Questions tagged [pgp]

Pretty Good Privacy (PGP) is a data encryption and decryption computer program that provides cryptographic privacy and authentication for data communication.

Pretty Good Privacy (PGP) is a data encryption and decryption computer program that provides cryptographic privacy and authentication for data communication. PGP is often used for signing, encrypting and decrypting texts, E-mails, files, directories and whole disk partitions to increase the security of e-mail communications. It was created by Phil Zimmermann in 1991.

PGP and similar products follow the OpenPGP standard (RFC 4880) for encrypting and decrypting data.

Resources

817 questions
9
votes
1 answer

Adding a OpenPGP signature to an already signed document?

We'd like to implement a workflow that requires multiple people to digitallly sign a document. If I have multiple secret keys in my own keychain, I can do something as simple as: gpg --sign -u userid1 -u userid2 filename But what do I do if I've…
larsks
  • 277,717
  • 41
  • 399
  • 399
8
votes
8 answers

Is there any benefit to encrypting twice using pgp?

I am asking from a "more secure" perspective. I can imagine a scenario with two required private keys needed for decryption scenarios that may make this an attractive model. I believe it is not adding any additional security other than having to…
ojblass
  • 21,146
  • 22
  • 83
  • 132
8
votes
1 answer

Create CipherOutputStream with PGP Bouncy Castle dependency

I want to create a OutputStream from another OutputStream in which the new OutputStream will automatically encrypt the content I write to that OutputStream. I want to use Bouncy Castle since I am already using that dependency for other…
NoKey
  • 129
  • 11
  • 32
8
votes
2 answers

BouncyCastle Open PGP - unknown object in stream 47

I am trying to decrypt PGP encrypted string using the BouncyCastle PGP SDK. I have tried several approaches and in each case I get a following error at the beginning of the process (exact place shown below): unknown object in stream 47 I have so…
Bartosz
  • 4,406
  • 7
  • 41
  • 80
8
votes
3 answers

How to do large file parallel encryption using GnuPG and GNU parallel?

I'm trying to write a parallel compress / encrypt backup script for archiving using GNU parallel, xz and GnuPG. The core part's of script is: tar --create --format=posix --preserve-permissions --same-owner --directory $BASE/$name --to-stdout . \ …
Yongbin Yu
  • 108
  • 1
  • 8
8
votes
2 answers

is it possible to create an ssl certificate out of a pgp public/private key?

i have a pgp public/private (RSA) key pair that my friends trust. i have a webserver running and i'd like to generate an ssl certificate whose public key matches my pgp public key. does that make any sense ? is that possible ? is that safe ?
Sam Goto
  • 475
  • 6
  • 11
8
votes
2 answers

Viewing a PGP signature on a Maven artifact

I'd like to manually verify the PGP signature on a Maven artifact from Central, but I don't know where to start. I see on Apache's Guide to uploading artifacts to the Central Repository that it says "we require you to provide PGP signatures for all…
Nathaniel Waisbrot
  • 23,261
  • 7
  • 71
  • 99
8
votes
1 answer

How to decrypt PGP encrypted file with Ruby gpgme

I can't find a single example of how to do this. I have a PGP encrypted XLS file and a PGP key. Here's is my code that returns an empty string: require 'rubygems' require 'gpgme' def passfunc(obj, uid_hint, passphrase_info, prev_was_bad, fd) io…
Vincent
  • 16,086
  • 18
  • 67
  • 73
7
votes
1 answer
7
votes
1 answer

How to upload a file with SFTP using an ASC file and username/password in NodeJS

I've been working on a task to upload a file to a partner's ftp site using a public PGP key in an asc file he sent me. The file looks like this (with the bulk of the key censored out): -----BEGIN PGP PUBLIC KEY BLOCK----- Version: PGP…
Rob
  • 897
  • 3
  • 8
  • 22
7
votes
1 answer

github: PGP key usage flags do not allow signing

I've used my OpenPGP key to sign a git commit, but it shows up as "Unverified" on github: https://github.com/cweiske/jsonmapper/commits/master The usage flags for the key that signed this don't allow signing. GPG key ID: 14C85A0824EAF823 The…
cweiske
  • 30,033
  • 14
  • 133
  • 194
7
votes
2 answers

Create pgp file with gpg from command line

I want to encrypt an xml file and I am using gpg4win (kleopatra). Using the kleopatra interface I set an option to produce files with extension pgp instead of gpg which is the default extension. I am trying to create a pgp file from command line…
mike_x_
  • 1,900
  • 3
  • 35
  • 69
7
votes
3 answers

How do I cryptographically sign all commits on a branch?

I have PGP key that let's me sign the commits via git commit -S. To sign my last commit I did a git commit -S --amend --no-edit and it signed my commit. Now, I want to sign all the commits that are there in the branch filtered. I tried: git…
user900360
7
votes
2 answers

Bouncy Castle C# PGP Decryption example

I have been looking all day yesterday, and I can't seem to find a working example of PGP decryption using Bouncy Castle in c#
Ron Harlev
  • 16,227
  • 24
  • 89
  • 132
6
votes
2 answers

How do I use Go's openpgp package?

I've been looking through the documentation for Go's openpgp package, and I think I must be missing some obvious points. For example, there's a ReadKeyRing function, but no WriteKeyRing. I can, on the other hand, Serialize an Entity, but I have no…