GnuPG The GNU Privacy Guard
Lecture Outline PGP and OpenPGP GnuPG Using GnuPG GnuPG GUI Frontends KGPG GnuPG MUA Frontends GnuPG RSS Feed - http://www.gnupg.org/news.en.rss
PGP and OpenPGP PGP was originally developed by Phil Zimmermann as an email encryption software package. It was originally made available for free, in 1991. In 1997, the IETF formed the OpenPGP working group, who developed OpenPGP as a standard, RFC 2440.
GnuPG “GnuPG is a complete and free replacement for PGP. Because it does not use the patented IDEA algorithm, it can be used without restrictions.” -- GnuPG website It is an OpenPGP (RFC 2440) compliant application.
Using GnuPG Creating a key pair (secret and public key) Open your favorite terminal emulator, and run gpg --gen-key and follow the prompts. Exporting your public key. Run gpg --list-keys Find the key you wish to export, then run gpg --export [key id] > somename.asc You can then share the .asc file, put it on your website, whatever. Exporting your key to a keyserver. gpg --send-keys [key id, ids] -- keyserver [keyserver] A good keyserver (or rather set of keyservers) to use is hkp://random.sks.keyserver.penguin.de
Using GnuPG Importing Keys gpg –import keyname.asc Importing Keys from a Keyserver gpg --search-keys 'myfriend@his.isp.com' --keyserver [keyserver] Follow the prompts
Using GnuPG Encrypting files. gpg --encrypt --recipient [recipient] foo.txt If you wish to encrypt the file for yourself, the recipient is 'your name/email.' If you wish to encrypt the file and send it to a friend, the recipient is 'name/email of friend.' When the process finishes encryption, you will have a file named foo.txt.gpg. Decrypting files. gpg --decrypt foo.txt.gpg --output foo.txt Not using the --output option causes the decrypted file to be printed to stdout.
GnuPG GUI Frontends GPA – Aims to be the standard frontend for GnuPG KGPG – KDE frontend for GnuPG Seahorse – Gnome frontend for GnuPG GPGee - GPGee (GNU Privacy Guard Explorer Extension) is a shell extension that adds Windows explorer right-click menu support for GnuPGIs a MS- Windows program to integrate GnuPG into the Desktop.
KGPG KGPG is a frontend to GnuPG for KDE. It simplifies many of the everyday tasks involved in managing your keychain.
Web of Trust A Web of Trust is a network of keys used to sign each other, used to make a key appear more trustworthy to others, and to set the trust level of a key in GPG.
GnuPG MUA Frontends Enigmail – for Mozilla Thunderbird http://enigmail.mozdev.org/ Makes using PGP a breeze. Will sign, encrypt, decrypt, check, and even download keys from the keyserver(s). Many other email clients have OpenPGP/GnuPG support, or can be extended to include it. See:http://www.gnupg.org/(en)/related_software/frontends.html#mua