Collaborate Disseminate
We are working on a school project that handles sensitive information (a password manager) that transit between a client which encrypt the data and a server which knows nothing about the data. In order to get the data, the cl… Continue reading Securely transport secret token so it can not be used even if snooped?
My question is about openPGP and the GnuPG implementation in particular.
The web of trust idea seems to have your public keys signed by those who meticulously verify it. So when someone does this verifications, he could send… Continue reading Is there a maximum for the number of certifications on a PGP public key
When my OpenPGP encryption key expires, and I want to generate a new one, can I keep the old one on my Yubikey 4, or will I have to reencrypt all of my encrypted files/emails with the new key? If I do have to reencrypt every… Continue reading Does Yubikey 4 support multiple OpenPGP encryption keys or only one?
I’m new to OpenPGP, GnuPG, and the concept of public-private key pairs. I have some questions in my mind:
Is it necessary for me to have a PGP (or an OpenPGP) key? I’m an Android programmer, and an ordinary Linux user.
If y… Continue reading Do I need a PGP key?
I have a Yubikey 4. On a Windows 7 64 bit machine I installed Gpg4Win which includes GnugPG. I was able to successfully import public keys. I plugged in the Yubikey 4 and Windows correctly identified and installed the proper drivers.
Ho… Continue reading Windows GnuPG – GPG – Smart Card Status – Not Detecting Yubikey
I have created an offline MASTER key along with sub keys. The sub keys were sent to the Yubikey smartcard via the gpg ‘keytocard’. The gpg –card-status command correctly identifies the information showing the masterkey id … Continue reading GPG with Yubikey smart card – smart card doesn’t need to be plugged in!
I have created an offline MASTER key along with sub keys. The sub keys were sent to the Yubikey smartcard via the gpg ‘keytocard’. The gpg –card-status command correctly identifies the information showing the masterkey id … Continue reading GPG with Yubikey smart card – smart card doesn’t need to be plugged in!
I almost feel stupid for asking this, but I have some trouble understanding subkeys, and what to do if a subkey gets compromised.
Let’s say my “main” private key is used for certification only. I created separate subkeys for… Continue reading What are the consequences of revoking OpenPGP subkeys and generating new ones?
This commit in my GiHub repo is signed by a key I don’t recognize: https://github.com/jonathancross/jc-docs/pull/2/commits/124672699991af75dd2454831670758f08bc74ab
What is going on here?
Is it possible to use an exported OpenPGP private key to sign a file via OpenSSL?
I’ve tried this:
$ gpg2 –export-secret-keys –no-armor 84E2C2E5 > secret.key
$ openssl rsautl -sign -in testfile -inkey secret.key -out t… Continue reading Is it possilbe to use an OpenPGP private key to sign a file via OpenSSL?