gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications ...

learn more… | top users | synonyms

0
votes
0answers
24 views

'Pass' password manager - does it require public key?

The 'pass' password manager uses gpg keys. http://www.passwordstore.org/ However, gpg itself can be used for symmetric encryption of files. Does pass only work using public/private keys, or is it ...
1
vote
1answer
13 views

Simple-cdd keyring addition

I'm looking to add a personal key for an apt repo to a netinstall disc which would require end users to not have to install it. I'm using simple-cdd to generate the build, so wrapping it into a .deb ...
1
vote
0answers
17 views

How do I combine SSH agent forwarding and gpg-agent?

I have an ssh-agent running on my local machine. I connect to a remote machine via SSH, with agent forwarding enabled. On that remote there is an instance of gpg-agent running. I know that recent ...
2
votes
2answers
43 views

How to quickly generate (insecure) GPG keys?

I'd like to automate generating at least two GPG keys for testing and demonstration purposes in a virtual machine. Because of this context I want to make sure the key generation is fast, ideally not ...
2
votes
4answers
122 views

File encryption utility without key integrity check (symmetric key)

When encrypting a file with symmetric key, most common utilities (such as gpg, mcrypt, etc) store information in the encrypted message which can be used to verify integrity of the key during ...
4
votes
1answer
124 views

How to import secret gpg key (copied from one machine to another)?

I'm trying to copy my gpg key from one machine to another. I do: gpg --export ${ID} > public.key gpg --export-secret-key ${ID} > private.key Move files to new machine, and then: gpg ...
0
votes
3answers
54 views

creating and sending a self-signed public key using GnuPG in CentOS 7

I know that I can create a GPG keypair from the CentOS 7 terminal by typing gpg --gen-key and following the resulting steps, but how can I make sure that the resulting public key is self-signed? And ...
-2
votes
2answers
41 views

installing GnuGPG with Thunderbird on CentOS 7

How can I install GnuPG on my CentOS 7 system? I want to use GnuPG alongside Thunderbird and Enigmail to manage pgp keys, as per the instructions in this link. The problem is that the download ...
0
votes
1answer
18 views

gnupg broken after power outage

Recently I happend to experience a quite unpleasant power outage which caused my system to go down unexpectadly. After power came back the system came back as well and other than a fsck being required ...
0
votes
1answer
10 views

Enforcing minimum passphrase length with gpg

When encrypting a file with --symmetric option, gpg asks for the passphrase using the pinentry program (small window). I want it to reject passphrases below a certain length. How can I do this?
4
votes
1answer
30 views

How to renew an expired keypair with gpg

What is the best way to renew a gpg key pair when it got expired and what is the reason for the method? The key pair is already signed by many users and available on public servers. Should the new ...
-1
votes
1answer
18 views

Is app-crypt/gnupg on Portage or overlays?

I want to use multiple pgp key servers with the sks key server group witch imply gnupg-curl installation for the hkps protocol. But I didn’t find gnupg-curl as an ebuild in Portage or, at least, as a ...
3
votes
1answer
40 views

Get apt's key ids and fingerprints in machine-readable format

I'm trying to patch an issue in puppetlabs-apt to enable the use of key fingerprints as identifiers to ensure that a certain key is present by its 40-digit key fingerprint. I'm having difficulty ...
1
vote
1answer
82 views

Alias for perl script

So far while surfing web I've discovered nice addition to my gpg password generator and I've decided to adjust my alias with these commands. Here is the code gpg --gen-random 1 20 | perl -ne'print ...
3
votes
1answer
115 views

Connecting SSH and Git to gpg-agent

I'm running a YubiKey NEO with the OpenPGP applet to store my GPG keys on the smart card. I've stopped all other SSH and GPG agents manually by removing their startup entries (On elementary OS Luna, ...
2
votes
1answer
29 views

How to learn encryption type from a mail message?

I use Thunderbid, Enigmail, GnuPG and pinentry. When I receive encrypted message, how I can determine which algorithm is used: for encryption for checksuming (SHA1 or not) for compression
3
votes
2answers
40 views

Encrypt and sign with specific secret key

I have an OpenPGP smart card key (YubiKey NEO) as well as a local secret key installed in my GnuPG keyring. I'd like to encrypt and sign a file with my card's key, not the key in my keyring. How can ...
1
vote
1answer
54 views

how to disable gcr-prompter dialogs?

Whenever i save *.gpg files (symmetric password) using emacs the gcr-prompter displays dialog and asks me for password twice! It's so annoying, especially that my emacs remembers the password i type, ...
1
vote
1answer
32 views

Can I use my original GPG key even though I've re-installed Linux?

I'm a Debian user. I just created my own GPG public key. I'm just wondering if I re-install Linux on my system, is it possible to use the original GPG key or do I have to create a new one? NOTE: If ...
3
votes
1answer
35 views

monkeysphere to gnupg 2.1 workflow change

So, like many people, I was using my GPG key for SSH authentication with the help of monkeysphere, so I could load my private key to agent with monkeysphere s command and be free to connect anywhere I ...
2
votes
1answer
117 views

Usage of pinentry with keepass2 for gpg mail encryption

Debian Jessie, XFCE 4.10, KeePass2, IceDove (with Enigmail).. I'm using KeePass2 generated passwords for my gpg private key, to de/encrypt mails. Icedove is my client which uses the enigmail. As ...
6
votes
2answers
352 views

What to do when a user switches to a new key?

I have some public keys of multiple users in my keyring in GnuPG. One of these users has switched to a new public key. I still have the user's old key which has an assigned trust of ultimate. I just ...
1
vote
1answer
38 views

Is there a way to GLOBALLY set the DEFAULT keyserver for gpg on Debian?

I am not asking for per-request of a key, I know how to do that, but I want a chosen alternative gpg keyserver to be defaulted to, when no specific keyserver is specified in a request then-on-out. ...
1
vote
3answers
47 views

Rearrange UIDs in GPG

In GPG, it possible to move a UID up or down in the list of UIDs in a PGP key? I realize it is a purely cosmetic thing, but I may want to use this to show priority among my addresses, which one ...
0
votes
1answer
199 views

apt-get update: How to check for GPG errors when using scripts?

When running. sudo apt-get update For example something like this could happen. W: GPG error: http://deb.torproject.org wheezy Release: The following signatures were invalid: KEYEXPIRED 1409325681 ...
1
vote
1answer
31 views

GPG Problems When Releasing With Leiningen

I'm trying to use lein release (default, not the plugin). Now, I've installed gpg-agent and pinentry-curses, and gotten to the point where a separate curses screen appears, asking me for my secret ...
3
votes
3answers
70 views

downloading debian securely

I have a couple of questions on getting a genuine, unmolested version of Debian. MITM attacks are very real and many parties would love to hand you their own, backdoored version of software. I know ...
1
vote
0answers
58 views

How can I PGP decrypt an entire mbox?

Thunderbird cannot search PGP-encrypted emails. Hence, I was considering copying all my emails from IMAP to local storage, then decrypting them all locally, so that they are searchable. Is this ...
3
votes
3answers
869 views

Creating a GnuPG keyring for apache

Here's the scenario, we're using GnuPG to encrypt data between 2 web servers. 1 is on RHEL. GnuPG will be accessed through cgi scripts to encrypt and decrypt. So I need a keyring that the apache user ...
1
vote
0answers
137 views

gpg: Bad signature

I'm trying to sign a public PGP key but am encountering a 'Bad signature' error: gpg --edit-key someone@somedomain.com ... gpg> sign ... You need a passphrase to unlock the secret key for user: ...
2
votes
2answers
377 views

How do I make gpg-agent forget my passphrase automatically?

I'm using Thunderbird with enigmail and gpg. From thunderbird/enigmail, I can't make the gpg-agent forget my passphrase, enigmail tells me I'm using gpg-agent for passphrase management so enigmail ...
2
votes
1answer
37 views

How close smartcard after sign rpm with GPG2?

Adding to this question: How do I close gnupg V2.0 smartcard after signing an rpm? I tried to execute: gpg-agent --default-cache-ttl 15 --max-cache-ttl 15 --daemon But after 15 seconds, if I ...
1
vote
1answer
153 views

How to configure gpg2 to pass smartcard PIN unless pinentry programm?

My configuration: Centos 6.5 gnugp2-2.0.14-6.el6_4.x86_64 gnupg2-smime-2.0.14-6.el6_4.x86_64 I configured gpg2 to use my signature key in smartcard gnupg V2.0. I imported my gpg signature key to ...
1
vote
1answer
62 views

Use non-default keyring with gnome-keyring

I'm using Gnome Keyring with GPG. Whenever I need to sign something, the keyring daemon takes over and does it for me. However, if I do: export GNUPGHOME=/path/to/keyring from a Bash script and use ...
0
votes
1answer
292 views

Debian: GPG cannot fetch Linux Kernel key

I am in the process of recompiling the kernel on Debian. Following the instructions on kernel.org, the first step is to verify the signature. But GPG complains that it cannot find the public key: # ...
2
votes
0answers
14 views

Password dialogs block keybindings

I am using XMonad 0.11, but this might be unrelated. I am using evolution 3.12.2 and this is related but the problem might be more general. After research it appears that the window in question is ...
2
votes
1answer
35 views

What GPG agent does Elementary Luna use?

Whenever I try decrypting or signing files with GPG in Elementary Luna, I see a graphical password prompt come up for my GPG key. The key is then cached in memory for future requests for some time. ...
7
votes
2answers
906 views

Adding “random number entropy” for GPG keys?

In the following video: Linux HOWTO: Secure Your Data with PGP, Part 2, you are shown how to create a key pair with gpg. At about 1:50, the instructor says the following: While the key is being ...
1
vote
2answers
1k views

How to automatically accept epel gpg key

The very first time that I install a package from epel, I am prompted if I want to import a GPG key. Notice how there are 2 'Is this ok' prompts when installing redis? [root@us-devops-build02 ...
1
vote
2answers
189 views

sign and trust gpg key automatically via bash

I've got a question about gpg and signing a key automatically via bash: I've got a script, that is doing the beginning of signing: gpg --recv $schluessel1 gpg --edit $schluessel1 If I try something ...
0
votes
0answers
280 views

Using gpg-agent to decrypt password in cron job

I have two scripts that both need to decrypt passwords using gpg-agent. Both of them run fine when launched from the terminal. The problem is that when run via cron, they both fail with these ...
1
vote
0answers
70 views

Create global enviromental variable after boot

I know about /etc/profile and /etc/environment, but I would like to set a global environmental variable after boot and login. By global, I mean an environment variable that can be accessed by any ...
0
votes
1answer
30 views

Extract only the key(s) from GPG exported keypair

I have exported public and private keys to file with gpg --export and --export-secret-keys. When I examine them with gpg --list-packets. I can see that the file contains: the actual key the user ID ...
0
votes
1answer
57 views

Export format of gpg [closed]

What is the binary export / import format used bygpg for public and private keys?
1
vote
1answer
138 views

Examine exported binary gpg key

The commands gpg --export and gpg --export-secret-keys can be used to export keys in a binary format. Is there any command available to examine these exported binary key files? I need to see if the ...
7
votes
2answers
2k views

RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference?

RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference There are several programs which can gerate RSA public/private keypairs GnuPG/OpenPGP for instance has a wizzard being ...
4
votes
1answer
162 views

measure amount of data read from /dev/random

background I have written a collection of bash scripts (most of them in German only yet but if you are interested; download the archive not the single scripts) which help users create high-quality ...
1
vote
0answers
47 views

Encrypted subversion checkout without root access

I would like to create an encrypted subversion checkout on a machine I don't have root access on. One thing I could do is checkout in a temporary directory, tar it, and subsequently encrypt with gpg, ...
2
votes
2answers
227 views

GnuPG : representations of key IDs and fingerprints

In gpg's man page, there are examples of key IDs : 234567C4 0F34E556E 01347A56A 0xAB123456 234AABBCC34567C4 0F323456784E56EAB 01AB3FED1347A5612 0x234AABBCC34567C4 and fingerprints : ...
8
votes
2answers
474 views

Cache all gpg subkey passwords at once? Prevent need for multiple gpg password entry?

Can I enter my gpg password just once and unlock all my sub keys (signing, decryption, authentication)? At the moment, I need to enter my gpg password three times (for signing, for decryption, for ...