Using GnuPG on Linux
E. Frank Ball III
frankb@frankb.us
www.FrankB.us
NBLUG - North Bay Linux Users Group
Public/Private Keys
- gpg --gen-key
Please select what kind of key you want: (1) RSA and RSA (default) (2) DSA and Elgamal (3) DSA (sign only) (4) RSA (sign only)
- key length: 2048 recommended
- expiration, name, email, pass phrase
- gpg: key 6D896603 marked as ultimately trusted
- Key fingerprint = 92CC 2349 B3DD 12BC 7977 C781 5D29 71ED 6D89 6603
Public/Private Keys
- No way to recover lost passphrase
- gpg --gen-revoke
- Always keep private key PRIVATE
- Public key is shared
Exporting Keys
- gpg --export --armor 6D896603
- gpg --export -a max@efball.net
- gpg --fingerprint max@efball.net
- 92CC 2349 B3DD 12BC 7977 C781 5D29 71ED 6D89 6603
- in bashrc: export GPGKEY=6D896603
GnuPG Keyring
- gpg --import <filename>
- gpg --sign-key 6D896603
- gpg --edit-key 6D896603
- gpg --list-keys
- gpg --list-sigs
- gpg --list-secret-keys
Key Signing
- 1 = Don't know
- 2 = I do NOT trust
- 3 = I trust marginally
- 4 = I trust fully
Encrypting & Signing
- gpg --encrypt <filename> / gpg -e <filename>
- gpg --decrypt <filename> / gpg -d <filename>
- gpg --sign <filename> / gpg -s <filename>
- gpg --sign --encrypt --armor --recipient <name> <filename>
- gpg -sear max@efball.net <filename>
- gpg -sea <filename>
Clear Signing
- gpg --clearsign <filename>
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAlJUjtYACgkQXGHLcrgN+chbhgCeMepyz7M+DcR0Qy/kp2j+oU4Y 4eAAoJLCDBRCGJjmTl2Pez9VQFd/tu1u =T3TT -----END PGP SIGNATURE-----
- gpg --verify <filename>