GNU Privacy Guard (GnuPG or GPG) is OpenPGP compliant FOSS alternative to PGP encryption software.
12
votes
4answers
3k views
Using PGP keys for SSH
I use a 4096 byte RSA PGP key; since SSH also uses the RSA standard, is it at all possible to use the PGP key as an SSH key without installing additional software on the server (and as little as ...
7
votes
5answers
24k views
Why does apt-get update tell me to run apt-get update?
So I have this going on:
# apt-get update
Get:1 http://ftp.us.debian.org etch Release.gpg [1032B]
Hit http://ftp.us.debian.org etch Release ...
6
votes
2answers
1k views
GPG - why am I encrypting with subkey instead of primary key?
When encrypting a file to send to a collaborator, I see this message:
gpg: using subkey XXXX instead of primary key YYYY
Why would that be? I've noticed that when they send me an encrypted file, ...
6
votes
3answers
196 views
General GnuPG tips
Prompted by the recent vulnerability in SHA-1 and admonitions to begin the process of moving away from that hash function, I'm playing around with GnuPG again. I was just wondering how other folks ...
5
votes
3answers
222 views
PGP: on the web, what if everything was tampered?
I am trying to wrap my head around how Public Key Cryptography can really work in a secure manner.
From what I can gather, you go to example.com and download their PGP/GPG Public Key and add it to ...
5
votes
3answers
235 views
GPG/PGP Signatures & Encryption - An Academic Security Question
Digital Signatures
Digital signatures take place whereby you apply your private key to a particular message (or the hash of that message in most cases).
The recipient then takes your public key - ...
5
votes
3answers
2k views
gpg not enough entropy!
SO I've got a ton of processes running in the background to try and get enough entropy but I am still failing.
**We need to generate a lot of random bytes. It is a good idea to perform
some other ...
5
votes
1answer
135 views
Mailing list + PGP/GPG support
I would like to create such mailing list where every contributor must sign his/her messages with PGP/GPG, otherwise mailing list software would block unsigned message.
All PGP/GPG public keys of ...
5
votes
3answers
2k views
Validating signature trust with gpg?
We would like to use gpg signatures to verify some aspects of our
system configuration management tools. Additionally, we would like to
use a "trust" model where individual sysadmin keys are signed ...
4
votes
4answers
1k views
gpg: what do I need to backup?
What are the critical files I need to backup from gpg? I guess my private key would qualify of course... but what else?
4
votes
1answer
86 views
How can I decrypt multiple files in a directory with gpg?
I have a directory with multiple .gpg files, all encrypted with the same passphrase. How can I decrypt them all without entering the passphrase over and over?
3
votes
1answer
589 views
GPG encrypt and decrypt with ssh-agent
I use ssh regularly and have ssh-agent set up.
How can I use ssh keys to gpg-encrypt a file?
Edit: It seems that this is impossible. Why? ssh can encrypt traffic, so why not also files?
2
votes
9answers
1k views
Output/pipe ntbackup directly to GPG
Currently, we can perform and encrypt a Windows backup with ntbackup and GPG in 2 separate steps in a batch script, as below:
ntbackup backup "@selection_file.bks" /f "backup_file.bak"
gpg ...
2
votes
2answers
684 views
Validating GPG key signature authenticity
I'm trying to validate the integrity of my httpd-2.2.17.tar.gz image.
I followed the steps written in the following pages:
http://httpd.apache.org/download.cgi#verify
...
2
votes
3answers
466 views
gpg --gen-key hangs at gaining enough entropy on centos 6
Trying to generate a key for a server.
gpg --gen-key
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize ...
2
votes
4answers
1k views
user GPG key not able to be used by SUDO
I created a script that runs duplicity to backup files I have on a VPS,and uses a GPG key that I generated as a user.
When I try and run this script as SUDO I get:
GPGError: GPG Failed, see log ...
2
votes
1answer
579 views
gpg key and what is it for? GPG key retrieval failed error
What is a gpg key and why do i need it?
I get this nagging error when i install a fresh centos vps machine:
GPG key retrieval failed: [Errno 5] OSError: [Errno 2] No such file or directory: ...
2
votes
2answers
1k views
How can I use Duplicity with a symmetric key?
I am using duplicity to perform backups on my server. Right now duplicity is encrypting the backup using a GPG public-private key system. I would prefer to encrypt the backup files using just a ...
2
votes
2answers
480 views
Different results from GnuPG and OpenSSL when using AES256 encryption
Text: apple
Pass: password
openssl aes-256-cbc -e -a -in apple.txt
Output: U2FsdGVkX1/sqDrVkgk/7dKiCfLW+1/bgvRT/YAopJQ=
gpg -c --cipher-algo AES256 apple.txt
Output: ...
2
votes
1answer
524 views
Duplicity restore reports “Invalid SSH password” when I'm using a private key for connection
I'm testing the restoration of a backup with duplicity 0.6.15.
I can login to my backup server just fine using ssh and sftp using the following commands and my private key:
...sftp
root@client:~# ...
1
vote
2answers
410 views
How does changing a GPG encryption key's passphrase work?
I know that I can do (edit: fixed this; I'm interested in gpg NOT openssh)
gpg --edit-key
...to change my passphrase for my key, but I'm not sure what this means.
If I'm encrypting data on box A ...
1
vote
2answers
324 views
Can I use the same password for TrueCrypt as what I used when creating my Public Key?
I created and published a Public Key using gpg.
I am now creating a TrueCrypt volume and wish to use the same password. Does knowing my public key, in this instance, make my TrueCrypt volume become ...
1
vote
3answers
2k views
Best PGP/GPG Encrypt/Decrypt Script
Is there are good default python or simple shell script that I can use to encrypt and decrypt files via PGP/GPG? I would be running this script every 5 minutes.
1
vote
1answer
195 views
Encrypting files with different public keys
How can I encrypt three different files, each with its own public key?
For instance, there are three companies (X, Y and Z). Each company sends me its own public key.
I want to send a file to each ...
1
vote
1answer
183 views
Host GPG / PGP keys online?
Is there any way for me to setup my GPG key online so that they could be used to verify my signature?
I mean, I own "thezombie.net", so I might as well host my key there, no?
And locally, what do I ...
1
vote
1answer
182 views
PGP Encryption Proxy for Mail Server [closed]
I have a friend who is located in a part of the world that makes email encryption prudent for them. While I recommended OpenPGP, my friend thinks that it would have too high of a setup requirement for ...
1
vote
2answers
325 views
What does this gpg warning mean?
When I run my backup script as me, it works fine. When I run it as root, it still works, but I get this warning:
gpg: WARNING: unsafe ownership on configuration file `/home/jason/.gnupg/gpg.conf'
...
1
vote
1answer
354 views
The generation method of the random number at the time of the key pair making in gpg
in gpg --key-gen
following error occured.
Not enough random bytes available.
Please do some other work to give the OS a chance to collect more
entropy!
(Need 300 more bytes)
What's wrong?
1
vote
2answers
440 views
what are the minimal user permissions required to scp files to a remote server?
I want to setup a cron job to transfer data from one host (A) to another (B).
My understanding so far is that I will have to create a user on machine B, so that scp can copy the files to a folder in ...
1
vote
3answers
167 views
gpg-agent says agent exists, but gpg says agent doesn't exist?
I'm struggling with some issues while scripting gpg with bash on a Debian 6.0.6 box. I have a script that does a batch of operations and wants to make sure that a gpg-agent is available before it ...
1
vote
1answer
151 views
Reliable PGP / GnuPG decryption for Mac OSX Mail
I'm developing a web app which emails encrypted data (from a web form) to a client who uses Macs/OSX exclusively in their office.
I'd like to know: Is there are any reliable solutions for PGP / GnuPG ...
1
vote
1answer
77 views
Msysgit GPG error during commit signing
I'm getting the following error on Windows with msysgit. Doesn't matter whether or not I am doing it from the command prompt or the BASH bundled with Git:
gpg: error loading `iconv.dll': The ...
1
vote
1answer
305 views
Duplicity fails on Too many open files?
I'm using Duply on top of Duplicity but apparently it fails (after 10 min on 100% cpu) on gnupg
--- Start running command BKP 21:10:58.679 ---
NcFTP version is 3.2.2
Reading globbing filelist ...
1
vote
1answer
285 views
Crypto key storage and recovery — best practices?
We have a bunch of SSH, GPG, SSL and other private keys that, obviously:
must only be available to the smallest number of people possible
can't be "lost" if a hard drive dies or the building burns ...
1
vote
1answer
97 views
decrypt gpg file with specific key ?? (OS = WindowsXp)
please how i can decrypt file with specific key in batch file mode ?
for example i want to :-
decrypt file X.txt with key X.pub
1
vote
1answer
73 views
Public key read-only storage
We use GnuPG for encrypting data, which we upload to a central storage.
The public key is being stored on a web-server, and the encrypting script re-downloads it if it's changed. This was done in ...
1
vote
1answer
371 views
Debian - “WARNING: untrusted versions of the following packages will be installed!”
When i try to install or update any packages I get:
Untrusted packages could compromise your system's security.
You should only proceed with the installation if you are certain that
this is what you ...
1
vote
0answers
55 views
Are PGP Universal keys compatible with the openPGP standard?
I'm having issues importing a PGP Universal Public key on a system that supports openPGP. Are these two different standards/formats? Should they be compatible?
1
vote
1answer
63 views
List all gpg encrypted files that include a given recipient
An employee will be leaving our company, and we have a directory tree containing a number of files, each holding a password for a specific service, and each file is encrypted to those who require it.
...
1
vote
0answers
203 views
How do I import a RSA SSH key into GPG as the _primary_ private key?
I currently have a SSH key that I've used for a while and I'd like to start using GnuPG with a new keyring. However, given that I've used my key for ages, I would like to still use that key in GPG as ...
1
vote
1answer
143 views
encrypt files by external GPG public key tools?
how i can encrypt files by eternal GPG public key ?
for example user A generate public key A.pub and sent to me A.pub and you need from me to encrypt file by a.pub and sent it to you
how i can do ...
1
vote
2answers
394 views
RPM issues after signing JDK 1.6 64-bit
I'm trying to sign the Java JDK 1.6u21 64-bit RPM on CentOS 5.5 for use with Spacewalk and I'm running into problems. It seems to sign okay, but then when I check the signature it seems to be missing ...
1
vote
1answer
300 views
GPG key server for internal network
I'm looking for some software that works just like the public key servers but will only serve keys for a local network, hence the server needs to not sync with the public network.
Can anyone suggest ...
0
votes
2answers
115 views
Need convincing PGP public key needs to be changed
So the situation is thus. We're working with another company and as part of some file distribution processing we have to encrypt some files before they are sent.
The company in question sent us ...
0
votes
3answers
2k views
Suppress GPG “Reading passphrase from file descriptor 0” message
Simply, how can I make GPG not print that message? Here are the commands I'm using:
echo "test input" > test.in
echo "test" | gpg -q -c --passphrase-fd 0 --output test.enc --yes --force-mdc ...
0
votes
5answers
543 views
Automatically encrypting incoming email
I have a small website and would like to encrypt incoming email using gpg. Is there a way to force sendmail to check email and encrypt it if its not already encrypted?
I'm using GPG on a linux ...
0
votes
1answer
676 views
Backups with rsync and gpg
I've found plenty of posts online about this but none that actually answer my question.
I'm trying to back up my system in such a way that the files end up encrypted on my backup drive. Here's a ...
0
votes
2answers
161 views
Debian / libcurl error using gpg
I am trying to register a Key with gpg to upgrade my debian system with aptitude.
System is Debian 4.0 32bit.
Unfortunately I am getting an error. This is waht I try:
gpg --keyserver pgp.mit.edu ...
0
votes
1answer
373 views
GPG doesn't work in crontab
I have the following script:
#!/bin/sh -e
PWD="supersecretpassword"
file="/backup/2do/example.txt"
echo before
echo $PWD | gpg --passphrase-fd 0 -c $file
echo after
The scripts works perfectly fine ...
0
votes
1answer
513 views
How to install gpg keys from behind a firewall?
I understand that keyservers are using the port 11371 but in many cases you are not allowed to connect to this port and you cannot add
There a many cases when you cannot modify the firewall ...
