Gpg: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
No edit summary |
||
| (7 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
{| class="wikitable" | |||
! | |||
!Command | |||
|- | |||
|Import public keys<ref>https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/4/html/Step_by_Step_Guide/s1-gnupg-import.html</ref> | |||
|<code>$ gpg --import keys.txt</code> | |||
|- | |||
|Check the file's signature<ref>https://www.gnupg.org/download/integrity_check.html</ref> | |||
|<code>$ gpg --verify foo.sig foo</code> | |||
|- | |||
|Search public key | |||
|gpg --keyserver hkp://pgp.mit.edu --search-keys "Toto" | |||
|- | |||
| | |||
|gpg --card-status | |||
|- | |||
|Delete keys | |||
|gpg --delete-keys | |||
|- | |||
|Delete secret keys | |||
|gpg --delete-secret-keys | |||
|- | |||
|List key | |||
|gpg --list-keys | |||
|- | |||
|List secret-keys | |||
|gpg --list-secret-keys | |||
|- | |||
|Create master key | |||
|gpg2 --full-gen-key | |||
|- | |||
|Create subkey | |||
|gpg --edit-key <e-mail> | |||
|- | |||
|Public part of the key | |||
|gpg -k <key-fingerprint> | |||
|- | |||
|Private part of the key | |||
|gpg -K <key-fingerprint> | |||
|} | |||
opensc-tool --list-readers | |||
pcsc_scan | |||
gpg -- | ykinfo -a | ||
https://wiki.debian.org/Subkeys | |||
gpg2 --expert --card-edit | |||
cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksFormat keys.ext4.luks | |||
sudo cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksOpen keys.ext4.luks gpg_vault | |||
=== Remove private master key === | |||
gpg2 --with-keygrip --list-key 0x<MASTERKEY> | |||
rm -rf $GNUPGHOME/private-keys-v1.d/<KEYGRIPID>.key | |||
all private keys are in private-keys-v1.d/. | |||
== Resources == | |||
{| class="wikitable" | |||
! | |||
! | |||
|- | |||
| | |||
|https://riseup.net/en/security/message-security/openpgp/best-practices#how-to-use-this-guide | |||
|- | |||
| | |||
|http://ekaia.org/blog/2009/05/10/creating-new-gpgkey/ | |||
|- | |||
| | |||
|https://spin.atomicobject.com/2013/11/24/secure-gpg-keys-guide/ | |||
|- | |||
| | |||
|https://help.ubuntu.com/community/GnuPrivacyGuardHowto | |||
|- | |||
| | |||
|https://www.paulfurley.com/extend-pgp-key-expiry-with-gpg/ | |||
|- | |||
| | |||
|https://github.com/drduh/YubiKey-Guide#install---linux | |||
|- | |||
| | |||
|https://rzetterberg.github.io/yubikey-gpg-nixos.html | |||
|} | |||
== References == | == References == | ||
Latest revision as of 00:03, 29 May 2018
| Command | |
|---|---|
| Import public keys[1] | $ gpg --import keys.txt
|
| Check the file's signature[2] | $ gpg --verify foo.sig foo
|
| Search public key | gpg --keyserver hkp://pgp.mit.edu --search-keys "Toto" |
| gpg --card-status | |
| Delete keys | gpg --delete-keys |
| Delete secret keys | gpg --delete-secret-keys |
| List key | gpg --list-keys |
| List secret-keys | gpg --list-secret-keys |
| Create master key | gpg2 --full-gen-key |
| Create subkey | gpg --edit-key <e-mail> |
| Public part of the key | gpg -k <key-fingerprint> |
| Private part of the key | gpg -K <key-fingerprint> |
opensc-tool --list-readers
pcsc_scan
ykinfo -a
https://wiki.debian.org/Subkeys
gpg2 --expert --card-edit
cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksFormat keys.ext4.luks
sudo cryptsetup --verbose --key-file - --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksOpen keys.ext4.luks gpg_vault
Remove private master key
gpg2 --with-keygrip --list-key 0x<MASTERKEY>
rm -rf $GNUPGHOME/private-keys-v1.d/<KEYGRIPID>.key
all private keys are in private-keys-v1.d/.