Collaborate Disseminate
If I decided today get new subkeys because I simply want to rotate them or because they are about to expire, do I have to sign all keys of other people I signed with my old signing key again? And if I let my subkeys expire, does that have … Continue reading Subkey rotation and revocation
If I were to encrypt a folder with music files or movie files, or even only the files themselves separately, would that hurt the quality of the files? For example, if I encrypted a lossless audio file, and decrypted it right after, would i… Continue reading Does GPG encryption via subkey harm file quality?
I used .asc for ASCII armored (using –armor) encrypted messages.
But what extension should I use when encrypting file.tar.gz for example?
Continue reading What is the recommended file extension for GnuPG-encrypted files?
I want to use GPG as a master password storage (encrypt and push to online storage). This would require encrypted file being able to be decrypted on multiple machines.
Two computers comp1 and comp2 with differing operating systems
Comp1 h… Continue reading Using GPG as password manager
Once I used this guide to transfer my secret key to my smartphone, so today I did the same thing for transfering the secret key from my workstation to my laptop.
Yes, I could have used a USB key, or I could have just relied on the first s … Continue reading Why do I need –batch to import a secret key from a pipe?
The named hardware dongles (or at least several models of them) allow me to store PGP secret keys key.
Suppose I am using such a secret key to sign data (doesn’t matter what). As I understand the operation happens on the hardware itself an… Continue reading Conceptual question regarding signing with Yubikey/Solokey/Nitrokey using GnuPG
GPG novice here so please bear with me.
From what I understand, when you generate a keypair with GPG it will automatically create a subkey pair (sub, ssb).
If I wanted to give these to another party where they could encrypt messages with t… Continue reading GPG Questions About Exporting Subkeys to File
As discussed in this answer, gpg does not offer the capacity for subkeys to certify (eg. "sign") other keys, though there may be good reason why it should, and they do sign at least one key. As a practical matter, for those of u… Continue reading A solution for the absence of Certifying Subkeys in OpenPGP Certs
Currently I can use
$ gpg –card-status
to interact with smartcards that run the OpenPGP applet. Through trial-and-error, it seems that only the first card reader will interact with gpg. Using options that pass to scdaemon seem to be depr… Continue reading GnuPG – connecting to specific card reader when multiple reader available
This is a broader question but here a concrete example:
From apache.org:
File hashes are used to check that a file has been downloaded correctly. They do not provide any guarantees as to the authenticity of the file.
I don’t understand t… Continue reading Is a SHA checksum enough to verify integrity and authenticity?