scraporeo.blogg.se - Gpg suite upgrade

#GPG SUITE UPGRADE SOFTWARE#

Possible actions for a RSA key: Sign Certify Encrypt AuthenticateĬurrent allowed actions: Sign Certify Encrypt Then set the capabilities of the key to only Certify by toggling Signing and Encryption off. There is NO WARRANTY, to the extent permitted by law.Ĭhoose (8) RSA (set your own capabilities). This is free software: you are free to change and redistribute it.

#GPG SUITE UPGRADE SOFTWARE#

Gpg (GnuPG) 1.4.12 Copyright (C) 2012 Free Software Foundation, Inc. Invoke gpg -gen-key with the -expert flag to expose some additional menu items. We’re already offline and booted into a trusted live operating system, so we can jump right into generating the key. The guide recommends setting up your card reader first. The “Fellowship SmartCard” provided to FSFE Fellows implements the same OpenPGP SmartCard standard as the current version (Last changed: 08:19:15) of their Card HowTo is quite good. We’ll follow along with roughly the approach recommended by Free Software Foundation Europe. Once Tails has booted, we can open a Terminal shell and start generating our new key.

Instructions for installing Tails to a USB stick.

I happened to use a Tails Live USB Stick and an old netbook with wireless networking disabled so I’ll describe a similar process here. We’ll also want to do this in an offline environment. To do this we’ll want to boot into a LiveCD or LiveUSB environment to reduce the likelihood of malware interfering with the key generation process or stealing our new secrets. We’ll start by generating a brand new key in a fairly secure environment. The next post in the series will demonstrate the second strategy: using this new key with a SmartCard. In this post, I’ll will cover the generation of a new GPG key and removal of the primary key, one of two mitigation strategies mentioned in the previous post.

Generating More Secure GPG Keys: A Step-by-Step Guide (this post).

Generating More Secure GPG Keys: Rationale.This is part of a series on GNU Privacy Guard: