Gpg: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
No edit summary |
||
| (5 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
{| class="wikitable" | |||
Import public keys<ref>https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/4/html/Step_by_Step_Guide/s1-gnupg-import.html</ref> | ! | ||
<code>$ gpg --import keys.txt</code> | !Command | ||
|- | |||
Check the file's signature<ref>https://www.gnupg.org/download/integrity_check.html</ref> | |Import public keys<ref>https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/4/html/Step_by_Step_Guide/s1-gnupg-import.html</ref> | ||
<code>$ gpg --verify foo.sig foo</code> | |<code>$ gpg --import keys.txt</code> | ||
|- | |||
gpg --card-status | |Check the file's signature<ref>https://www.gnupg.org/download/integrity_check.html</ref> | ||
|<code>$ gpg --verify foo.sig foo</code> | |||
|- | |||
|Search public key | |||
|gpg --keyserver hkp://pgp.mit.edu --search-keys "Toto" | |||
|- | |||
| | |||
|gpg --card-status | |||
|- | |||
|Delete keys | |||
|gpg --delete-keys | |||
|- | |||
|Delete secret keys | |||
|gpg --delete-secret-keys | |||
|- | |||
|List key | |||
|gpg --list-keys | |||
|- | |||
|List secret-keys | |||
|gpg --list-secret-keys | |||
|- | |||
|Create master key | |||
|gpg2 --full-gen-key | |||
|- | |||
|Create subkey | |||
|gpg --edit-key <e-mail> | |||
|- | |||
|Public part of the key | |||
|gpg -k <key-fingerprint> | |||
|- | |||
|Private part of the key | |||
|gpg -K <key-fingerprint> | |||
|} | |||
opensc-tool --list-readers | opensc-tool --list-readers | ||
| Line 13: | Line 45: | ||
ykinfo -a | ykinfo -a | ||
https://wiki.debian.org/Subkeys | https://wiki.debian.org/Subkeys | ||
gpg2 --expert --card-edit | gpg2 --expert --card-edit | ||
| Line 37: | Line 53: | ||
sudo cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksOpen keys.ext4.luks gpg_vault | sudo cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksOpen keys.ext4.luks gpg_vault | ||
=== Remove private master key === | |||
gpg2 --with-keygrip --list-key 0x<MASTERKEY> | |||
rm -rf $GNUPGHOME/private-keys-v1.d/<KEYGRIPID>.key | |||
all private keys are in private-keys-v1.d/. | |||
== Resources == | == Resources == | ||
| Line 51: | Line 74: | ||
| | | | ||
|https://spin.atomicobject.com/2013/11/24/secure-gpg-keys-guide/ | |https://spin.atomicobject.com/2013/11/24/secure-gpg-keys-guide/ | ||
|- | |||
| | |||
|https://help.ubuntu.com/community/GnuPrivacyGuardHowto | |||
|- | |||
| | |||
|https://www.paulfurley.com/extend-pgp-key-expiry-with-gpg/ | |||
|- | |||
| | |||
|https://github.com/drduh/YubiKey-Guide#install---linux | |||
|- | |||
| | |||
|https://rzetterberg.github.io/yubikey-gpg-nixos.html | |||
|} | |} | ||
== References == | == References == | ||
Latest revision as of 00:03, 29 May 2018
| Command | |
|---|---|
| Import public keys[1] | $ gpg --import keys.txt
|
| Check the file's signature[2] | $ gpg --verify foo.sig foo
|
| Search public key | gpg --keyserver hkp://pgp.mit.edu --search-keys "Toto" |
| gpg --card-status | |
| Delete keys | gpg --delete-keys |
| Delete secret keys | gpg --delete-secret-keys |
| List key | gpg --list-keys |
| List secret-keys | gpg --list-secret-keys |
| Create master key | gpg2 --full-gen-key |
| Create subkey | gpg --edit-key <e-mail> |
| Public part of the key | gpg -k <key-fingerprint> |
| Private part of the key | gpg -K <key-fingerprint> |
opensc-tool --list-readers
pcsc_scan
ykinfo -a
https://wiki.debian.org/Subkeys
gpg2 --expert --card-edit
cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksFormat keys.ext4.luks
sudo cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksOpen keys.ext4.luks gpg_vault
Remove private master key
gpg2 --with-keygrip --list-key 0x<MASTERKEY>
rm -rf $GNUPGHOME/private-keys-v1.d/<KEYGRIPID>.key
all private keys are in private-keys-v1.d/.