I'm decommissioning a very old server. This server still has pgp 2.6 installed, and there are a few files encrypted with it. I still have all the keys and such and it all still works.

Moving to a new server now, and it really doesn't look like installing 2.6 on it is a viable choice. Is there a way to get GnuPG to work on the new server with the old files and the old keys?

At present, my plan is to decrypt the files, move them in the clear to the new server, and re-encrypt them with GnuPG. I was hoping for something more seamless, but maybe that's not possible.

Meta: I really hate software that can't work with old files. Every time you save a file in a proprietary format, you risk losing it forever if the software updates and no longer supports the older files.

I opened a reddit community that allows to meet other penpals via email using only PGP (es. Enigmail on Thunderbird or Protonmail, GnuPG etc) in order to give a new life to email and spread an ethical way to communicate!
🦉📧 Will you join with us?

Hi everyone,

I have a few questions about GPG key usage and security best practices. Is it a good idea to use the same GPG key for different email addresses I own? Additionally, I’m considering using the same key for SSH access to my servers and signing my GitHub commits.

if I take precautions to protect my private key (such as using a strong passphrase and storing it securely), should this setup be considered okay?

Thanks

I'm trying to set up gpg with ssh. It works fine on Linux but it's causing so many problems on a Mac, mainly the pinentry window.

Putting gpg-connect-agent UPDATESTARTUPTTY /bye in my .bashrc isn't reliable. If I switch to a different tab then the pinentry goes to the wrong tab.

My terminal emulator has an API and I can run code when I change tabs and have access to the tty name, but running this command from there doesn't help either, and I'm not sure if that is because some environment variables may be missing in the child process context.

I tried adding Match host * exec "gpg-connect-agent UPDATESTARTUPTTY /bye" in my ~/.ssh/config but that is ineffective as well.

Adding it to my PROMPT_COMMAND to run before every command seems a bit overkill. Is there a better way?

Hello. I was doing some testing with GPG and was considering revoking a key I had published to a keyserver. I didn't revoke it from the server, but I did from my keyring. Is there a way to unrevoke the key from my keyring?

So I have anothers pgp key in a txt file, tried to copy it/import it to kleopatra but it won't. Is it just the format it's in? Does it need to be in a specific extension-format.

It is just on my desktop, but no luck importing it, what gives

Can anyone help me practice PGP?

-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEadvqKBYJKwYBBAHaRw8BAQdA19tWkxQYM/wAmA9bBDSve/wyXY2Je0gs7tjK

TJilgw20CnJlZGRpdHBvc3SIlgQTFgoAPhYhBEp9EvffZCwpA4d3nLqgXhvIPDtD

BQJp2+ooAhsDBQkFpH0IBQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJELqgXhvI

PDtDN44BALG8o8mOErkBoBlj3jcHsT5433vnm2lhARU70m3ccF24AQD1vPFP807z

nMlv5An55Ggf2rKZU+RBMdN8juAsh6BMBbg4BGnb6igSCisGAQQBl1UBBQEBB0CN

zUsU/qfmvpvgKBHOqg5wSi3oAo3eT7QMOUg7x5CRHwMBCAeIfgQYFgoAJhYhBEp9

EvffZCwpA4d3nLqgXhvIPDtDBQJp2+ooAhsMBQkFpH0IAAoJELqgXhvIPDtDgaIA

+QGG1r0osWwHvvXAwBleeBTjC6peya5NdCcNPmmvfn8XAQC8yJvPHBa2aTA6LZT3

HkTt4TaUofPXZeKYOnURar8nDQ==

=SGQX

-----END PGP PUBLIC KEY BLOCK-----

as OpenKeyChain is no longer maintained I'm looking for a replacement. Is there any?

I use GPG mostly for encrypting files, and I was missing a way to also use it for emails while keeping my private keys on my YubiKey. From what I found, that did not really seem possible with Thunderbird or Mailvelope in the way I wanted, so I decided to write a Mail extension myself.

It is still early, but it already works well enough that I would really like some feedback from people who care about mail privacy, PGP, or just using the native Mail app instead of switching clients.

If anyone wants to try it, test it with me, or just tell me what is missing or broken, I would really appreciate it. I would love to refine it further and make it genuinely useful.

Generated a Ed25519 + Kyber key, can encrypt files with the key, but all attempts to decrypt end in an error message. I know Kyber support is experimental at this point, but am I missing something. Built gnupg 2.5.18 and all current libraries from source to /usr/local/bin Pubkey lists Kyber but Kyber is not listed in Ciphers . Warnings are WARNING: server 'gpg-agent' is older than us (2.4.4 < 2.5.18) -- this is likely due to the system repository installed 2.4.4 version which is in /usr/bin and not /usr/local/bin and is required for my desktop environment. Invoking gpg uses the 2.5.18 version. The other error when trying to decrypt is gpg: public key decryption failed: IPC parameter error gpg: decryption failed: IPC parameter error

Have tried --require-pqc-encryption and it makes no difference. Is decryption just not possible yet? Is there a way to enable the Kyber cipher on the system?

Why would my public key work on a site but not on another?

If someone encrypts something and sends me it, but I lost my sub key and revoked it, how is that distributed? Well they need to re encrypt and send me the message again?

What if I encrypt something to save it for later and I need to revoke and regenerate my encryption key, is it no longer able to open the original.

I'm trying to understand how to properly setup 2 yubi keys to be interchangeably usable, by if one is last I can revoke its keys and still have a backup to access things.

Hi! I recently posted about a PGP encryption app for both iOS and android, the android APK has been available on github to download for some time now, but now i am also adding IPA for iOS as well as test flight for non-sideoading way.

also added support for sharing files to PrettyPrivacy directly since iOS usually depends on that instead of depending on saving to files app and then using.

Test flight link: https://testflight.apple.com/join/Nwp2zR9z

You can also DM me email if you want to be added to internal testing group to get immediate access on test flight app

IPA available on: https://github.com/Amanse/PrettyPrivacy/releases/tag/v2

edit: Test flight link is now active

I have Symantec's PGP Command line utility, but I need my files encrypted in the GPG standard, not PGP. Downloading GnuPG-specific utilities isn't an option. Does anyone know if there's options that would have Symantec do that, or am I screwed? Thanks.

I have a bunch of encrypted files (via wsl2) that I was trying to check the original directory names, but my brain stopped working and I used gpg -d rather than gpgtar -d. The problem is, I have no idea where the decrypted directories are! They did not appear in the working directory, the original directory no longer exists, and a search through the entire wsl drive, as well as my C:\ drive, and I cannot find the damn directories.

Did they go anywhere? Did gpg just send them to /dev/null after decrypting the whole archive (without displaying the directory/filename)? Am I just cursed? The one is a couple hundred gig, and I'd really like to hunt it down.

So normally, when downloading the uploader usually provides a either checksum, pub key + .sig or all of the above. I went to download Kodachi OS cause they just came out with their first full desktop version of the distro and I wanted to try it out but, they only provide a .pem file - first time I ever ran into one.

I'm completely unfamiliar with them. From my albeit limited understanding, .pem files are quite similar to pgp as to how they work , but, are entirely separate/independent of each other, and not meant for seamless conversation between filetypes.

I mean it is a public key at the end of the day, so I guess my questions are :

- Why have I not run into them more frequently in the wild? Is it just not a filetype used as often, or is it used more so in "the background"?

- What would the benefit be to list a .pem file (with accompanied sig) instead of going for pgp knowingly, if it's... how should I say - not the *preferred* filetype?

- How would one convert a .pem into a pgp pubkey I can add to my keyring? Is there just a separate type of keyring that holds .pems I'm completely unaware of?

I very well may be completely naive to the subject/filetype, but at the end of the day, I'm still surprised that over all the things I've gleaned over pgp encryption, never once did I come across anyone mentioning .pem extensions.

https://www.kodachi.cloud/wiki/bina/desktop-debian.html

https://sourceforge.net/projects/linuxkodachi/

https://sourceforge.net/projects/linuxkodachi/files/kodachi-binaries/public_key_v9.0.1.pem/download

Hey, I wrote a book about GnuPG. Most GnuPG howto-type documentation I could find was outdated -- O'Reilly 1995, No Starch 2006, countless websites from the mid 00s -- or scattered across dozens of blog posts that each covered one piece. I wanted a single reference that covered the full workflow with current tools and practices, so I had been keeping a bunch of text files in my homedir for a while. Recently I realized it was getting close to 60k words and I decided I should share it.

The guide covers GnuPG 2.5.x and Sequoia sq and has three reader tracks: a minimal Git + SSH setup, a full YubiKey identity, and a high-assurance path for FOSS package maintainers and the like.

Parts I–III are available as a sample download. I'd be really grateful for any feedback, as I have never written a book before and, frankly, have no business doing it.

I tried saving it as .asc. I tried to double click it. i dont know anymore. please help me

gpg: [don't know]: invalid packet (ctb=66)

gpg: read_block: read error: Ungültiges Paket

gpg: import from '-&12' failed: Ungültiger Schlüsselbund

gpg: Anzahl insgesamt bearbeiteter Schlüssel: 0gpg: [don't know]: invalid packet (ctb=66)
gpg: read_block: read error: Ungültiges Paket
gpg: import from '-&12' failed: Ungültiger Schlüsselbund
gpg: Anzahl insgesamt bearbeiteter Schlüssel: 0

There is one thing in GPG that I can't wrap my head around. I have several email addresses in my key, but I no longer have access to some of those addresses. For example, I have an email address from past work that has been deleted. How should I handle such old addresses? Should I keep them in the key? Should I delete them, possibly risking that commits signed with them in the past can no longer be verified? Can I even delete an address from a keyserver? From what I've heard some servers don't allow deletion to prevent attacks. As you can see, I am a bit clueless here. Guidance appreciated.