Collaborate Disseminate
I’m trying to verify the fingerprint of the Qubes Master signing Key (QMSK) however, I’ve run into some inconsistent output.
For example:
Qubes Os website & web of trust shows after executing the following command:
Gpg –fingerprint ke… Continue reading When using gpg2 to verify Qubes, the pub is different
The connection between gpg and my yubikey appears to periodically fail. Decryption attempts are met with the pinentry-mac dialog "please insert card with serial number X".
gpg –card-status -v reports
gpg: Note: RFC4880bis featur… Continue reading GPG periodically loses connection to yubikey on monterey [migrated]
I want to use gpg from another user (user2), so that the primary user (user1) does not have access to the encrypted file, but only to the part the script will output.
Added a sudo rule for user1 to run /bin/gpg as user2. When I try to exec… Continue reading Using GPG from another user (GNU/Linux)
Sorry for puzzling terminology, I’m very new to field and it’s really hard to me to orient in these new things. (maybe, probably, there isn’t ‘private key stub’ I just saw that term used somewhere, maybe fetch retrieves only public key and… Continue reading importing private key stub from piv card into gpg on another pc
When verifying a pgp signed message using GnuPG, one gets an output similar to the following:
gpg: Signature made Fr 07 Jan 2022 13:42:21 CET
gpg: using RSA key 610B4AFF906E6890EEDC797201E99CB6C034BC3B
gpg: is… Continue reading Exact meaning of RSA key in `gpg –verify` output
I understand that nowadays passwords are not stored in plaintext, only as password + salt and hashed (minimum). But I haven’t found any exact confirmation that gpg does NOT store (cache, place in RAM) the passphrase in plaintext.
And if a … Continue reading GPG passphrase in the cache as a hash?
I am preparing for the Sec+, currently reading the book, "Mike Meyers …. Certification Passport"(book in question is irrelevant to the problem), In the cryptography chapter, topic-public key/asymmetric cryptography
It says
Using Mathematica v12.2, how can I call gpg to generate a PGP key pair using the SHA384 hashing algorithm? At the moment it’s using SHA256 and I don’t know how to alter this. This is the code I’ve got:
RunProcess[{"C:\\Program Files (… Continue reading Calling gpg from Mathematica and specifying the SHA384 hashing algorithm [migrated]
Consider a situation where Alice and Bob don’t know each other, and Alice sends some data to Bob and provides a PGP digital signature. Bob obtains Alice’s public key, and successfully verifies that the key was used to sign the data, etc, b… Continue reading PGP: how does the owner of a public key generate the fingerprint?
I am going to put a link to my GPG key in the signature of my e-mails.
This would be both a hyperlink in the form of
https://keyserver.ubuntu.com/pks/lookup?op=get&search=XXXXXX
and the command to download the key:
gpg –recv-keys XXX
… Continue reading Sharing public GPG key: be safe from DNS spoofing attacks