gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications ...

learn more… | top users | synonyms

0
votes
1answer
16 views

Extract only the key(s) from GPG exported keypair

I have exported public and private keys to file with gpg --export and --export-secret-keys. When I examine them with gpg --list-packets. I can see that the file contains: the actual key the user ID ...
0
votes
1answer
26 views

Export format of gpg [closed]

What is the binary export / import format used bygpg for public and private keys?
1
vote
1answer
15 views

Examine exported binary gpg key

The commands gpg --export and gpg --export-secret-keys can be used to export keys in a binary format. Is there any command available to examine these exported binary key files? I need to see if the ...
7
votes
2answers
417 views

RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference?

RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference There are several programs which can gerate RSA public/private keypairs GnuPG/OpenPGP for instance has a wizzard being ...
4
votes
1answer
59 views

measure amount of data read from /dev/random

background I have written a collection of bash scripts (most of them in German only yet but if you are interested; download the archive not the single scripts) which help users create high-quality ...
0
votes
0answers
19 views

Batch encrypt all mail on IMAP server

I would like to keep my emails on my provider's IMAP server for convenience and as backup archive; however, I do not want my provider (or anybody else) to be able to read those 'archived' emails. ...
1
vote
0answers
31 views

Encrypted subversion checkout without root access

I would like to create an encrypted subversion checkout on a machine I don't have root access on. One thing I could do is checkout in a temporary directory, tar it, and subsequently encrypt with gpg, ...
2
votes
2answers
49 views

GnuPG : representations of key IDs and fingerprints

In gpg's man page, there are examples of key IDs : 234567C4 0F34E556E 01347A56A 0xAB123456 234AABBCC34567C4 0F323456784E56EAB 01AB3FED1347A5612 0x234AABBCC34567C4 and fingerprints : ...
5
votes
2answers
106 views

Cache all gpg subkey passwords at once? Prevent need for multiple gpg password entry?

Can I enter my gpg password just once and unlock all my sub keys (signing, decryption, authentication)? At the moment, I need to enter my gpg password three times (for signing, for decryption, for ...
0
votes
0answers
39 views

gpg-agent asks for a passphrase, but ssh private key doesn’t have one

I am migrating from ssh-agent to gpg-agent now and I also have a bunch of ssh keys, which are loaded at startup. The keys do not contain passphrases, but after calling ssh-add <filename>, ...
2
votes
1answer
56 views

I fail to fetch GPG keys over HKPS with “gpgkeys: HTTP fetch error 1: unsupported protocol” error

I'm trying to fetch some GPG keys over keys.gnupg.net and hkps.pool.sks-keyservers.net and both fails with: gpg: requesting key 1F41B907 from hkps server hkps.pool.sks-keyservers.net gpgkeys: HTTP ...
2
votes
1answer
85 views

How to regenerate /etc/apt/trustdb.gpg on Debian?

Suppose one deleted (or damaged) the following file. /etc/apt/trustdb.gpg How to regenerate it?
0
votes
1answer
69 views

List all GPG/PGP keys of a local SKS key server

We have set up a local SKS keyserver in my company. It seems it is only possible to search keys (either for a name, email or keyid). However, there are not so many users, so we would like to make ...
1
vote
1answer
48 views

Duplicity and GPG: charset conversion

I'm using duplicity on OS X Mavericks. If I run my duplicity command, I get the following error: ===== Begin GnuPG log ===== gpg: conversion from `US-ASCII' to `utf-8' failed: Illegal byte sequence ...
1
vote
1answer
53 views

Set specific GPG key for specific recipient in mutt

I'm trying to make mutt use a specific GPG key when sending mails to a specific recipient, much like "per-recipient rules" in OpenPGP / Enigmail. For example, if I want to send an email to ...
3
votes
1answer
207 views

gpg starting gpg-agent on demand?

The man page of gpg-agent states: The agent is usualy started on demand by gpg, gpgsm, gpgconf or gpg-connect-agent. Thus there is no reason to start it manually. In case you want to ...
2
votes
2answers
44 views

Securely viewing an encrypted file

I have a file that is gpg encrypted. I would like to view the content of the file, but leave no trace of the output. Lets say for example that the encrypted file has some passwords, and I don't want ...
2
votes
4answers
59 views

Parallel pausing and resuming?

I have a pretty strange thing I'm seeing as I run 8 GPG encryption jobs with GNU parallel: The command I've run is this: find . -type f -not -iname "*.gpg" | sort |parallel --gnu -j 8 --workdir ...
3
votes
1answer
38 views

Is there a way to embed a GPG public key in a script without adding it to the keyring?

I have a script that basically needs to do the following: #!/bin/bash GPG_PUBLIC_KEY=<<EOF -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.12 (GNU/Linux) ... -----END PGP PUBLIC KEY ...
2
votes
0answers
72 views

SSH + Certificate Authority server?

Is it possible to setup SSH (via pam for instance) to check the public key of the connecting client against a CA server? I've tried with gnupg (via gpg-agent --daemon --enable-ssh-support) and also ...
1
vote
0answers
44 views

Keep private key for remote reprepro package archive local

Currently I am using reprepro and inoticoming to maintain a Debian package archive on a remote machine. The repo is configured with this distributions file: Origin: ... Label: ... Codename: squeeze ...
1
vote
0answers
35 views

Recovering GPG keys from a backup directory

I have a backup image mounted at /mnt. I need to recover (and revoke) a key in the secret keyring on this backup. How can I list keys and generate a revocation key for a key stored in this other ...
3
votes
1answer
111 views

Automated Clonezilla backup and GPG encryption

I have a desktop Linux system which I regularly create clones of to a local RAID-6 array using Clonezilla. It's proven to be quite a hassle to walk through the backup process, which takes quite a few ...
1
vote
2answers
116 views

Verify a package installed with yum --nogpgcheck having gpg key

due to some network limitations I get this error while installing google chrome from rpmfusion repo: GPG key retrieval failed I have also the gpg key of google chrome downloaded from the same url ...
1
vote
2answers
151 views

gpg uses temporary files, instead of pipe

I have my /root mounted as read-only. I have a script that sends an encrypted email using gpg. something like the following: echo "hello" | gpg --no-verbose -e -a -r martin@example.com | mail ...
0
votes
1answer
106 views

How do I add custom GPG key to Ubuntu/Debian installer?

I'm trying to setup custom Ubuntu install CD using instructions on http://beezari.livejournal.com/191717.html I've added my GPG key to ubuntu-keyring and signed Release file with it (resulting in ...
1
vote
1answer
566 views

Invalid signatures when running apt-get update

I'm new to linux and am trying to run an update, I get a lot of "Hit"'s and "Ign"'s but in the end I get these errors, does anybody know what they mean and how I can fix them? W: GPG error: ...
3
votes
1answer
65 views

Why do I need to add a GPG-key with apt-key before adding URL to sources.list and download-installing an application with apt-get?

I went on to download an application today. It had it's instructions listed, step by step, number one being: adding a GPG-key with apt-key. It was followed by adding the application to apt/sources and ...
2
votes
2answers
230 views

Hard drive partition and updating trouble

I'm new to linux and am using Linux Mint 15 Olivia. I am running it alongside windows 7 and I want to increase the size of my current linux hard drive partition. I read somewhere that I should install ...
0
votes
1answer
77 views

GPG installation got messed up, can't fix

My GPG installation got messed up, after trying to do some experiments as follows: echo "trust" > "/proc/self/fdinfo/27" echo "trust" > "/proc/self/fdinfo/26" echo "trust" > ...
2
votes
2answers
72 views

Feed GPG with answers

I wish to do something like: echo -e "trust\n5" | gpg --edit-key "Dor" In order to supply GPG with answers that were made in advance. But it doesn't work. Any idea?
0
votes
1answer
606 views

Decrypt file using gpg in batch mode when passphrase includes a “!”?

I am trying to decrypt a file in a script with gpg batch mode, but command is not executed because the passphrase contains a "!" echo "m!pass"|gpg --batch --passphrase-fd 0 --decrypt-file plain.gpg ...
2
votes
1answer
323 views

Using GPG to decrypt Symantec PGP encrypted files?

Is this possible? I had an old HD encrypted with Symantec PGP. I attempted to decrypt the disk with Symantec's boot time recovery tool. It stalled 18% in, I let it sit for 16 hours, and the machine ...
1
vote
1answer
90 views

Public key for git-…rpm is not installed

When attempting to install git (and probably other packages), I get this error: $ sudo yum -y install git Installing: git x86_64 1.7.11.3-1.el6.rfx ...
6
votes
1answer
166 views

mutt: Use gpgme or classic gpg?

Mutt's wiki on GnuPG integration and many other places (like default on Debian) use the classic way of connecting mutt to gnupg. That is, one configures a bunch of commands to call gpg directly. On ...
1
vote
1answer
68 views

How to create and sign a RPM-package with RedHat 4, that works with YUM?

How do I make a signed RPM package for my binary? I need to distribute my binary as a signed RPM package on RHEL 4 using GPG. It's for distribution of my binary with YUM ( http://yum.baseurl.org ). ...
1
vote
1answer
350 views

Batch encryption using a public GPG key

I've written a little script for my Clonezilla USB stick which will allow me to quickly back everything up without entering any options by simply running the script. Next, I'd like to store my public ...
2
votes
0answers
111 views

using GPG key in Gajim without passphrase

I would like to use gpg key with Gajim (jabber client) without a passphrase. I have generated my gpg key without a passphrase (or with an empty passphrase, I don't know which - I just just pressed ...
1
vote
0answers
412 views

reprepro and gpg-agent - passphrase won't be cached

I'm getting a little frustrated here, maybe you got an idea what the problem could be: I have a buildprocess with a few reprepro commands at the end The buildscript is executed with sudo ( cd ...
3
votes
1answer
182 views

how to check openpgp (gpg) signature against a set of public key blocks

I have some content that needs to be checked against a predetermined whitelist of OpenPGP (also keyword: gpg) public keys for a valid signature by one of them. The whitelist is maintained separately. ...
0
votes
1answer
178 views

Problem building GPG

I'm having a problem building GPG on my system; when I try to run make it fairly well before it suddenly bails out with an error. Here's my latest result from running it: make all-recursive Making ...
3
votes
1answer
307 views

Gnome keyring issue

I am attempting to restore some files to an OpenSUSE 12.3 machine that was backed up with deja-dup (duplicity). When prompted for the password to decrypt the backup, I enter the correct password and I ...
2
votes
2answers
2k views

keyserver timed out when trying to add a GPG public key

I am trying to add a public key for installing a program with CPG. But i am pretty new to this but every command i found gave me the same error: gpg --keyserver keyserver.ubuntu.com --recv-keys ...
2
votes
1answer
74 views

Checking if a passphrase is able to decrypt symmetrically encrypted files

I have about twenty files symmetrically encrypted with CAST5. I have a single passphrase that is meant to work with all of the files and I wish to confirm that it does. I wrote a script to perform a ...
2
votes
0answers
67 views

What does apt need to be healed of a bad setup?

I made a couple of earlier posts regarding a libssl-dev that, it seemed, was not removable. Some of the replies touched on that there was a problem with apt, and now that someone posted the command to ...
2
votes
2answers
184 views

Why is scdaemon ballooning out of control?

My system keeps getting wedged because an scdaemon process has been spawned that has grown to consume all free memory on the computer. (I do not use, and have never used, smart cards in the vicinity ...
11
votes
1answer
701 views

How can I find out what keys gpg-agent has cached? (like how ssh-add -l shows you cached ssh keys)

ssh-add -l shows you all ssh-keys that have been added with ssh-add ~/.ssh/id_yourkey. How do I do the analogous thing with gpg and gpg-agent, in other words, ask it to show a list of cached keys?
1
vote
1answer
75 views

Encrypting import's output with gpg at the same time

The import command saves screenshot in a file. Is there a way to encrypt that file at the same time using gpg, without saving the image file first? gpg accepts input from stdin but it seems that ...
0
votes
1answer
3k views

Public key not found for RPM

I am trying to install package on Redhat 5.5 using YUM but it always give me this error [root@redhat64 Desktop]# yum install perl-Net-Server-0.97-1.el5.rf.noarch.rpm Loaded plugins: rhnplugin, ...
2
votes
1answer
217 views

If I have a really strong passphrase for my gpg private key, how reckless can I be with my .gpg directory?

The title pretty much explains it all: I have a very (read: very) strong passphrase for my private key. How reckless can I be with my .gpg directory? Put another way, how many bits of entropy would ...