GNU Privacy Guard (GnuPG or GPG) is OpenPGP compliant FOSS alternative to PGP encryption software.

learn more… | top users | synonyms

12
votes
3answers
5k views

gpg not enough entropy!

SO I've got a ton of processes running in the background to try and get enough entropy but I am still failing. **We need to generate a lot of random bytes. It is a good idea to perform some other ...
12
votes
4answers
4k views

Using PGP keys for SSH

I use a 4096 byte RSA PGP key; since SSH also uses the RSA standard, is it at all possible to use the PGP key as an SSH key without installing additional software on the server (and as little as ...
10
votes
2answers
3k views

GPG - why am I encrypting with subkey instead of primary key?

When encrypting a file to send to a collaborator, I see this message: gpg: using subkey XXXX instead of primary key YYYY Why would that be? I've noticed that when they send me an encrypted file, ...
8
votes
5answers
26k views

Why does apt-get update tell me to run apt-get update?

So I have this going on: # apt-get update Get:1 http://ftp.us.debian.org etch Release.gpg [1032B] Hit http://ftp.us.debian.org etch Release ...
8
votes
4answers
3k views

Validating signature trust with gpg?

We would like to use gpg signatures to verify some aspects of our system configuration management tools. Additionally, we would like to use a "trust" model where individual sysadmin keys are signed ...
6
votes
3answers
212 views

General GnuPG tips

Prompted by the recent vulnerability in SHA-1 and admonitions to begin the process of moving away from that hash function, I'm playing around with GnuPG again. I was just wondering how other folks ...
5
votes
3answers
253 views

PGP: on the web, what if everything was tampered?

I am trying to wrap my head around how Public Key Cryptography can really work in a secure manner. From what I can gather, you go to example.com and download their PGP/GPG Public Key and add it to ...
5
votes
3answers
2k views

gpg --gen-key hangs at gaining enough entropy on centos 6

Trying to generate a key for a server. gpg --gen-key We need to generate a lot of random bytes. It is a good idea to perform some other action (type on the keyboard, move the mouse, utilize ...
5
votes
3answers
261 views

GPG/PGP Signatures & Encryption - An Academic Security Question

Digital Signatures Digital signatures take place whereby you apply your private key to a particular message (or the hash of that message in most cases). The recipient then takes your public key - ...
5
votes
1answer
333 views

Mailing list + PGP/GPG support

I would like to create such mailing list where every contributor must sign his/her messages with PGP/GPG, otherwise mailing list software would block unsigned message. All PGP/GPG public keys of ...
4
votes
4answers
2k views

gpg: what do I need to backup?

What are the critical files I need to backup from gpg? I guess my private key would qualify of course... but what else?
4
votes
1answer
584 views

How can I decrypt multiple files in a directory with gpg?

I have a directory with multiple .gpg files, all encrypted with the same passphrase. How can I decrypt them all without entering the passphrase over and over?
4
votes
1answer
106 views

GPG Encryption: Am I using the right keys?

I have a process to encrypt a bank file using OpenPGP (via BouncyCastle) and SFTP the file to the bank for financial processing. They sent me a public key file, which I examined the key using the ...
4
votes
1answer
238 views

Using gpg-agent over ssh

I'm having a problem using the gpg-agent over ssh via a single command line. Here is my configuration : Server A : triggering the command via ssh. ssh user@serverB "sudo -E /path/to/script.sh" ...
3
votes
2answers
734 views

GPG encrypt and decrypt with ssh-agent

I use ssh regularly and have ssh-agent set up. How can I use ssh keys to gpg-encrypt a file? Edit: It seems that this is impossible. Why? ssh can encrypt traffic, so why not also files?
3
votes
1answer
72 views

How to prevent gpg from creating .gnupg directory in user's home directory

I'm trying to run use the gpg tool to encrypt and decrypt files and I would like to know if it's possible to run this tool without it changing a user's global state. Specifically, running gpg for the ...
3
votes
1answer
45 views

Should the GPG key of a debian repository be shared among its maintainers?

I'm following this tutorial to set up a debian repository https://wiki.debian.org/SettingUpSignedAptRepositoryWithReprepro This repository will be managed by me and my colleagues. We want to sign ...
2
votes
9answers
2k views

Output/pipe ntbackup directly to GPG

Currently, we can perform and encrypt a Windows backup with ntbackup and GPG in 2 separate steps in a batch script, as below: ntbackup backup "@selection_file.bks" /f "backup_file.bak" gpg ...
2
votes
2answers
1k views

How does changing a GPG encryption key's passphrase work?

I know that I can do (edit: fixed this; I'm interested in gpg NOT openssh) gpg --edit-key ...to change my passphrase for my key, but I'm not sure what this means. If I'm encrypting data on box A ...
2
votes
2answers
882 views

Validating GPG key signature authenticity

I'm trying to validate the integrity of my httpd-2.2.17.tar.gz image. I followed the steps written in the following pages: http://httpd.apache.org/download.cgi#verify ...
2
votes
4answers
1k views

user GPG key not able to be used by SUDO

I created a script that runs duplicity to backup files I have on a VPS,and uses a GPG key that I generated as a user. When I try and run this script as SUDO I get: GPGError: GPG Failed, see log ...
2
votes
2answers
2k views

How can I use Duplicity with a symmetric key?

I am using duplicity to perform backups on my server. Right now duplicity is encrypting the backup using a GPG public-private key system. I would prefer to encrypt the backup files using just a ...
2
votes
1answer
1k views

gpg key and what is it for? GPG key retrieval failed error

What is a gpg key and why do i need it? I get this nagging error when i install a fresh centos vps machine: GPG key retrieval failed: [Errno 5] OSError: [Errno 2] No such file or directory: ...
2
votes
2answers
844 views

Different results from GnuPG and OpenSSL when using AES256 encryption

Text: apple Pass: password openssl aes-256-cbc -e -a -in apple.txt Output: U2FsdGVkX1/sqDrVkgk/7dKiCfLW+1/bgvRT/YAopJQ= gpg -c --cipher-algo AES256 apple.txt Output: ...
2
votes
1answer
100 views

Are PGP Universal keys compatible with the openPGP standard?

I'm having issues importing a PGP Universal Public key on a system that supports openPGP. Are these two different standards/formats? Should they be compatible?
2
votes
1answer
719 views

Duplicity restore reports “Invalid SSH password” when I'm using a private key for connection

I'm testing the restoration of a backup with duplicity 0.6.15. I can login to my backup server just fine using ssh and sftp using the following commands and my private key: ...sftp root@client:~# ...
2
votes
1answer
327 views

Crypto key storage and recovery — best practices?

We have a bunch of SSH, GPG, SSL and other private keys that, obviously: must only be available to the smallest number of people possible can't be "lost" if a hard drive dies or the building burns ...
2
votes
1answer
479 views

Encrypting all incoming mail with public pgp key per user

What I'm trying to do is be able to take all incoming messages and encrypt them with that users public pgp key. I'm running postfix + courier etc. http://flurdy.com/docs/postfix/ I've read through ...
1
vote
2answers
431 views

Can I use the same password for TrueCrypt as what I used when creating my Public Key?

I created and published a Public Key using gpg. I am now creating a TrueCrypt volume and wish to use the same password. Does knowing my public key, in this instance, make my TrueCrypt volume become ...
1
vote
3answers
2k views

Best PGP/GPG Encrypt/Decrypt Script

Is there are good default python or simple shell script that I can use to encrypt and decrypt files via PGP/GPG? I would be running this script every 5 minutes.
1
vote
1answer
351 views

Encrypting files with different public keys

How can I encrypt three different files, each with its own public key? For instance, there are three companies (X, Y and Z). Each company sends me its own public key. I want to send a file to each ...
1
vote
1answer
220 views

Host GPG / PGP keys online?

Is there any way for me to setup my GPG key online so that they could be used to verify my signature? I mean, I own "thezombie.net", so I might as well host my key there, no? And locally, what do I ...
1
vote
1answer
297 views

PGP Encryption Proxy for Mail Server [closed]

I have a friend who is located in a part of the world that makes email encryption prudent for them. While I recommended OpenPGP, my friend thinks that it would have too high of a setup requirement for ...
1
vote
2answers
51 views

How to verify an imported GPG key

I'm new to this PGP thing. Here are my questions: Verification When I do this, I'm given the message "This key is not certified with a trusted signature". Is there anyway to make it trusted and ...
1
vote
2answers
488 views

What does this gpg warning mean?

When I run my backup script as me, it works fine. When I run it as root, it still works, but I get this warning: gpg: WARNING: unsafe ownership on configuration file `/home/jason/.gnupg/gpg.conf' ...
1
vote
2answers
559 views

what are the minimal user permissions required to scp files to a remote server?

I want to setup a cron job to transfer data from one host (A) to another (B). My understanding so far is that I will have to create a user on machine B, so that scp can copy the files to a folder in ...
1
vote
1answer
371 views

The generation method of the random number at the time of the key pair making in gpg

in gpg --key-gen following error occured. Not enough random bytes available. Please do some other work to give the OS a chance to collect more entropy! (Need 300 more bytes) What's wrong?
1
vote
1answer
23 views

apt warnings with HP SDR/MCP repo on Ubuntu

I'm using the HP SDR system (MCP specifically) for Linux packages to manage the HP hardware RAID, iLo, etc. The kernel drivers for the hardware are upstream, so these are just management utilities. ...
1
vote
1answer
165 views

How do you enable the storing of GPG / PGP keys in OpenLDAP

I've searched high and low trying to find a method that allows me to store GPG keys for existing users in an OpenLDAP server. The only relevant how-to I've found is this. However, I'm unable to get ...
1
vote
3answers
886 views

gpg-agent says agent exists, but gpg says agent doesn't exist?

I'm struggling with some issues while scripting gpg with bash on a Debian 6.0.6 box. I have a script that does a batch of operations and wants to make sure that a gpg-agent is available before it ...
1
vote
1answer
201 views

Reliable PGP / GnuPG decryption for Mac OSX Mail

I'm developing a web app which emails encrypted data (from a web form) to a client who uses Macs/OSX exclusively in their office. I'd like to know: Is there are any reliable solutions for PGP / GnuPG ...
1
vote
1answer
136 views

Msysgit GPG error during commit signing

I'm getting the following error on Windows with msysgit. Doesn't matter whether or not I am doing it from the command prompt or the BASH bundled with Git: gpg: error loading `iconv.dll': The ...
1
vote
1answer
494 views

Duplicity fails on Too many open files?

I'm using Duply on top of Duplicity but apparently it fails (after 10 min on 100% cpu) on gnupg --- Start running command BKP 21:10:58.679 --- NcFTP version is 3.2.2 Reading globbing filelist ...
1
vote
1answer
108 views

decrypt gpg file with specific key ?? (OS = WindowsXp)

please how i can decrypt file with specific key in batch file mode ? for example i want to :- decrypt file X.txt with key X.pub
1
vote
1answer
75 views

Public key read-only storage

We use GnuPG for encrypting data, which we upload to a central storage. The public key is being stored on a web-server, and the encrypting script re-downloads it if it's changed. This was done in ...
1
vote
0answers
72 views

Bad RPM Signatures

I'm trying to set up a repo that contains both CentOS 6.4 and 5.9 packages. The machine itself is 6.4. I've created a GPG key and have been able to sign my 6.4 packages no problem. When I create them ...
1
vote
2answers
1k views

Debian - “WARNING: untrusted versions of the following packages will be installed!”

When i try to install or update any packages I get: Untrusted packages could compromise your system's security. You should only proceed with the installation if you are certain that this is what you ...
1
vote
1answer
99 views

List all gpg encrypted files that include a given recipient

An employee will be leaving our company, and we have a directory tree containing a number of files, each holding a password for a specific service, and each file is encrypted to those who require it. ...
1
vote
0answers
332 views

How do I import a RSA SSH key into GPG as the _primary_ private key?

I currently have a SSH key that I've used for a while and I'd like to start using GnuPG with a new keyring. However, given that I've used my key for ages, I would like to still use that key in GPG as ...
1
vote
1answer
179 views

encrypt files by external GPG public key tools?

how i can encrypt files by eternal GPG public key ? for example user A generate public key A.pub and sent to me A.pub and you need from me to encrypt file by a.pub and sent it to you how i can do ...