How to enumerate PGP keyring e-mails related to a specific ccTLD

I would like to enumerate all possible PGP e-mails related to North Korean top-level domain .kp
Few years ago I would have used theHarvester but I recently discovered that this useful tool doesn’t support PGP keyring search any more 🙁
If … Continue reading How to enumerate PGP keyring e-mails related to a specific ccTLD

What’s the difference between an executable signed with a Windows Digital Signature and one signed with PGP?

I’m trying to figure out how to establish trust in Windows executables that I download from the internet.
Some software that I download, such as KeepassXC, has a Windows Digital Signature, but they also provide a PGP signature that I can m… Continue reading What’s the difference between an executable signed with a Windows Digital Signature and one signed with PGP?

What is the correct way to create a backup copy of a PGP key pair?

I am using GnuPG 2.2.20 to create my key pair.
I have successfully created a key pair, now I want to create a backup copy in case of HDD failure.
Following the instruction here, I have tried
gpg –output backupkeys.pgp –armor –export-sec… Continue reading What is the correct way to create a backup copy of a PGP key pair?

Is there some way to verify that what I think I encrypted is actually what was encrypted when I don’t have the private key? (PGP)

Let’s say that Joe gives his PGP public key to Sue so that Sue can send Joe a secret message.
Sue opens her PGP/GPG program, types I’m in love with Joe! and encrypts the message with Joe’s public key.
The result is a blob that only Joe can… Continue reading Is there some way to verify that what I think I encrypted is actually what was encrypted when I don’t have the private key? (PGP)