How to use the right way ^ securely

Disclaimer  /me is not Mac literate Ask Ryan ;-)  Things may go wrong Grab the back of your pants and let’s fly!

Why GnuPG?   Free as in beer!  Free as in freedom!  Compatible for the most part with PGP Industry standard RSA/DSA encryption  Can sign/encrypt , files, etc…  Allows you to know who sent an  Allows you to encrypt for security

Tutorial(s)  We’ll be following the tutorial here:  howto.php howto.php  Instead of typing that, type this:   Mac Users: check out Look at QuickStart guide: Mac section ○ MacGPG = OS X 10.4 or greater ○ Fink project ○ MacPorts project

Prerequisites  Install Mozilla Thunderbird 2.0 If you already have it, good!  Install GPG “GnuPG compiled for Microsoft Windows.” ○ ftp://ftp.gnupg.org/gcrypt/binary/gnupg-w32cli exe ftp://ftp.gnupg.org/gcrypt/binary/gnupg-w32cli exe ○ c2efad983dfe50e6d bad2c76604be389a gnupg-w32cli exe ○ In cygwin: sha1sum.exe gnupg-w32cli exe OR: ○ Debian/Ubuntu: apt-get install mozilla-thunderbird-enigmail Make sure you’ve updated debian’s OpenSSL GnuPG doesn’t use it, but just to be safe! ○ OR: Source Tarballs: See GnuPG site!

Install Enigmail  Got Thunderbird working?  Install Enigmail extension from: 

Configure GnuPG  In windows, set PATH to include gpg.exe  Make sure Thunderbird knows too!  How? Open preferences Set path to GPG in the dialog: ○ C:\gnupg\gpg.exe on Windows ○ /usr/bin/gpg on GNU/Linux Use output of `which gpg` for strange installs

Advanced configuration  There is a gpg.conf file you may edit for extra preferences I use “digest-algo RIPEMD160” Can set preferred keyservers manually, etc…  It resides in GPG’s home directory. gpg --version C:/Users/ /AppData/Roaming/gnupg ~/.gnupg (IIRC)  Actual keyring files: secring.gpg and pubring.gpg  Look online for advanced things

Generate Keypair  Enigmail makes it really easy to generate a new keypair!  Open the Key Management window and select New Key Pair.  Select account for key to be used with  (Optional) Fill in key size “Advanced” tab (I like 4096, but 1024 is sufficient) Use DSA & El Gamal Why Key expiry? ○  Add a key passphrase!!! Never click “no passphrase” Choose a good one, this is important!  To add an existing key pair, in the Key Management window, from the File menu, click Import Keys from File. Keys should be in “ASCII armored” format

If all went well…  You should be good to go :-D  If not… Help time  For more: Google is your friend! Enigmail mailing list! (See next slide)

The Enigmail Mailing List   Via www:  Via send a message with subject or body 'help' to  Etiquette Don’t Top Post Don’t send encrypted to the list!!!! ○ Signed is ok! Regulars are pretty helpful, and some (usually John Clizbe, et. Al.) will be glad to test encryption OFF LIST