Bitcoin Forum

Hi,
I consider myself to have an advanced computer literacy, but I just can't get my hand on GnuPG. I've been trying on and off since one month to see how can I verify installations, but it is just impossible. The GnuPG user Guide says "we released version 2.0 while installation guide has not finished". On YouTube, the cryptodad channel has a guide on windows and I have a Mac.

I installed it, can find it nowhere on my MacBook (seems like you should use a terminal), and I'm clueless of how I can use it!! Any videos? A step by step guide? Thank you!

yes, gpg is a terminal based application


are you trying to verify the authenticity of Bitcoin Core binaries?

I am trying to verify first my GnuPG download and then to verify bitcoin paper wallet application

There is an example:
https://www.openoffice.org/download/checksums.html

Thank you for the link, but I always have errors ("failed to create files, etc... seems like the terminal wants to change my files and can't)

I created a guide on how to use GnuPG (https://bitcointalk.org/index.php?topic=5240594.msg54223763#msg54223763), but it's specific to verifying an Electrum download.  If you're not familiar with command line prompts, and you prefer to use a GUI Front-End application, you can try GPGTools.org's GPG Suite (https://gpgtools.org/).  It's fairly straight forward, and easy to use, but no where near as powerful as terminal commands.

Anyway, here's the manual on how to use GPG, all instructions include terminal commands.
https://gnupg.org/documentation/manuals/gnupg/

Ok thank you! I think I will look into it more thoroughly. But the thing is I always get "access denied" in my terminal for GnuPG, and I don't know if I should force Mac to be able to access it or not. I am familiar with terminal and I checked out your guide: it's very clear and I could apply this to any download. But I am just stuck with this "access denied" thing, and don't dare to touch it for security reasons

I'm not very familiar with macOS so this maybe a shot in the dark, but did you try adding "sudo" to the beginning of the command?  You shouldn't need to for using GPG functional commands, but you might need it to install the application.

I have already installed the GnuPG. I get something like this:
failed to create temporary file '/Users/MyUserName/.gnupg/.#lk0x00007fc435d04cf0.tonys-MacBook-Pro.local.36995': Permission denied

But in fact then it gives me the key with the phrase "using RSA key etc (gives a key here)". Can I compare this key to the public key I know manually?

Yes that might be a shot in the dark. If GnuPG doesn't have permissions by default, then I must be extremely careful if I want to change that.

Ok, the sudo command seems to work... Are you sure there is no danger in using it? The manual of GnuPG for verifying installation doesn't say you should use "sudo". I'm still trying to figure it out but at least it doesn't say access denied and seems to work

"Sudo" merely tells the computer that you're giving it an administrative command, ie "Super User Do."  It often requires you to enter your password to prove that you are the administrator.  "Sudo" alone wont damage the computer, but you shouldn't use it unless you trust the commands you are entering. 

Thank you! One last question: The signature fingerprint for the downloadable Mac version here https://sourceforge.net/p/gpgosx/docu/Download/ is different from all the signing keys we can find on their website: https://gnupg.org/signature_key.html

How come? And it is the GnuPG that redirects to the sourceforge.net website to download the 2.2.20 version for Mac

use gpg tools as per this guide: https://bitzuma.com/posts/how-to-verify-an-electrum-download-on-mac/