How does PGP Public and Private Keys work?
I recently tried to understand how PGP works:
I encrypt plaintext with my private key and if I send that encrypted text to others with my public key they can encrypt that with my public key?
Category Archives: PGP
how to trust a PGP smartcard
I understand the interest of using a PGP solution that is based on a OpenPGP smartcard, such as the Nitrokey Pro or similar. But then, how can I decide that I trust an OpenPGP smartcard?
If I send a plaintext e-mail using Gmail to somebody, including my PGP public key block, is that secure?
I’ve been trying to figure out “practical encryption” (AKA “PGP”) for many years. As far as I can tell, this is not fundamentally flawed:
I know Joe’s e-mail address: cool_joe@gmail.com.
I have a Gmail e-mail address: me_78@gmail.com.
I … Continue reading If I send a plaintext e-mail using Gmail to somebody, including my PGP public key block, is that secure?
How can any intelligent person believe that PGP, HTTPS or anything else we have today is secure, given history and logic?
It truly feels like we are living in an “afterworld”, long past the era when smart, intelligent, real men and women worked on things that really did matter. I’m talking about Enigma, Lorenz, Collossus, etc. The cipher machines and code-bre… Continue reading How can any intelligent person believe that PGP, HTTPS or anything else we have today is secure, given history and logic?
changing passphrase on gpg subkey
Is it possible to change passphrase on a subkey by:
gpg –edit-key sub_key_id passwd
Or will this change the passphrase on the master key as well?
(My idea stems from the fact that master key is used only for certification and thus onl… Continue reading changing passphrase on gpg subkey
How to reset a PGP key to work for an old user
We have a scenario where we are locked out of our PGP private key despite 100% certainty we are using the correct passphrase:
User1 created a PGP key pairing. The public key was sent to a third party who used it for encryption and then se… Continue reading How to reset a PGP key to work for an old user
How to list signatures of public key file without importing it to keyring?
How can I list all signatures made to a public OpenPGP key without importing it? A file with the public key is available.
I would like a similar output to gpg –list-signatures <key-id>, but instead of using the keyring, giving a fi… Continue reading How to list signatures of public key file without importing it to keyring?
RSA/RSA ./. RSA Legacy [migrated]
In my old pgp-List I see different Keys:
RSA/RSA 2048/2048
RSA 2048
I can’t get the RSA Legacy (just that with 1 RSA) into my GPG-Key-List (Kleopatra).
What can I do? I need them because I have documents to decode.
Powerful GPG collision attack spells the end for SHA-1
New research has heightened an already urgent call to abandon SHA-1, a cryptographic algorithm still used in many popular online services. Continue reading Powerful GPG collision attack spells the end for SHA-1
Is PGP for user authentication a good idea?
I am building a web site that provides user login. For that, I am currently researching good strategies for dealing with authentication.
How I’m doing it right now
My current concept is modeled after what seems to be the common consensus… Continue reading Is PGP for user authentication a good idea?