understand this refers to gpg-agent which is a daemon. The man page states "gpg-agent is a daemon to manage secret (private) keys independently ...
0
votes
0answers
65 views

'Pass' password manager - does it require public key?

The 'pass' password manager uses gpg keys. http://www.passwordstore.org/ However, gpg itself can be used for symmetric encryption of files. Does pass only work using public/private keys, or is it ...
1
vote
1answer
44 views

Simple-cdd keyring addition

I'm looking to add a personal key for an apt repo to a netinstall disc which would require end users to not have to install it. I'm using simple-cdd to generate the build, so wrapping it into a .deb ...
2
votes
0answers
178 views

How do I combine SSH agent forwarding and gpg-agent?

I have an ssh-agent running on my local machine. I connect to a remote machine via SSH, with agent forwarding enabled. On that remote there is an instance of gpg-agent running. I know that recent ...
3
votes
2answers
83 views

How to quickly generate (insecure) GPG keys?

I'd like to automate generating at least two GPG keys for testing and demonstration purposes in a virtual machine. Because of this context I want to make sure the key generation is fast, ideally not ...
2
votes
4answers
176 views

File encryption utility without key integrity check (symmetric key)

When encrypting a file with symmetric key, most common utilities (such as gpg, mcrypt, etc) store information in the encrypted message which can be used to verify integrity of the key during ...
7
votes
1answer
1k views

How to import secret gpg key (copied from one machine to another)?

I'm trying to copy my gpg key from one machine to another. I do: gpg --export ${ID} > public.key gpg --export-secret-key ${ID} > private.key Move files to new machine, and then: gpg ...
0
votes
3answers
132 views

creating and sending a self-signed public key using GnuPG in CentOS 7

I know that I can create a GPG keypair from the CentOS 7 terminal by typing gpg --gen-key and following the resulting steps, but how can I make sure that the resulting public key is self-signed? And ...
-2
votes
2answers
96 views

installing GnuGPG with Thunderbird on CentOS 7

How can I install GnuPG on my CentOS 7 system? I want to use GnuPG alongside Thunderbird and Enigmail to manage pgp keys, as per the instructions in this link. The problem is that the download ...
0
votes
1answer
21 views

gnupg broken after power outage

Recently I happend to experience a quite unpleasant power outage which caused my system to go down unexpectadly. After power came back the system came back as well and other than a fsck being required ...
0
votes
1answer
22 views

Enforcing minimum passphrase length with gpg

When encrypting a file with --symmetric option, gpg asks for the passphrase using the pinentry program (small window). I want it to reject passphrases below a certain length. How can I do this?
5
votes
1answer
152 views

How to renew an expired keypair with gpg

What is the best way to renew a gpg key pair when it got expired and what is the reason for the method? The key pair is already signed by many users and available on public servers. Should the new ...
-1
votes
1answer
27 views

Is app-crypt/gnupg on Portage or overlays?

I want to use multiple pgp key servers with the sks key server group witch imply gnupg-curl installation for the hkps protocol. But I didn’t find gnupg-curl as an ebuild in Portage or, at least, as a ...
3
votes
1answer
818 views

Get apt's key ids and fingerprints in machine-readable format

I'm trying to patch an issue in puppetlabs-apt to enable the use of key fingerprints as identifiers to ensure that a certain key is present by its 40-digit key fingerprint. I'm having difficulty ...
1
vote
1answer
107 views

Alias for perl script

So far while surfing web I've discovered nice addition to my gpg password generator and I've decided to adjust my alias with these commands. Here is the code gpg --gen-random 1 20 | perl -ne'print ...
3
votes
1answer
364 views

Connecting SSH and Git to gpg-agent

I'm running a YubiKey NEO with the OpenPGP applet to store my GPG keys on the smart card. I've stopped all other SSH and GPG agents manually by removing their startup entries (On elementary OS Luna, ...
2
votes
1answer
46 views

How to learn encryption type from a mail message?

I use Thunderbid, Enigmail, GnuPG and pinentry. When I receive encrypted message, how I can determine which algorithm is used: for encryption for checksuming (SHA1 or not) for compression
3
votes
2answers
102 views

Encrypt and sign with specific secret key

I have an OpenPGP smart card key (YubiKey NEO) as well as a local secret key installed in my GnuPG keyring. I'd like to encrypt and sign a file with my card's key, not the key in my keyring. How can ...
1
vote
1answer
116 views

how to disable gcr-prompter dialogs?

Whenever i save *.gpg files (symmetric password) using emacs the gcr-prompter displays dialog and asks me for password twice! It's so annoying, especially that my emacs remembers the password i type, ...
1
vote
1answer
33 views

Can I use my original GPG key even though I've re-installed Linux?

I'm a Debian user. I just created my own GPG public key. I'm just wondering if I re-install Linux on my system, is it possible to use the original GPG key or do I have to create a new one? NOTE: If ...
3
votes
1answer
58 views

monkeysphere to gnupg 2.1 workflow change

So, like many people, I was using my GPG key for SSH authentication with the help of monkeysphere, so I could load my private key to agent with monkeysphere s command and be free to connect anywhere I ...
2
votes
1answer
205 views

Usage of pinentry with keepass2 for gpg mail encryption

Debian Jessie, XFCE 4.10, KeePass2, IceDove (with Enigmail).. I'm using KeePass2 generated passwords for my gpg private key, to de/encrypt mails. Icedove is my client which uses the enigmail. As ...
6
votes
2answers
355 views

What to do when a user switches to a new key?

I have some public keys of multiple users in my keyring in GnuPG. One of these users has switched to a new public key. I still have the user's old key which has an assigned trust of ultimate. I just ...
1
vote
1answer
79 views

Is there a way to GLOBALLY set the DEFAULT keyserver for gpg on Debian?

I am not asking for per-request of a key, I know how to do that, but I want a chosen alternative gpg keyserver to be defaulted to, when no specific keyserver is specified in a request then-on-out. ...
1
vote
3answers
116 views

Rearrange UIDs in GPG

In GPG, it possible to move a UID up or down in the list of UIDs in a PGP key? I realize it is a purely cosmetic thing, but I may want to use this to show priority among my addresses, which one ...
0
votes
1answer
231 views

apt-get update: How to check for GPG errors when using scripts?

When running. sudo apt-get update For example something like this could happen. W: GPG error: http://deb.torproject.org wheezy Release: The following signatures were invalid: KEYEXPIRED 1409325681 ...
1
vote
1answer
60 views

GPG Problems When Releasing With Leiningen

I'm trying to use lein release (default, not the plugin). Now, I've installed gpg-agent and pinentry-curses, and gotten to the point where a separate curses screen appears, asking me for my secret ...
3
votes
3answers
71 views

downloading debian securely

I have a couple of questions on getting a genuine, unmolested version of Debian. MITM attacks are very real and many parties would love to hand you their own, backdoored version of software. I know ...
1
vote
0answers
119 views

How can I PGP decrypt an entire mbox?

Thunderbird cannot search PGP-encrypted emails. Hence, I was considering copying all my emails from IMAP to local storage, then decrypting them all locally, so that they are searchable. Is this ...
3
votes
3answers
2k views

Creating a GnuPG keyring for apache

Here's the scenario, we're using GnuPG to encrypt data between 2 web servers. 1 is on RHEL. GnuPG will be accessed through cgi scripts to encrypt and decrypt. So I need a keyring that the apache user ...
1
vote
0answers
165 views

gpg: Bad signature

I'm trying to sign a public PGP key but am encountering a 'Bad signature' error: gpg --edit-key someone@somedomain.com ... gpg> sign ... You need a passphrase to unlock the secret key for user: ...
2
votes
2answers
685 views

How do I make gpg-agent forget my passphrase automatically?

I'm using Thunderbird with enigmail and gpg. From thunderbird/enigmail, I can't make the gpg-agent forget my passphrase, enigmail tells me I'm using gpg-agent for passphrase management so enigmail ...