gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications ...

learn more… | top users | synonyms

0
votes
0answers
11 views

GPG: Unattended GPGkey generation — example code not working

I tried running the example code from: https://gnupg.org/documentation/manuals/gnupg/Unattended-GPG-key-generation.html#Unattended-GPG-key-generation Both of the keys get generated correctly, but ...
2
votes
2answers
21 views

GPG decrypt returns empty file

Im decrypting a file sent by a client using gpg. The file is Obviusly encrypted, and theoretically, using my public key. I have installed both his public key and my private key. So, im running: ...
0
votes
1answer
38 views

GPG error with http://volatile.debian.org : 'The following signatures were invalid: NODATA 1 NODATA 2'

I am currently trying to add a new repository to apt-get but it is not working. I'm adding it like this: deb http://volatile.debian.org/debian-volatile wheezy/volatile non-free Then I get this ...
1
vote
0answers
41 views

Decrypting with GPG after a “su - different user”

I have cron job running a script in the cron of "USER A" that encrypts many files in a loop using the gpg command below: gpg --batch --cipher-algo AES256 --passphrase "PASSWORDISHERE" -c FILENAME ...
1
vote
0answers
23 views

How can I have pinentry ask if a password should be remembered?

In this answer, the password prompt for gpg-agent includes options for how long the password should be remembered. However, in my system I get a much simpler prompt, without that option How can ...
1
vote
2answers
46 views

Is there a way to edit a password-protected file without having to retype the password all the time?

I want to encrypt a text file using a password and a way to safely edit that file. The problem I am having is that I haven't managed to find a simple way to do that while only requiring the password ...
1
vote
1answer
20 views

How do I get the Truecrypt CLI installed?

I have a unix machine with truecrypt 7.1a installed. I'm trying to mount a volume to test with the command line but I don't have the truecrypt command installed evidently. Did the command line ...
3
votes
1answer
35 views

Not possible to use batch mode?! FreeBSD gpg 1.4.19

I use a script to decrypt my password for offlineimap, but somehow it's not working anymore ... The file was encrypted with gpg --symmetric password For offlineimap I use this combination. gpg ...
1
vote
1answer
34 views

How can I tell gpg that I do not want password caching for a specific program?

I'm using gnupg 2.1.2. Usually it is quite handy when gnupg caches my passwords. But for some sensitive programs I would prefer that gnupg does not cache them with gpg-agent. I searched a good while ...
2
votes
3answers
67 views

gpg key generation on Tails live cd - why so quick?

I just used gpg2 --gen-key to generate a 2048 bit RSA key pair on an OS running on a live cd (Tails). This happened much faster than I expected. When I have done this before on a regular machine it ...
2
votes
1answer
65 views

What are gpg-pubkey* packages?

I compared the packages list reported by RPM and YUM on a CentOS 6 and 7. I noticed the lists were slightly different (same issue with RHEL). See Listing installed packages with yum and rpm mismatch ...
3
votes
1answer
46 views

Zsh gpg2 autocompletion

I am using zsh with oh-my-zsh on OSX. I installed gnupg2 from homebrew giving me the executable gpg2. Unfortunately zsh auto completion appears to only support gpg (even though that executable is not ...
0
votes
1answer
67 views

How does GPG agent work?

I have a line in my gpg.conf file which says use-agent I understand this refers to gpg-agent which is a daemon. The man page states "gpg-agent is a daemon to manage secret (private) keys independently ...
0
votes
0answers
39 views

'Pass' password manager - does it require public key?

The 'pass' password manager uses gpg keys. http://www.passwordstore.org/ However, gpg itself can be used for symmetric encryption of files. Does pass only work using public/private keys, or is it ...
1
vote
1answer
30 views

Simple-cdd keyring addition

I'm looking to add a personal key for an apt repo to a netinstall disc which would require end users to not have to install it. I'm using simple-cdd to generate the build, so wrapping it into a .deb ...
1
vote
0answers
154 views

How do I combine SSH agent forwarding and gpg-agent?

I have an ssh-agent running on my local machine. I connect to a remote machine via SSH, with agent forwarding enabled. On that remote there is an instance of gpg-agent running. I know that recent ...
3
votes
2answers
68 views

How to quickly generate (insecure) GPG keys?

I'd like to automate generating at least two GPG keys for testing and demonstration purposes in a virtual machine. Because of this context I want to make sure the key generation is fast, ideally not ...
2
votes
4answers
159 views

File encryption utility without key integrity check (symmetric key)

When encrypting a file with symmetric key, most common utilities (such as gpg, mcrypt, etc) store information in the encrypted message which can be used to verify integrity of the key during ...
4
votes
1answer
425 views

How to import secret gpg key (copied from one machine to another)?

I'm trying to copy my gpg key from one machine to another. I do: gpg --export ${ID} > public.key gpg --export-secret-key ${ID} > private.key Move files to new machine, and then: gpg ...
0
votes
3answers
102 views

creating and sending a self-signed public key using GnuPG in CentOS 7

I know that I can create a GPG keypair from the CentOS 7 terminal by typing gpg --gen-key and following the resulting steps, but how can I make sure that the resulting public key is self-signed? And ...
-2
votes
2answers
75 views

installing GnuGPG with Thunderbird on CentOS 7

How can I install GnuPG on my CentOS 7 system? I want to use GnuPG alongside Thunderbird and Enigmail to manage pgp keys, as per the instructions in this link. The problem is that the download ...
0
votes
1answer
19 views

gnupg broken after power outage

Recently I happend to experience a quite unpleasant power outage which caused my system to go down unexpectadly. After power came back the system came back as well and other than a fsck being required ...
0
votes
1answer
17 views

Enforcing minimum passphrase length with gpg

When encrypting a file with --symmetric option, gpg asks for the passphrase using the pinentry program (small window). I want it to reject passphrases below a certain length. How can I do this?
5
votes
1answer
77 views

How to renew an expired keypair with gpg

What is the best way to renew a gpg key pair when it got expired and what is the reason for the method? The key pair is already signed by many users and available on public servers. Should the new ...
-1
votes
1answer
24 views

Is app-crypt/gnupg on Portage or overlays?

I want to use multiple pgp key servers with the sks key server group witch imply gnupg-curl installation for the hkps protocol. But I didn’t find gnupg-curl as an ebuild in Portage or, at least, as a ...
3
votes
1answer
616 views

Get apt's key ids and fingerprints in machine-readable format

I'm trying to patch an issue in puppetlabs-apt to enable the use of key fingerprints as identifiers to ensure that a certain key is present by its 40-digit key fingerprint. I'm having difficulty ...
1
vote
1answer
95 views

Alias for perl script

So far while surfing web I've discovered nice addition to my gpg password generator and I've decided to adjust my alias with these commands. Here is the code gpg --gen-random 1 20 | perl -ne'print ...
3
votes
1answer
326 views

Connecting SSH and Git to gpg-agent

I'm running a YubiKey NEO with the OpenPGP applet to store my GPG keys on the smart card. I've stopped all other SSH and GPG agents manually by removing their startup entries (On elementary OS Luna, ...
2
votes
1answer
39 views

How to learn encryption type from a mail message?

I use Thunderbid, Enigmail, GnuPG and pinentry. When I receive encrypted message, how I can determine which algorithm is used: for encryption for checksuming (SHA1 or not) for compression
3
votes
2answers
65 views

Encrypt and sign with specific secret key

I have an OpenPGP smart card key (YubiKey NEO) as well as a local secret key installed in my GnuPG keyring. I'd like to encrypt and sign a file with my card's key, not the key in my keyring. How can ...
1
vote
1answer
99 views

how to disable gcr-prompter dialogs?

Whenever i save *.gpg files (symmetric password) using emacs the gcr-prompter displays dialog and asks me for password twice! It's so annoying, especially that my emacs remembers the password i type, ...
1
vote
1answer
33 views

Can I use my original GPG key even though I've re-installed Linux?

I'm a Debian user. I just created my own GPG public key. I'm just wondering if I re-install Linux on my system, is it possible to use the original GPG key or do I have to create a new one? NOTE: If ...
3
votes
1answer
53 views

monkeysphere to gnupg 2.1 workflow change

So, like many people, I was using my GPG key for SSH authentication with the help of monkeysphere, so I could load my private key to agent with monkeysphere s command and be free to connect anywhere I ...
2
votes
1answer
185 views

Usage of pinentry with keepass2 for gpg mail encryption

Debian Jessie, XFCE 4.10, KeePass2, IceDove (with Enigmail).. I'm using KeePass2 generated passwords for my gpg private key, to de/encrypt mails. Icedove is my client which uses the enigmail. As ...
6
votes
2answers
353 views

What to do when a user switches to a new key?

I have some public keys of multiple users in my keyring in GnuPG. One of these users has switched to a new public key. I still have the user's old key which has an assigned trust of ultimate. I just ...
1
vote
1answer
58 views

Is there a way to GLOBALLY set the DEFAULT keyserver for gpg on Debian?

I am not asking for per-request of a key, I know how to do that, but I want a chosen alternative gpg keyserver to be defaulted to, when no specific keyserver is specified in a request then-on-out. ...
1
vote
3answers
86 views

Rearrange UIDs in GPG

In GPG, it possible to move a UID up or down in the list of UIDs in a PGP key? I realize it is a purely cosmetic thing, but I may want to use this to show priority among my addresses, which one ...
0
votes
1answer
223 views

apt-get update: How to check for GPG errors when using scripts?

When running. sudo apt-get update For example something like this could happen. W: GPG error: http://deb.torproject.org wheezy Release: The following signatures were invalid: KEYEXPIRED 1409325681 ...
1
vote
1answer
54 views

GPG Problems When Releasing With Leiningen

I'm trying to use lein release (default, not the plugin). Now, I've installed gpg-agent and pinentry-curses, and gotten to the point where a separate curses screen appears, asking me for my secret ...
3
votes
3answers
70 views

downloading debian securely

I have a couple of questions on getting a genuine, unmolested version of Debian. MITM attacks are very real and many parties would love to hand you their own, backdoored version of software. I know ...
1
vote
0answers
110 views

How can I PGP decrypt an entire mbox?

Thunderbird cannot search PGP-encrypted emails. Hence, I was considering copying all my emails from IMAP to local storage, then decrypting them all locally, so that they are searchable. Is this ...
3
votes
3answers
2k views

Creating a GnuPG keyring for apache

Here's the scenario, we're using GnuPG to encrypt data between 2 web servers. 1 is on RHEL. GnuPG will be accessed through cgi scripts to encrypt and decrypt. So I need a keyring that the apache user ...
1
vote
0answers
149 views

gpg: Bad signature

I'm trying to sign a public PGP key but am encountering a 'Bad signature' error: gpg --edit-key someone@somedomain.com ... gpg> sign ... You need a passphrase to unlock the secret key for user: ...
2
votes
2answers
607 views

How do I make gpg-agent forget my passphrase automatically?

I'm using Thunderbird with enigmail and gpg. From thunderbird/enigmail, I can't make the gpg-agent forget my passphrase, enigmail tells me I'm using gpg-agent for passphrase management so enigmail ...
2
votes
1answer
44 views

How close smartcard after sign rpm with GPG2?

Adding to this question: How do I close gnupg V2.0 smartcard after signing an rpm? I tried to execute: gpg-agent --default-cache-ttl 15 --max-cache-ttl 15 --daemon But after 15 seconds, if I ...
1
vote
1answer
211 views

How to configure gpg2 to pass smartcard PIN unless pinentry programm?

My configuration: Centos 6.5 gnugp2-2.0.14-6.el6_4.x86_64 gnupg2-smime-2.0.14-6.el6_4.x86_64 I configured gpg2 to use my signature key in smartcard gnupg V2.0. I imported my gpg signature key to ...
1
vote
1answer
69 views

Use non-default keyring with gnome-keyring

I'm using Gnome Keyring with GPG. Whenever I need to sign something, the keyring daemon takes over and does it for me. However, if I do: export GNUPGHOME=/path/to/keyring from a Bash script and use ...
0
votes
1answer
434 views

Debian: GPG cannot fetch Linux Kernel key

I am in the process of recompiling the kernel on Debian. Following the instructions on kernel.org, the first step is to verify the signature. But GPG complains that it cannot find the public key: # ...
2
votes
0answers
15 views

Password dialogs block keybindings

I am using XMonad 0.11, but this might be unrelated. I am using evolution 3.12.2 and this is related but the problem might be more general. After research it appears that the window in question is ...
2
votes
1answer
56 views

What GPG agent does Elementary Luna use?

Whenever I try decrypting or signing files with GPG in Elementary Luna, I see a graphical password prompt come up for my GPG key. The key is then cached in memory for future requests for some time. ...