Get your fingerprint:
gpg --list-secret-keys --fingerprint
Get someone elses key
Using email
gpg2 --search-keys EMAIL
Using keyid
gpg2 --recv-key KEYID
Sign keys
gpg2 --recv-key KEYID
gpg2 --sign-key KEYID
gpg2 --send-key KEYID
Photos
View someone's photo
gpg --edit-key KEYID showphoto
Add a photo
Suggested image sizes are 240x288 pixels (GnuPG) or 120x144 pixels
(PGP) to make a JPEG of 4K-6K in size. A 1.2 h:w ratio
w = h / (144 / 120)
gpg --edit-key KEYID addphoto
Keysigning party etherpad
To Sign keys
gpg2 --recv-key KEYID
gpg2 --sign-key KEYID
gpg2 --send-key KEYID
Script to quickly sign all keys
for k in $(grep pub ksp-wmf-20160108.txt | awk '{print $2}' | awk -F '/' '{print $2}'); do
echo "Receiving $k"
gpg2 --recv-key $k
echo "Signing key $k"
gpg2 --sign-key $k
echo "Sending key $k"
gpg2 --send-key $k
done
IF YOU NEED A KEY, GET HELP!!
Resources
PGP/GPG Intro
- https://ssd.eff.org/en/module/introduction-public-key-cryptography-and-pgp
- https://ssd.eff.org/en/module/how-use-pgp-mac-os-x
OpenPGP Best practices
WMF Keysigning
https://people.wikimedia.org/~faidon/ksp-wmf-20160108.txt
SHA256 Checksum: 52F2 CF39 6A54 6D56 7F55 7138 7264 11BA
AEE3 F34E 8880 681C 9A67 75D1 3BBC 74DC [ ]
52F2CF39 6A546D56 7F557138 726411BA AEE3F34E 8880681C 9A6775D1 3BBC74DC
RIPEMD160 Checksum: BB44 91B6 0A4D 5865 2105 2A4C 19FB 11AD 8BCC C3C3 [ ] BB44 91B6 0A4D 5865 2105 2A4C 19FB 11AD 8BCC C3C3
Mutt problems
"can't query passphrase in batch mode"
Uncomment, use agent
in ~/.gnupg/gpg.conf
Pass problems
No Secret Key
Problem
gpg: decryption failed: No secret key
Solution
- install
pinentry-curses
~/.gnupg/gpg-agent.conf
pinentry-program /usr/bin/pinentry
gpg-connect-agent reloadagent /bye
Add a comment (Comment Policy)