OpenPGP is generally used for encrypting and signing e-mails.

Are there any other use cases?

If yes, which cases?

  • $\begingroup$ Yes, besides integrity protection of software distribution also authentication or file transfer or backup file encryption are often used. $\endgroup$ – eckes Oct 17 '17 at 19:44

OpenPGP is used for file encryption and signing as well. Code signing is - by extension - also possible.

PGP is also sometimes used for (automated) application level protocol, for instance by ProtonMail. Although that is a mail protocol, it is still somewhat different from explicitly signature generation by the user.

OpenPGP has a rather modular message and key format. Reading through the spec may reveal some other use cases. The commercial implementation of encryption products by Symantic could be interesting as well.

Generally I do see more generic use of CMS (Cryptographic Message Syntax, also known as PKCS#7) within a Public Key Infrastructure (X.509 certificate based, as used in TLS/HTTPS, in which case it is known as PKIX).

CMS is used for XML signatures, government identification/authentication, mail, PDF's etc. It's even more extendable/flexible than OpenPGP which makes it possible to use it for more purposes.

Note that flexibility is kind of orthogonal to security. For instance, for signed SOAP it is possible to sign one part and process another because there are multiple ways to refer to the data.

  • $\begingroup$ You may want to note that automatic signature checking is a thing for most package managers on linux to confirm the authenticity of packages. $\endgroup$ – SEJPM Oct 17 '17 at 17:36
  • $\begingroup$ Nah, somebody will comment about it :P RPM (RedHat Package Manager) does seem to use PGP at least. So there it is, an example of file/code signing... $\endgroup$ – Maarten Bodewes Oct 17 '17 at 17:39

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.