Collaborate Disseminate
Hello everyone,
I just newly get to know the existence of GPG keychain. After error and try I now understand most of the functions of this software . However the two checkbox in this picture remains unclear.
What known is… Continue reading What does the ‘Sign’ and "Add to recipients’ means in GPG keychain?
If I encrypt my Email with PGP will all of my emails will be encrypted or only that ones that people send to me using my PGP key?
If I register on Facebook or Dropbox and they send me an email: “Activate your account” this … Continue reading Does PGP encrypt all messages or only that one send with PGP?
I’m trying to decrypt a file that was signed with my ssb key stored on my Yubikey, but I get the following errors:
x>gpg -vv –decrypt encrypted.gpg
gpg: armor: BEGIN PGP MESSAGE
# off=0 ctb=XX tag=1 hlen=3 plen=XXX
:pubkey enc packet:… Continue reading GnuPG "public key decryption failed: Invalid ID" using Yubikey Smartcard
I wanted to achieve the following mechanism to encrypt a document
each person in a group of N (user a, b, c…)has her own key;
user a and user b somehow decided to encrypt document M, and they can read M in plaintext, and … Continue reading Is there any mechanism that using multiple keys encrypt and decrypt a shared document?
I have empty JavaCOS A40 smartcard and want make it a PKCS PKI card.
I’m going to use it as ssh key and for e-contracts signing. Russia don’t provide smartcard-based e-id for citizens like EU countries do. Commercial e-signa… Continue reading OpenSC fails to connect javacard with PKCS applet [migrated]
I am using python-gpg to sign / encrypt / verify / decrypt a tar archive.
code snippet –
# import private key into gnupghome
_pvtKey = urllib2.urlopen(_certurl)
_pv_data = _pvtKey.read()
gpg.import_keys(_pv_data)
…..
str… Continue reading python-gnupg sign & verify a tar archive
A good practice is verifying software with a team signing key, to ensure the software hasn’t been tampered with.
The problem
When I verify a download, I usually stumble upon the following message:
$ gpg –verify keepassxc-… Continue reading Should I sign software release keys with my own key?
I have a set of objectives for PGP certificate uses, and have developed what what I think is a reasonable plan as a solution. What I’m wondering is:
Have I overlooked something important that requires, or strongly suggests, a change in my… Continue reading Multiple PGP key practices for code signing, GitHub, and email
My current GnuPG key schema is the one recommended in OpenPGP Best Practices and many other sources. It consists in one offline master key plus a set of sub-keys for day-to-day operations stored inside an smart card.
I find the common procedure of key signing parties a little awkward:
Person A presents the passport and a fingerprint “This is my key!”. Person B checks the passports and decides a level of trust to sign the key at home.
No… Continue reading Why do people check the passport on key signing events?