Collaborate Disseminate
I added a second signing subkey to my GPG key, which I then moved to a Yubikey:
/home/user/.gnupg/pubring.kbx
—————————-
sec# ed25519/ABCDECAD 2023-11-12 [SC]
…(fingerprint omitted)…
uid [ultimate] Joos… Continue reading Using Gnupg with either a smartcard key or a local key
Linux pass is a program that lets you store passwords in regular text files, which you it then encrypts with your GPG key.
I’m confused at how this is considered secure. The GPG key has a passphrase but looks like it normally gets cached i… Continue reading What exactly is the security model of pass?
You can try this one for yourself…
Generate a new GPG keypair.
Create a large junk file. Maybe 5G or 10G in size.
Encrypt the file and use the new key as the recipient.
Delete the privkey which will render decryption impossible.
Try and… Continue reading Why does GPG seem to parse the whole encrypted file when it can’t find the decryption key?
I started reading on apt and the security changes to always use GPG signing keys,
but further saw that it by default uses all configured GPG signing keys,
this seems like a small but unecessary loophole.
It looks to be standard for custom … Continue reading Restricting ubuntu signing keys?
As a hobby project I’m thinking about how to write a secure chat where even all metadata are encrypted so that it is impossible to leak any (meta) information by design.
My basic idea is right now:
Each chat is split in blocks identified b… Continue reading What is the best way to encrypt asymmetric metadata?
Given a situation where I want to be anonymous by default, how can I use GPG to prove that I’m the original author once, on-demand, and for a specific user?
Continue reading Prove The Identity of Author Using GPG On Demand
Sometime back I installed GPG and been using it to encrypt files and text.
Command used to encrypt:
gpg -c file.zip > file.zip.gpg
Command used to decrypt:
gpg -d file.zip.gpg > file.zip
Till now, I didn’t pay attention to which ke… Continue reading GPG: Which key is gpg exactly using for encrypting and decrypting? [migrated]
I have two private keys with the same UIDs in GnuPG, and would like to use the newer one in preference to the older.
When no key is specified, the default-key option takes care of this, but several of the Debian tools explicitly specify my… Continue reading Preference of private keys when selecting by UID
I came across a PGP public key that seems invalid. The key is a secp256k1 public key that supported by GPG. In fact, GPG allows importing that key even if it has an invalid secp256k1 public key inside.
Running –list-packets on the key sho… Continue reading GPG allows importing an invalid secp256k1 public key
Earlier today, I was using gpg to generate keys for work. While doing so, I noticed:
We need to generate a lot of random bytes. It is a good idea to
perform some other action (type on the keyboard, move the mouse,
utilize the disks) durin… Continue reading How does user activity affect entropy generation process in GnuPG?