Category Archives: PGP

How does validating the PGP signature of a downloaded executable against the publisher’s public key show that the binary has not been tampered with?

Posted on by

Websites that host downloadable executables often provide measures to confirm the integrity of the data that is available to download. Such measures include:

Hosting the website under HTTPS;
Providing the SHA-256 sum of the downloaded bin… Continue reading How does validating the PGP signature of a downloaded executable against the publisher’s public key show that the binary has not been tampered with?→

Android ROMs whose releases are cryptographically signed (gpg) [closed]

Posted on by

What is the list of popular Android ROMs whose releases are cryptographically signed?
Today I learned that LineageOS (arguably the most popular open-source Android ROM) does not cryptographically sign its releases with PGP. As such, they d… Continue reading Android ROMs whose releases are cryptographically signed (gpg) [closed]→

When changing a PGP passphrase, does it only affect the same key on the other machine?

Posted on by

If I change the password of my PGP key (I use it to sign Git commit) on Computer A, does it affect the same PGP key that I have on the Computer B?
Will I still be able to use the PGP key on Computer B with the old passphrase?

Continue reading When changing a PGP passphrase, does it only affect the same key on the other machine?→