Collaborate Disseminate
I wish to privately submit my public key (without it being sniffed on the internet). I found that I have 3 ways to connect to the keyserver securely:
https://<keyserver-url>
hkps://<keyserver-url> (HKP over TLS)
hkp://<keys… Continue reading Secure and private connection to GnuPG keyservers
I have a few PGP keys from long ago that I no longer use. I thought I had revoked them everywhere I had uploaded them but I just noticed I missed one keyserver. Unfortunately, I only have access to the revocation certificate for one of the… Continue reading Can I copy a PGP revocation to another server?
I have a backup routine via crontab on Ubuntu.
This routine generates a compressed tar.gz file and sends it to AWS S3.
But I want to encrypt these files and be able to decrypt them when necessary on another machine only if I have the priv… Continue reading Encrypt backup files and send them to AWS S3
I cross-posted this on the manjaro forums and on server fault. So far no answer, so trying here.
I have gnome-keyring running for sure, not sure it’s gnome-keyring or gpg-agent or ssh-agent related…
I use pass as command line password … Continue reading `pass` not asking for password anymore – gnome-keyring or gpg-agent related? How can I force password asking?
From what I understand, the idea of FIDO2 is to use symmetric cryptography, with secret key on the token, and public key on the server. When requesting to connect, the server uses the public key to generate a challenge that can only be sol… Continue reading Can one use a gpg smartcard to implement FIDO2?
GnuPG seems to have number of different ways to refer to a (sub)key(pair):
Key IDs
Fingerprints
Keygrips
Additionally, gpg –list-sigs seems to show hexadecimal identifiers for signatures and such as well. Sometimes such IDs are abbrev… Continue reading What is the difference between the many identifiers in GnuPG?
My boss wants to sign our binary. I need to tell him how he can create the signing key.
Most if not all sites I have seen about signing binaries suggest using GPG.
OK, so GPG per default has 2048. Their FAQ has several arguments why 3072 o… Continue reading gpg key size of 4096 and "the future is ECC"
Can you please hint me to the steps I need to verify a file’s signature (without connecting to the Internet) on command line using GnuPG, when I have the required files ready:
-installation file (eg the .exe file)
-the respective .asc sig… Continue reading How to verify a GPG file signature on Linux and Windows without connecting to the Internet?
It is my understanding that when file is signed with gpg the signature will provide 2 guarantees, a proof of ownership of the signature and the integrity of the signed data.
lets say I have a doc.txt I want to sigh, so I use:
gpg –outpu… Continue reading Directly signing a file with gpg or instead its checksum file?
I recently created a new gpg key just for the sake of learning the basics of public key encryption. Now, I’d like to revoke that test key so that I can go on using a more “permanent” key that is associated with my personal email account. … Continue reading How long does it take for a gpg key revoke certificate to propagate to all public key servers?