Collaborate Disseminate
Say I have a file encrypted with GnuPG, in isolation (i.e., I don’t have the relevant keys). Can one then establish the recipients of the encryption? That is:
Name/E-Mail/Comment
Key ID
Or is this information only discernible if you have… Continue reading What metadata is exposed by OpenPGP?
A little bit of background: I want to sign my emails for my own safety. None of my intended recipients are users of digital signatures. If one day someone were to impersonate me, I can prove my own identity, and disprove the identity of my… Continue reading Standard form of email signature
I was curious about setting SHA-3 as the preferred hashing algorithm for GPG but that looks like it is not yet supported and the documentation states this:
SHA-3: SHA-3 is a completely new hash algorithm that makes a clean
break with the … Continue reading Any reason why SHA-3 isn’t yet present in GnuPG?
I am trying to setup a YubiKey 5 NFC with GPG on Windows 10 to ultimately use it to sign git-commits.
This is a new topic for me and I ran into some issues that got me stuck now.
I ran into this error:
gpg –card-status
gpg: selecting card… Continue reading GPG not recognizing YubiKey 5 NFC on Windows 10
When downloading a Linux installer iso, the user is supposed to check the iso with sha or m5sum and compare the result against a checksum file, and then check the gpg signature of the checksum file.
If I understand it right, the checksum i… Continue reading Why aren’t installer isos gpg signed?
I have 2 YubiKeys and want one of them to be a backup. So let’s say I generated a key $KEY in my computer with an encryption subkey. I need to export the secret keys, because when moving them to the card they disappear, and then reimport t… Continue reading How to properly export and re-import GPG secret key and all its subkeys?
I’ve taken measures and thoughts on how to securely store and manage my key pair. In the process of it a few questions arose, which I’m not capable of answering yet. My key pair will be used to encrypt passwords and documents of banks, ins… Continue reading How can I store and manage my GPG key pair securely?
Considering using echo -n "passphrase" | gpg –batch –passphrase-fd 0 … inside of Bash script (which should mitigate leaking passphrase to process list given echo is a built-in command, right?).
I need to know passphrase to cr… Continue reading How to supply both passphrase and string to encrypt to GnuPG using command line?
Procedure:
Create keypair on a live distro, upload public key, move secret subkeys to Yubikey
Reboot into normal disto
Plug in yubikey, and then remove it
Run gpg –recv-keys HANDLE to receive public key
Run gpg –list-secret-keys.
The r… Continue reading I plugged in a yubikey containing pgp subkeys, now secret key stubs are present
I’m trying to debug a smartcard with the OpenPGP applet using gpg and scdaemon. In order to enable debugging for scdaemon, I created
~/.gnupg/gpgagent.conf:
disable-scdaemon
and ran:
/usr/lib/gnupg/scdaemon –daemon –debug-level advanced… Continue reading Instruct gpg-agent to use specific scdaemon – Starting scdaemon with debugging enabled