Collaborate Disseminate
GPG novice here so please bear with me.
From what I understand, when you generate a keypair with GPG it will automatically create a subkey pair (sub, ssb).
If I wanted to give these to another party where they could encrypt messages with t… Continue reading GPG Questions About Exporting Subkeys to File
I’m building a system that generates PGP key and store private key in secret vault. One thing I’m not fully understanding is the need for passphrase.
I can generate a random passphrase during the key generation and then store it in the sec… Continue reading Is PGP passphrase necessary if I store private key and passphrase in the same place?
Good morning, my goal is to parse pgp keys but I am facing two problems.
I don’t know how pgp keys are encoded (for starters I deal with pgp keys generated by Rsa only)
and nor do I know how to read the value of its main parameters
Let’s assume an insecure communication channel.
Alice makes a public key (we assume is PGP, but any asymmetric crypto could be used unless it doesn’t have fingerprints for checking) and sends it to Bob.
Then, Alice sends to Bob a photo of … Continue reading Can we check fingerprint with photos?
From my understanding, PGP supports the generation of a signature from plaintext using the sender’s private key. Both the plaintext and the signature are encrypted using the session/symmetric key, and the session/symmetric key is encrypted… Continue reading Why does PGP create a signature from plaintext?
Is there a standard format for storing/exchanging encrypted data along with the key needed to decrypt it (data is encrypted with a single use symmetric key and the symmetric key itself is encrypted with asymmetric key for the receiver)?
I have a few PGP keys from long ago that I no longer use. I thought I had revoked them everywhere I had uploaded them but I just noticed I missed one keyserver. Unfortunately, I only have access to the revocation certificate for one of the… Continue reading Can I copy a PGP revocation to another server?
I don’t have an education in computer science, I’ve just become interested in information security and encryption lately.
I’m struggling to understand why encrypted web browsing using HTTPS has been so widely adopted but at the same time… Continue reading HTTPS is widely adopted, why isn’t encrypted e-mail as popular?
I’ve experimented a lot with GPG the last couple days and one issue persists:
Someone signed my GPG key and published it to a keyserver X. I can see on the webpage that his signature is shown under my key, so that worked. But my local P… Continue reading GPG issues with sending and receiving keys
Can you please hint me to the steps I need to verify a file’s signature (without connecting to the Internet) on command line using GnuPG, when I have the required files ready:
-installation file (eg the .exe file)
-the respective .asc sig… Continue reading How to verify a GPG file signature on Linux and Windows without connecting to the Internet?