1 / 12

An Introduction to OpenPGP: Key Concepts and Practical Guides

OpenPGP is a proposed standard for encrypting and signing data, ensuring secure communication over email and file sharing. Created by Phil Zimmerman in 1991 and implemented through programs like PGP and GnuPG, OpenPGP uses a system of keys for encryption. This guide will walk you through how to create and manage your keys using GnuPG commands, export and import keys, and encrypt/decrypt files. Learn how to secure your data with practical tips and useful commands for email clients like Thunderbird and Mutt.

overton
Télécharger la présentation

An Introduction to OpenPGP: Key Concepts and Practical Guides

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. 2600 JAN09 Beginning PGP

  2. What? • OpenPGP is the proposed standard. • (RFC 2440, 3156, 4880, 5081, etc) • OpenPGP is not a program. • PGP and GnuPG are computer programs that implement the OpenPGP standard.

  3. Who? - Phil Zimmerman • Created PGP in 1991 • Arms Trafficker? • Given Book Cred in the Da Vinci Code

  4. Who? - Werner Koch • Initially Developed GnuPG in 1999 • Head of Office and German Vice-Chancellor of the Free Software Foundation Europe.

  5. Why? • Email • All your crap is cleartext • Data • See above

  6. How? • Create your keys • gpg --gen-key • Follow prompts • gpg --list-keys • To Confirm • Create your revocation key • gpg --output revoke.asc --gen-revoke $KEYID

  7. How? • Exporting keys • gpg --armor --output jberg.asc --export jberg@atu.edu • Put jberg.asc whereever you want

  8. How? • Importing keys • gpg --import jberg.asc • gpg --list-keys • gpg --edit-key jberg@atu.edu • Command> fpr • Command> sign (follow prompts) • Command> check

  9. Now What? • Send signed and/or encrypted E-mail • Thunderbird /w Enigmail (32-bit only currently) • Mutt • Kmail

  10. Now What? • Encrypt your crap • To create an encrypted file • gpg -c test.txt (then enter your password) • To decrypt an encrypted file • gpg test.txt.gpg • Useful if you don't trust where your files are stored.

  11. Now What? • Encrypt your crap to send to people with keys • gpg --armor --encrypt file.tar.gz • ensure you've imported the key of who you're sending to • Decrypt his/her crap • gpg --decrypt file.tar.gz.asc

  12. References • GnuPrivacyGuardHowtohttps://help.ubuntu.com/community/GnuPrivacyGuardHowto • Linux HOWTO: Secure Your Data with PGP, Part 1 http://www.youtube.com/watch?v=_VbcDh1wuaA • Linux HOWTO: Secure Your Data with PGP, Part 2 http://www.youtube.com/watch?v=bQYwqzS-Wyo

More Related