Questions tagged [pgp]

The OpenPGP encrypted data format (RFC 4880), and its implementations PGP and GnuPG.

Filter by
Sorted by
Tagged with
0
votes
1answer
43 views

Authenticated, Quantum-resistant GPG2?

GPG2 does not provide authentication. It still uses SHA-1 by default. It does not seem to get any stronger as time goes by. If one were to pass a randomly-generated symmetric key (from a TRNG) over ...
0
votes
0answers
6 views

How can I tell what version of PGP a public key uses? [migrated]

Let's say I have various keys, some adhering to PGP 5, others to PGP 2, and maybe some were made with the original PGP. How should I go about discerning this?
0
votes
1answer
39 views

Why should I export my private key instead of well known asymmetric crypto mechanism on openkeychain?

I'm trying to use password-store as password manager under linux. I created a private github repo with my gpg files in order to use it with other devices. I installed android-password-store app for ...
0
votes
0answers
38 views

Brute-forcing a PGPDisk (.PGD) encrypted file

I have some ~20 year old PGPDisk (.PGD) files for which I have long since lost the keys and/or passwords. I've written some GPU accelerated brute-forcing for OpenOffice / PBKDF2 in the past, so I ...
3
votes
1answer
69 views

Signing a GPG Public Key

I am trying to manually create a GPG Public Key (see here). I am able to generate a GPG Public Key with a correct hash, but fail to RSA-sign that hash in a way that is accepted by the GPG CLI. For the ...
2
votes
1answer
73 views

Is it possible to get the PGP public key from PGP message?

Is it possible to get the public key from PGP message in PEM(Base64) format? Here is the message: ...
3
votes
1answer
97 views

Manually creating a GPG Public Key

I want to manually create a GPG public key that can be imported into GPG, i.e. I want to create a file with a Public-Key Packet, a User ID Packet and a Signature Packet (for an example see here). I ...
1
vote
1answer
50 views

Why is GnuPG changing first two characters of ascii armored public key after downloading it from the key server?

When I look at my public key on the key server, the first two characters of the ASCII-Armored data section (as defined in section 6.2 of RFC 4880, which defines the structure of the ASCII-Armored ...
0
votes
2answers
61 views

What is the PGP Web of Trust Strongset?

I understand that it is a system that "establishes the authenticity of the binding between public keys and their owners", but how does one join this web of trust? Do you have to physically meet one of ...
0
votes
0answers
23 views

Why is the key creation date part of the OpenPGP Key Fingerprint?

In Version 3 keys, the Key Fingerprint was defined as follows: The fingerprint of a V3 key is formed by hashing the body (but not the two-octet length) of the MPIs that form the key material (public ...
1
vote
1answer
48 views

Encrypt text message with Wireguard public key

With its public and private key(s), Wireguard looks a bit like PGP. But it is used for encryption of network packets and not normal text messages. I'm on a system with Wireguard already installed and ...
1
vote
1answer
85 views

What prevents ProtonMail from sending me the wrong public keys?

I've recently been looking at ProtonMail, an email service which provides transparent end to end encryption between users with PGP. In order for the encryption to be transparent, ProtonMail manages ...
1
vote
2answers
99 views

Is it possible to verify a clearsigned message with a short public key (fingerprints)?

For practical reasons, I'd like people to be able to post clearsigned messages with their public key fingerprints (8E570D9F7F70256595769E49F9BC5BCAD7E18635) for the ...
1
vote
1answer
167 views

What does Modification Detection Code (MDC) in OpenPGP do?

The authentication is often done by an HMAC in modern cryptosystems. What does MDC do exactly in OpenPGP and is it a software hack or an algorithmic authentication? Also, how to force GnuPG to stop ...
0
votes
1answer
18 views

why Efail CFB malleability gadget is different from CFB mode decryption?

Really, I could not understand why the decryption process of CFB malleability gadget takes the next cipher block while PGP uses the previous block as shown in the equations in the attached image, I ...
1
vote
1answer
85 views

Testing speed of symmetric vs asymmetric encryption and decryption using gpg

I'm aware that symmetric is faster than asymmetric. I want to test this, but my (obviously incorrect) tests show the reverse. Symmetric test: ...
1
vote
1answer
69 views

Encrypt symmetric session key with asymmetric or symmetric master key?

Every day, I must backup my server's files, encrypt the backup, and upload it to untrusted cloud storage (dropbox, s3, etc.) I've spent time on security.stackexchange where I discovered the typical ...
1
vote
1answer
51 views

Creating nested messages in OpenPGP

I need to create a nested message in OpenPGP (my understanding is that the protocol itself should support it). Let's say I have Payload ("Time in Lordran is ...
0
votes
2answers
157 views

Computing PGP ed25519 and curve25519 keygrips?

There are public key algorithmic differences for how PGP computes fingerprints and keygrips. For the v4 protocol, fingerprints are not exclusively computed from public keys while keygrips are. RFC ...
1
vote
1answer
132 views

Assistance with parsing PGP PRIVATE KEY BLOCK's Secret-Key Packet (0x6) and Secret-Subkey Packet (0x7) using command lines and RFC 4880?

The throw away private keys below (master ed25519 & subkey curve 25519) were exported without being password encrypted. % cat skaht_0523F5B4_Secret.asc ...
2
votes
1answer
85 views

Is it possible in PGP to provide verification/verify the ownership of a public key?

I am new to PGP/GPG and I am somewhat confused by the idea of the Web of Trust (WoT). Isn't signing a public key with its private key enough to prove the ownership of it? if it is so, why don't key ...
1
vote
0answers
64 views

Safest method for encrypting a file on a local machine

I am looking for a safe method to encrypt a local file on my machine. Let's say I have a file containing my logins and passwords -- how can I make sure that the encryption is reasonably sufficient in ...
0
votes
2answers
74 views

Asymmetric algorithm with indefinite number of public keys

So RSA algorithm uses pre-generated set of public and private key, and public key is usually included in private key. So public key stays always the same. Is it theoretically possible to have some ...
1
vote
1answer
99 views

PGP double encrypt instead of signing?

So, maybe this is a dumb question, or maybe it's something someone's already done and it's really common, but whatever, here goes: Why do we sign a message with our private key and then encrypt it ...
0
votes
1answer
48 views

Decrypting an already sent encrypted file in PGP

I am a novice in cryptography and need few clarifications. If I am SenderA, sending document to Receiver using PGP encryption. Let's say, SenderA shuts down and SenderC takes on the role of SenderA. ...
1
vote
1answer
50 views

Message types in GPG

I am trying to check the part where messages are both encrypted and signed. But what is the difference between a message which looks like this ...
2
votes
0answers
25 views

What are some examples of out of bound channels that work over the Internet in practice?

If I want to verify a public key (be it RSA, PGP, etc.) with another client over the Internet only, what are some viable out-of-bound channels for verification? Which channels have been used in ...
0
votes
0answers
84 views

Possible to convert PGP ed25519 signature into signify-compatible format?

Both PGP and Signify (or Minisign) are capable of generating ED25519 detached signatures. Is it possible to convert a PGP-generated ED25519 signature into a signify-compatible format?
6
votes
4answers
3k views

Is encrypted e-mail sent over TLS 1.3 a form of “forward secrecy” (similar to something like Signal)?

One common complaint about GPG-encrypted e-mail is that it doesn't provide forward secrecy; however with opportunistic TLS becoming increasingly common in both IMAP and SMTP, it's not unreasonable to ...
2
votes
1answer
315 views

How does gpg know what cipher algorithm is needed for decryption?

I am using gpg to make encrypt a tar.gz. My first try uses --verbose --symmetric and then the decryption is done with ...
0
votes
1answer
91 views

Is this PGP key exchange secure?

I am currently trying to create a secure key exchange between two parties. I have a good implementation of PGP that works well for my app, but my DH is really slow and doesn't work well; so I was ...
0
votes
2answers
163 views

Is there a human readable easier version to represent PGP Private keys?

I'm working on a distributed application, and we need a way to authorize clients. Every client has a PGP keypair associated with them, and we require them to enter their private key (which is not ...
3
votes
0answers
70 views

Do people sign my subkey?

So, I've generated my GPG key pair. Created a subkey for signing and a subkey for encryption. Exported the whole thing, removed my master key pair to a secure place, re-imported only the subkeys. Now, ...
1
vote
1answer
54 views

Why do I want to use PGP subkeys?

I understand the general notion in play: if my laptop/computer is stolen or compromised I can revoke that particular subkey so (as long as people have updated their keys) they can't impersonate me. ...
1
vote
0answers
326 views

GPG implementation of ECC “Encryption” (ECDH) vs RSA

My understanding of GPG with traditional RSA keys, is that RSA is by definition can be used to both sign and encrypt. This is because RSA can be directly applied to plaintext in the following form: <...
0
votes
1answer
26 views

How to let CA signed x509 key work in OpenPGP mailing system?

So let's say we have a OpenPGP mailing system which all mails are signed and encrypted with OpenPGP keys. And now you bought a CA signed x509 certificate and you want to imement into the mailing ...
2
votes
1answer
316 views

Should I PGP encrypt using a publickey intended only for Certify?

I'm working with a publickey that does not include EncryptStorage or EncryptCommunication flags (see RFC4880 for flag reference). My question is, is it safe/appropriate to encrypt using this key? <...
2
votes
1answer
822 views

In GnuPG, what's the difference between --s2k-cipher-algo and --cipher-algo? [duplicate]

I want to change some encryption options while using GnuPG to encrypt a file symmetrically. 1) However, for choosing the cipher algorithm, GnuPG has two commands and I don't know which one to use. ...
2
votes
1answer
56 views

About the security of GnuPG private key on-disk storage

GnuPG on-disk storage of secret key material is encrypted with AES-128, with an encryption key generated via an iterated and salted SHA-1 hash of the given passphrase. Is this usage of the SHA-1 hash ...
-1
votes
1answer
28 views

Converting a message from one PGP key to another PGP key

I have a message $M$ that is encrypted using a public key $P_1$. I lost the associated private key $p_1$. I have another public/private key pair $(P_2, p_2)$. Is it possible to "translate" the ...
0
votes
1answer
57 views

Book request about elliptic curves, RSA and DSA

I understand that this question can be hardly downvoted, but so be it if someone gives me really useful references :) I wanna learn difference (deeply) between RSA, DSA, and ECC, especially I am ...
2
votes
2answers
78 views

Mathematical explaination of file encryption for multiple persons with multiple keys

Let's say I want to encrypt a document which only can be read by John, Mike, and Dave. This can easily done with PGP/GPG: Import John‘s, Mike‘s, and Dave's public key Encrypt the document using those ...
1
vote
1answer
123 views

Where can I find the standard definition for GPG ECDSA signature?

I am playing around with GPG which I'd like to use to sign an integer and use the resulting signature binary in another piece of code. So far I have created a simple PGP packet parser with which I ...
1
vote
2answers
402 views

Generate PGP keys very very fast

Is there a way to generate thousands of PGP keys at a very very fast rate? I am generating thousands of 3072-bit PGP keys looking like part of a personal research project. Obviously, this is a very ...
1
vote
1answer
59 views

Is there any point to encrypting a file if it's transferred via ssh?

Suppose I have two machines which can ssh into each other. Is there very little point in using gpg with a password protected symmetric cipher to transfer a ...
5
votes
1answer
920 views

Do PGP keys with expiration date set expiration date in Encrypted messages too?

So I am little confused about a type of encryption I read about. You can encrypt your E-mails and pretty much all kind of information using PGP key pairs. However, I am confused if an encrypted ...
1
vote
1answer
280 views

libsodium vs gnupg curve25519 compatibility

I am trying to create deterministic GPG keys based on cryptosteel. I have implemented a library for (de)serializing PGP packets and am now trying to use keys generated in libsodium for import in GPG. ...
3
votes
1answer
5k views

How Secure is gpg Command Using Symmetric AES-256 From Being Cracked

How secure is any data encrypted using the following command: gpg -o *encrypted_output_file_name* --symmetric --cipher-algo AES256 *file_to_be_encrypted* Can ...
2
votes
0answers
65 views

Concept for a RSA “repeater”. Is it sensible?

I have been using RSA signed/encrypted mailing a lot recently. Naturally, I wanted to use RSA mailing also on my phone, not only on my computer. However, I feel uneasy having my private key on my ...
3
votes
1answer
72 views

Pseudonymous publication of a series of texts online when a bad guy is expected to join in with fakes: will this approach to PGP verifiability work?

Alice wishes to publish under a pseudonym a series of texts online. She expects the texts to circulate, and she will not include any way of contacting her. Bob will not know the identity of the ...

1
2 3 4 5