|
Title: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: mdayonliner on May 21, 2018, 01:18:56 AM Pretty Good Privacy (https://en.wikipedia.org/wiki/Pretty_Good_Privacy) English Version Tutorial (Windows Only) Please wait 1/2 minutes (depending on your connection speed) to load all the images Table of Contents
Abstract Go to top (#post_top) Many people do not have any clue about PGP encryption/decryption. It was same for me however I had to learn it the hard way. Explore the topic The BCT PGP/GPG Public Key Database: Stake Your PGP Key Here (https://bitcointalk.org/index.php?topic=1159946.0) to understand why you need to know it. If you are an Electrum wallet user then I am pretty sure you have seen a signature link (https://prnt.sc/jjsuma) next to the installation file. You also seen a warning notification on the top which talks about a fake copy of Electrum. Long story short, PGP gives you extensive privacy and you can easily validate the authentic source of your received file/text. In this tutorial we will learn... # How to create PGP Signed message and signature # How to verify a PGP Signed message and signature # How to encrypt a message # How to decrypt a message Once you get a good grip of these 4 basics, I believe you will be able to grab the rest without having any further assistance. A Better Understanding Go to top (#post_top) Before we start, it's gonna help you if I give you a brief. PGP consist of two Keys... 1. Private key <=== You need it to decrypt a content 1. a) You also need a passphrase, in other words a strong password. 2. Public key <=== You need it to encrypt a content Think about a very sensitive message you want to email to your friend. You don't want any gov agency or any spy read the message. These people can easily access your email server. To avoid it, ask you friend to give his PGP public key. Once you have it then encrypt the message and email the encrypted message to your friend. Now only your friend can decrypt it because he knows the private key. Warning: Do not share your private key and passphrase with anyone. Getting Started Go to top (#post_top) Download and Installation Go to top (#post_top) You will need Kleopatra desktop application. Click here (https://www.gpg4win.org/get-gpg4win.html) and download gpg4win-3.1.1.exe (this is the current version, you might find the same or a different version but don't mind, whatever the version they will have on their server, it will be downloaded). Once download done, go ahead and install the application (I assume, you know basics of installing an application). Once installation done, you will be seeing Kleopatra icon on your desktop. Create Your First Private and Public Keys Go to top (#post_top) 1. Open Kleopatra > File > New Key Pair... https://i.imgur.com/ctsk9h0.png Click here if unable to see image (https://i.imgur.com/ctsk9h0.png) 2. Click on Create a personal OpenPGP key pair https://i.imgur.com/laqiYXs.png Click here if unable to see image (https://i.imgur.com/laqiYXs.png) 3. Enter Name and Email > Click Next https://i.imgur.com/5PJNTcv.png https://i.imgur.com/G7iaHLb.png In our case, we are using... Code: Name: mdayonliner Tutorial 4.Click Create https://i.imgur.com/9SdyY1I.png 5.Enter passphrase (consider a strong password) -> Repeat -> click OK https://i.imgur.com/fxkabnw.png https://i.imgur.com/T6W5r8z.png In our case we have used... <=== Do not publish it in public ever Code: tutorialMday 6. Record the following information... 6.1. Fingerprint : In a text file or any other file of you choice Code: 3DE42C11CBDD44EFC63B602DFA92987833EE3CE0 6.3. Upload Public Key To Directory Service... 6.4 Finish https://i.imgur.com/exTefSW.png 6.2 Click on Make a Backup Of Your Key Pair... https://i.imgur.com/9Gjf8nk.png Chose a directory of your harddrive and keep the file safe. This is our private key obviously Enter passpharse -> Click Ok https://i.imgur.com/ffxOHZj.png Click Ok https://i.imgur.com/VmckVBV.png This process just exported the PRIVATE KEY <===== Do not publish it in public ever Locate the exported file and open it with notepad Code: -----BEGIN PGP PRIVATE KEY BLOCK----- 6.3. Click on Upload Public Key To Directory Service... -> wait a little bit -> Click OK This will upload the Public Key online in the PGP Directory Service But before that we need to check if the directory domain is still active. In case of inactive domains please follow the following setting. An error occurred while trying to export OpenPGP certificates. Try changing the OpenPGP keyserver.Server indicated a failure gpg: keyserver send failed: Server indicated a failure -snip- If you are using Windows OS and Kleopatra as in the tutorial above, go to Settings -> Configure Kleopatra ... In the OpenPGP Keyserver column (default: hkps: //hkps.pool.sks-keyservers.net), enter the keyserver that is still active/accessible, https://pgp.mit.edu; http://keyserver.ubuntu.com/; or other servers; then click OK. Here's an example of my public key: http://keyserver.ubuntu.com/pks/lookup?op=get&search=0x58bc997445d96f68db65c169a2ca884f183d22e9 Don't worry if there is an error. You can do this later after proper configuration. Click OK and Finish You should be seeing your newly created PGP user ID https://i.imgur.com/4EZ0yX1.png 6.3.a. Right click -> Click on Publish on Server Even after changing the server if you keep getting error then do not worry. You do not need any server for your public key. You can save it in your computer https://i.imgur.com/kxJzgQa.png Save it in your computer in a known directory. This is your public key Code: -----BEGIN PGP PUBLIC KEY BLOCK----- So, we have now our... 1. Private Key 2. Passphrase 3. Public Key 4. Fingerprint Red: Private only | Green: Publicly can be shared Create PGP Signed Message and Signature Go to top (#post_top) Assume below is our message and we want to sign it using PGP Signature Code: My username mdayonliner. It's m-day-online-r 1. Open Notepad > Type the message > Select the message > Copy the message. 2. Open System Tray > Right Click on Kleopatra icon > Mouse hover on Clipboard > Click OpenPGP-Sign... https://i.imgur.com/FJpAhH3.png https://i.imgur.com/QTfV3GP.png 3. Click Next > Enter passphrase > Click OK By default it should have your Key pair to sign for, we can call a Key pair as Certificate. If you have more than one for yourself then you can change it to the one you are going to sign for. https://i.imgur.com/yOdVnod.png https://i.imgur.com/GJhfb0S.png 4. Click OK https://i.imgur.com/c8lbZa7.png 5. Open another Notepad > Paste (Ctrl+V) Code: -----BEGIN PGP SIGNED MESSAGE----- Congratulations, you have just created your first PGP Signed Message with Signature. [--------------still updating below contents ------------- 21/12/2020] Verify PGP Signed Message and Signature Go to top (#post_top) Let's say we want to verify the PGP Signed Message of Husna QA (https://bitcointalk.org/index.php?topic=1159946.msg33448946#msg33448946). Below we have our PGP Signed Message with Signature Code: -----BEGIN PGP SIGNED MESSAGE----- 1. Select everything in the code tag > Copy (Ctrl+C) 2. Open System Tray > Right Click on Kleopatra icon > Mouse hover on Clipboard > Click Decrypt/Verify... https://i.imgur.com/HtWBkHT.png https://i.imgur.com/RysAdiB.png 3. Click Search > Wait few seconds until you see an active window > Select > Click Import You will need PGP Fingerprint/Public Key of Husna QA, imported in Kleopatra Certificate list. If you do not have it prior then start from search. https://i.imgur.com/IuJiI1b.png https://i.imgur.com/qVKIdFH.png 4. Check 1 & 2 > Click Next (3) https://i.imgur.com/jnbsGzh.png https://i.imgur.com/cT4DiU5.png 5. Choose your key pair > Check Certify only for myself > Click Certify https://i.imgur.com/DKuFRA4.png 6. Enter passphrase > Click OK https://i.imgur.com/5ydAnuV.png https://i.imgur.com/vTpd9bd.png 7. Click Finish (1) > If the imported information are valid then you will see green > Click Finish(2) https://i.imgur.com/7YsoABg.png https://i.imgur.com/msAAD6q.png 8. Open another Notepad > Paste (Ctrl+V) Code: Date: 2018-03-29 Congratulations, you just verified your first PGP Signed Message with Signature. Create Encrypted Message Go to top (#post_top) Before creating an Encrypted message we need someone else's PGP Fingerprint/Public Key Certificate. We already imported Public Key information for Husna QA. So, lets assume we will send him/her the Encrypted message. <<=== Please literally do not send him/her any message. Hack, s/he does not even know about this tutorial. Now assume, below is our message and we want to Encrypt it. Code: It's m-day-online-r going to Encrypt this message.. 1. Open Notepad > Type the message > Select the message > Copy the message. 2. Open System Tray > Right Click on Kleopatra icon > Mouse hover on Clipboard > Click Encrypt... https://i.imgur.com/8W3bK8C.png https://i.imgur.com/TFXDlRZ.png 3. Click Add Recipient(1) https://i.imgur.com/BWFYgki.png https://i.imgur.com/ZjLNdRQ.png 4. Select Recipient > Click OK (2) > Click Next https://i.imgur.com/ZrPGXmL.png https://i.imgur.com/CZH0Mbh.png 5. Click OK https://i.imgur.com/qchIA9x.png 6. Open Notepad > Paste (Ctrl+V) Code: -----BEGIN PGP MESSAGE----- Congratulations on Encrypting the message. If you send it to Husna QA, then only s/he can Decrypt it and read the original message. Decrypt an Encrypted Message Go to top (#post_top) Assume you know my PGP Fingerprint/Public Key. You sent me an Encrypted message which is below. Code: -----BEGIN PGP MESSAGE----- My Fingerprint (This is the one I am using for the forum): Code: 81DAEE690159E01E28FF951086FEA0B65C6E1B2C Now, we will see how to decrypt this message. 1. Select the entire message > Copy (Ctrl + C) 2. Open System Tray > Right Click on Kleopatra icon > Mouse hover on Clipboard > Click Decrypt/Verify... https://i.imgur.com/HRW8coW.png https://i.imgur.com/JrurnZy.png 3. Enter passphrase (1) > Click OK (2) https://i.imgur.com/WhCoITQ.png https://i.imgur.com/GJnJTmN.png 4. Click Finish https://i.imgur.com/clmbaBu.png https://i.imgur.com/T5lqpgK.png 5. Open Notepad > Paste (Ctrl + V) Code: Hello m-day-online-r, Some Real Life PGP Public Keys Go to top (#post_top) Some of the example PGP Public Keys you might be interested to explore or have it imported.
Exercises - Home Work Go to top (#post_top) Welcome to the exercises section. Before we start, here is what you wanna do. 1. Create a New Key Pair with the following information Code: Name: ex-<your bitcoinTalk username> Code: Name: ex-mdayonliner 2. Have your Fingerprint published on the online server. It's gonna help me and other members to access your public key for encrypted communication. We will have two assignments to practice. I will think of an award later for the successful participants. Assignment 1: PGP Singed Message and Signature (#post_) - Coming soon. Assignment 2: Encrypt and Decrypt Message (#post_) - Coming soon. Click here for my Fingerprint on the server (https://sks-keyservers.net/pks/lookup?op=get&search=0x81DAEE690159E01E28FF951086FEA0B65C6E1B2C). Code: 81DAEE690159E01E28FF951086FEA0B65C6E1B2C FAQ Go to top (#post_top) electrobit: Could someone explain what is the purpose or advantages about to create or make a PGP? (https://bitcointalk.org/index.php?topic=4059348.msg38652207#msg38652207) Answer (https://bitcointalk.org/index.php?topic=4059348.msg38654425#msg38654425) Please feel free to ask any question in the comment. I will add them in here with the answer. If I do not have the answer then I will try to seek senior members' help or I will find an answer for your question. Make sure the question is related to the topic. Acknowledgements Go to top (#post_top) https://i.imgur.com/iq0PiNI.png Husna QA (https://bitcointalk.org/index.php?action=profile;u=1827294): The topic PGP/GPG Signed Message - Public Key (https://bitcointalk.org/index.php?topic=3221263.0) in his/her local language was the starter for me to start my learning. I am happy that I was good enough to understand the translation in English. https://i.imgur.com/iq0PiNI.png TryNinja (https://bitcointalk.org/index.php?action=profile;u=557798): Provided some URLs (https://bitcointalk.org/index.php?topic=3776827.msg37813164#msg37813164) which cleared my head to understand better. https://i.imgur.com/iq0PiNI.png hugeblack (https://bitcointalk.org/index.php?action=profile;u=1059082): Suggested the idea of adding some example PGP Public Keys (https://bitcointalk.org/index.php?topic=4059348.msg38082152#msg38082152). https://i.imgur.com/iq0PiNI.png All the members who were leaving their PGP PUBLIC KEYs all around the forum. Seeing these encrypted codes were interesting for me and finally I decided to investigate what was it all about. References Go to top (#post_top) https://en.wikipedia.org/wiki/Pretty_Good_Privacy http://www.pitt.edu/~poole/PGP.htm This tutorial will be continued with further materials in future Looking forward to your expertise review and feedback Title: Change log Post by: mdayonliner on May 21, 2018, 01:56:51 AM Code: Tuesday, May 21, 2018 @20:56 GMT: Added some example PGP Public Keys Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: mdayonliner on May 21, 2018, 01:57:04 AM reserved
Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: mdayonliner on May 21, 2018, 07:52:03 PM I had some problems with "Decrypt an Encrypted Message," but will try to follow your method "I just wake up." - Excellent explanation and attractive design. You can add some important PGP Signatures [theymos, ThomasV, Bitcoin core,.....etc.]"I have created a short list here"----------->Some of PGP public keys [you should import] (https://bitcointalk.org/index.php?topic=3327907.msg34780144#msg34780144) try to add this site to your tutorial ------> https://keybase.io (https://keybase.io) "I noticed many people using it" Hello hugeblack, Will do mate. I am still working on this tutorial. After posting the topic I crushed last night. I just woke up now and noticed I became a Full Member. It's exciting and I am going to celebrate the happiness. I will add few more alternative ways for PGP using https://keybase.io and others soon. Appreciate your feedback and thanks for the compliment. It took me long time to find a good banner for the top :) Update1 Added some example PGP Public Keys. Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Fondo Platform on May 25, 2018, 02:26:06 AM I recommend use ecdsa or ed25519 rather than rsa.
Code: gpg2 --expert --gen-key Code: gpg (GnuPG) 2.1.8; Copyright (C) 2015 Free Software Foundation, Inc. ECC: Elliptic-curve cryptography Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: electrobit on May 26, 2018, 10:12:36 PM Could someone explain what is the purpose or advantages about to create or make a PGP?
Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: TryNinja on May 26, 2018, 11:06:50 PM Could someone explain what is the purpose or advantages about to create or make a PGP? Mostly privacy. You don't want the NSA reading your emails, do you?Quote PGP is useful for two things: 1. Privacy and Security, and 2. Authenticity. By privacy, I mean that you can prevent people from seeing things. For example, you can encrypt an email to someone, or encrypt a file with a list of passwords. By Authenticity, I mean that you can ensure a message was sent/written by the person you think it was, and that it wasn't modified by a third party. Of course, these two can be combined. I'll discuss these further. Source: https://www.phildev.net/pgp/gpgwhy.htmlTitle: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: electrobit on May 27, 2018, 04:47:39 PM Could someone explain what is the purpose or advantages about to create or make a PGP? Mostly privacy. You don't want the NSA reading your emails, do you?Quote PGP is useful for two things: 1. Privacy and Security, and 2. Authenticity. By privacy, I mean that you can prevent people from seeing things. For example, you can encrypt an email to someone, or encrypt a file with a list of passwords. By Authenticity, I mean that you can ensure a message was sent/written by the person you think it was, and that it wasn't modified by a third party. Of course, these two can be combined. I'll discuss these further. Source: https://www.phildev.net/pgp/gpgwhy.htmlTitle: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: madnessteat on March 09, 2019, 06:04:08 PM Tell me please. When I delete the Kleopatra and install it again, my certificate immediately appears in it. Where is it stored on the computer, if I did not import it into my computer?
Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: mdayonliner on March 09, 2019, 06:13:40 PM Tell me please. When I delete the Kleopatra and install it again, my certificate immediately appears in it. Where is it stored on the computer, if I did not import it into my computer? You will need to import your private key. It's important you always keep the backup of your private key.Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: madnessteat on March 09, 2019, 08:27:06 PM You will need to import your private key. It's important you always keep the backup of your private key. You do not understand me. Sorry for my English. When I install the program a second time, it automatically shows me my certificate (name and email). I entered the installed program only: https://i.imgur.com/wJAMis3.png The program does not ask me to enter anything when you first enter. Before removing the program, I should to delete the certificate manually? Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Pmalek on March 09, 2019, 08:40:45 PM @madnessteat
The program stores your keyrings here: C:\Users\UserName\AppData\Roaming\gnupg So even if you uninstall the software your keys should remain in that folder. That is why you see them the 2nd time you install Kleopatra on your device. Source: http://wald.intevation.org/forum/forum.php?thread_id=1226&forum_id=21&group_id=11 Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Husna QA on April 03, 2019, 12:00:05 AM <snip> I added your public key to the list of my GPG keychain (Mac OS)Click here for my Fingerprint on the server (https://sks-keyservers.net/pks/lookup?op=get&search=0x81DAEE690159E01E28FF951086FEA0B65C6E1B2C). Code: 81DAEE690159E01E28FF951086FEA0B65C6E1B2C https://i.imgur.com/McI9fFm.png I recommend use ecdsa or ed25519 rather than rsa. Code: gpg2 --expert --gen-key ECC: Elliptic-curve cryptography This is mine: <snip> Public Key (ECC) : Code: -----BEGIN PGP PUBLIC KEY BLOCK----- <snip> Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: abdulodoi on November 16, 2020, 03:56:06 PM An error occurred while trying to export OpenPGP certificates.
Server indicated a failure gpg: keyserver send failed: Server indicated a failure This is what i got while trying to publish on directory service. Do you know what i did wrong? Quote It is because the SKS PGP Keyserver is being abandoned due to peoples abuse of known public keys on the server. I stumbled on this article when I tried looking for other keyserver lookup as alternative as I was also following the same tutorial. But still, even without uploading it to a keyserver, you can still verify the pgp signature of an application and encrypt/ decrypt a message. I don't know why people like to abuse things like this. Indeed i was able to encrypt a message and @OgNasty was about to decrypt it. Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: coupable on November 16, 2020, 09:24:08 PM An error occurred while trying to export OpenPGP certificates. Unfortunetly, there is no other guides show you how to interact with pgp signatures here in bitcointalk. I also remember how i followed this guide and face the same error but i didn't look further. Better to ask for opinions directly from users community .Server indicated a failure gpg: keyserver send failed: Server indicated a failure This is what i got while trying to publish on directory service. Do you know what i did wrong? Thanks for bumping this topic, i was looking for it . Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Maus0728 on November 17, 2020, 02:34:06 AM An error occurred while trying to export OpenPGP certificates. It is because the SKS PGP Keyserver is being abandoned due to peoples abuse of known public keys on the server. I stumbled on this article when I tried looking for other keyserver lookup as alternative as I was also following the same tutorial. But still, even without uploading it to a keyserver, you can still verify the pgp signature of an application and encrypt/ decrypt a message.Server indicated a failure gpg: keyserver send failed: Server indicated a failure Quote from: https://code.firstlook.media/the-death-of-sks-pgp-keyservers-and-how-first-look-media-is-handling-it The Death of SKS PGP Keyservers, and How First Look Media is Handling It The SKS keyserver network is dying. This has been a long time coming. The nail in SKS’s coffin came in late June when someone abused important public keys that people rely on. Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Husna QA on November 17, 2020, 01:20:49 PM An error occurred while trying to export OpenPGP certificates. Try changing the OpenPGP keyserver.Server indicated a failure gpg: keyserver send failed: Server indicated a failure -snip- If you are using Windows OS and Kleopatra as in the tutorial above, go to Settings -> Configure Kleopatra ... In the OpenPGP Keyserver column (default: hkps: //hkps.pool.sks-keyservers.net), enter the keyserver that is still active/accessible, https://pgp.mit.edu; http://keyserver.ubuntu.com/; or other servers; then click OK. Here's an example of my public key: http://keyserver.ubuntu.com/pks/lookup?op=get&search=0x58bc997445d96f68db65c169a2ca884f183d22e9 Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Maus0728 on November 18, 2020, 05:33:41 AM @Husna QA,
Thanks you for the heads up. I've now gone past the same problem they encountered from following the tutorial. I have now changed the default key server to https://pgp.mit.edu/ and was able to lookup my "PGP Public Key Block". Is there any other workaround where I can directly paste my "Fingerprint" to MIT PGP Key Server for lookup instead of manually creating a link of Code: https://pgp.mit.edu/pks/lookup?op=get&search=0x3466CFA83DEBE525F40446E5AC1D3A48A6161C75 In MIT Key Server, there are three sections and I assume the "Extract Key" is the section I will be using to search for my public key though I am not sure what string I will be using? Is it the FINGERPRINT itself? https://i.imgur.com/ddB7rNhl.png Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Husna QA on November 18, 2020, 08:58:11 AM -snip- Is there any other workaround where I can directly paste my "Fingerprint" to MIT PGP Key Server for lookup instead of manually creating a link of -snip- If you have successfully uploaded your public key at https://pgp.mit.edu/ or other Key servers, you can replace my fingerprint below with your own:https://pgp.mit.edu/pks/lookup?search=0x58BC997445D96F68DB65C169A2CA884F183D22E9 http://keyserver.ubuntu.com/pks/lookup?search=0x58bc997445d96f68db65c169a2ca884f183d22e9&fingerprint=on&op=index You can also use http://keyserver.ubuntu.com/ for Search key/Submit key; Click Advanced Options to view Index options/Index type. -snip- In MIT Key Server, there are three sections and I assume the "Extract Key" is the section I will be using to search for my public key though I am not sure what string I will be using? Is it the FINGERPRINT itself? -snip- MIT PGP Public Key Server brief guide:Quote from: https://pgp.mit.edu/extracthelp.html Extracting a key Currently, I am personally more comfortable using http://keyserver.ubuntu.com/ instead of https://pgp.mit.edu/
Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: LoyceV on November 19, 2020, 10:15:57 AM Total PGP n00b here :(
I'm trying to verify a PGP signed message (https://bitcointalk.org/index.php?topic=4059348.0#post_VerifyPGPmsg). This is the message: Code: -----BEGIN PGP SIGNED MESSAGE----- And this is the PGP public key (http://mymixerxtukle6mo.onion/pgp.txt): Code: -----BEGIN PGP PUBLIC KEY BLOCK----- After trying to verify, Kleopatra tells me this: Quote Not enough information to check signature validity. Am I doing something wrong?Signed on Thursday, 19 November 2020 10:57:13 CET by mycryptomixer@protonmail.com (Key ID: 0x77379A5D). The validity of the signature cannot be verified. Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: DdmrDdmr on November 19, 2020, 04:37:21 PM Stumbling myself a fair share on my local board with PGP (no need to see PGP ¿Puedes enviar mensajes cifrados? (https://bitcointalk.org/index.php?topic=5290375.msg55615439#msg55615439)), so exploring the PGP Newbie avenues myself.
Doing so, I’ve encountered the following issue: - I’ve created a new PGP pair, and published my PGP public key (using Kleopatra). - @FullNode published a message on a post, using my PGP public key to create his (not sure though which software he used). - When I try to decrypt the message, I get: Code: El cifrado falló: sin protección de identidad (MDC) .. Pressing "diagnostics" shows: Code: gpg: NOTA: el cifrado CAST5 no aparece en las preferencias del receptor The quote’s above are in Spanglish, but the basic issue that does not allow for the message to be decrypted, seems to be that my cypher default algorithm on Kleopatra is "AES", while @ FullNode encrypted the message using "CAST5". I would have expected the PGP tools to be able to figure it out on their own, but it seems not, which is also something to ponder (that or my Newbie PGP status). I tries changing from AES to CAST5 on Kleopatra’s configuration, but still got nowhere (when I closed/reopened Kleopatra, it went back to AES anyway). Anyone know how frequent these cypher algorithm clashes occur, and whether it is tool dependent and/or resoluble using Kleopatra on the message decoding side ? Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Husna QA on November 20, 2020, 01:03:44 AM -snip- There may be a problem importing a public key/fingerprint at Kleopatra.After trying to verify, Kleopatra tells me this: Quote Not enough information to check signature validity. Signed on Thursday, 19 November 2020 10:57:13 CET by mycryptomixer@protonmail.com (Key ID: 0x77379A5D). The validity of the signature cannot be verified. I was able to verify the message using GPG Keychain on macOS. https://i.imgur.com/WUsFuwX.png Then I tried it at Kleopatra. I tried to import the public key via the Tools menu -> Clipboard -> Certificate Import (I see this method is not in the OP). Then verify the message, and here are the results: https://i.imgur.com/IfYnDz9.png Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: LoyceV on November 20, 2020, 09:11:08 AM Then I tried it at Kleopatra. I tried to import the public key via the Tools menu -> Clipboard -> Certificate Import (I see this method is not in the OP). I don't have that option (in Kleopatra, running Linux) under the Tools menu, but it works from the system tray. I have the Certificate imported under "Other Certificates".Quote Then verify the message I did this also from the system tray, but get this:https://loyce.club/other/Kleopatra.png I have no idea how to proceed :( I have another message I want to verify (for a potential scam accusation thread (https://bitcointalk.org/index.php?topic=5235190.msg55621951#msg55621951)), and that one I can't share. Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Husna QA on November 20, 2020, 04:25:06 PM I don't have that option (in Kleopatra, running Linux) under the Tools menu, but it works from the system tray. I have the Certificate imported under "Other Certificates". -snip- Recently I tried Kleopatra version 3.0.1 on Ubuntu 18.04.5 LTS and managed to verify the message.Maybe the following methods worked for you too: - Copy the Public Key into Clipboard. - At Kleopatra, click the Clipboard button, select Certificate Import. https://i.imgur.com/IZ749IJ.png https://i.imgur.com/Iiv3890.png - The User ID is still not certified; Right-click selects Certify... https://i.imgur.com/OHjYS3f.png https://i.imgur.com/hvJAVum.png https://i.imgur.com/Tg6uwAV.png https://i.imgur.com/TEm0bAE.png https://i.imgur.com/PyKrFH2.png - Copy the signed message to Text Editor and save it with the file extension * .asc. https://i.imgur.com/nTBoZb2.png - Click the Decrypt/Verify button and select the * .asc file. https://i.imgur.com/b3wozeP.png - Here are the results: https://i.imgur.com/CD2f283.png Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: LoyceV on November 21, 2020, 10:22:45 AM Recently I tried Kleopatra version 3.0.1 on Ubuntu 18.04.5 LTS and managed to verify the message. Maybe the following methods worked for you too: - Copy the Public Key into Clipboard. - At Kleopatra, click the Clipboard button, select Certificate Import. But wait, if I certify for everyone instead of just myself, it works! I'm amazed how complicated verifying a PGP message is, compared to how easy it is to verify a Bitcoin signed message. Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Myfe on November 21, 2020, 07:58:10 PM Is it possible to create a PGP Signature from any wallet address?
I appreciate the Kleopatra tutorial, but I don't use Kloepatra and I shouldn't have to use a new wallet simply to sign my wallet address...right? Thanks. Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: LoyceV on November 21, 2020, 08:07:06 PM @Myfe: You're confusing PGP signatures and Bitcoin signed messages (https://bitcointalk.org/index.php?topic=990345.0).
Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: logfiles on December 06, 2020, 05:22:54 PM Now open your internet browser and go to Code: https://sks-keyservers.net/pks/lookup?op=get&search=0x<FINGERPRINT> On this step I am getting an error once I enter the link into the browser. Is anybody else facing the same problem, or I am just doing something wrong? This is what i used with the experimental fingerprint I have Code: https://sks-keyservers.net/pks/lookup?op=get&search=0xBD59862EB1AB87499ADBA1CACB277B51176DD381 This is the error I get https://i.imgur.com/LjC2CdW.png Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: mdayonliner on December 06, 2020, 07:07:53 PM A bit surprise to see the discussion still going on. Thank you Husna QA to keep posting on behalf of me when I was not active in the forum.
@LoyceV, I am not clear if you were able to solve your problem yet, this did not give me a clear idea (https://bitcointalk.org/index.php?topic=4059348.msg55645819#msg55645819) of your struggling. Quote But wait, if I certify for everyone instead of just myself, it works! Did you have your own PGP private key imported? I hope you did not import your public key instead of thinking that you are importing your private key.It's not that hard. Let's start over. 1. You will need to have your private key imported first of all. https://i.imgur.com/Q60eHnj.png Do you see yours in bold? If not bold then you have imported your public key and this is the reason it's not working. 2. You will need to import the public key of the message senders, this will ask your password so have it with you. And this is the PGP public key (http://mymixerxtukle6mo.onion/pgp.txt): https://i.imgur.com/Gsd4x2c.png3. Copy the message and from the try verify it. I'm trying to verify a PGP signed message (https://bitcointalk.org/index.php?topic=4059348.0#post_VerifyPGPmsg). https://i.imgur.com/Zfeikzj.png Only three times you are interacting with the software. This is not too hard :) This is the error I get This is where (https://bitcointalk.org/index.php?topic=4059348.msg55614102#msg55614102) it was discussed. Credit to Husna QA. I also just noticed that the server in my initial post is down.Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: LoyceV on December 06, 2020, 07:22:06 PM @LoyceV, I am not clear if you were able to solve your problem yet Yes, I solved it :)Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: mdayonliner on December 06, 2020, 07:27:32 PM Yes, I solved it :) Good!This interest me, what was you missing in the first place? Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: logfiles on December 06, 2020, 07:41:29 PM This is the error I get This is where (https://bitcointalk.org/index.php?topic=4059348.msg55614102#msg55614102) it was discussed. Credit to Husna QA. I also just noticed that the server in my initial post is down.Maybe a small update in the op about errors from https://sks-keyservers.net and alternative servers to use wouldn't be a bad idea. Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: mdayonliner on December 07, 2020, 10:03:06 AM Maybe a small update in the op about errors from https://sks-keyservers.net and alternative servers to use wouldn't be a bad idea. I will absolutely do that. I was not active on the forum since I left last year so I had no idea that this topic still had demand. Now since I am back I will start looking at the topics I left and will start updating them. Still I am trying to find the habit I had before, to be online most of the time of the day and have things to say in almost all the topics ;DTitle: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: LoyceV on December 07, 2020, 08:02:36 PM Yes, I solved it :) Good!This interest me, what was you missing in the first place? I don't think I'll be comfortable using PGP until I feel like I know what I'm doing. Just following a tutorial isn't enough to be confident I won't mess it up. Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: hossamdz on December 16, 2020, 11:54:47 AM https://i.ibb.co/q55XtDC/not-found.png (https://ibb.co/TLLpVw1)
Im sure i made every thing as the books said but im still getting this error here and i dont know where is the source of it any one can help with this ? :-\ Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Husna QA on December 16, 2020, 03:02:13 PM I Dont know if i did it right tell me if i did something wrong! Can you also add your Public key? So that I can try to verify your PGP signature.-snip- https://i.ibb.co/q55XtDC/not-found.png Can you explain in more detail about the “Not found” message? Which stage of the OP tutorial did you have trouble?Im sure i made every thing as the books said but im still getting this error here and i dont know where is the source of it any one can help with this ? :-\ Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: mdayonliner on December 21, 2020, 10:40:46 AM I am working on updating the topic. The update has been done until the following block.
[--------------still updating below contents ------------- 21/12/2020] Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Husna QA on January 14, 2021, 04:19:23 AM -snip- I think it would be much more interesting to display the results of what you learned from this thread, such as sending an encrypted message to the OP, creating a PGP Sign message, or verifying the PGP signature. So it's not just saying thank you for appreciating it.Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Hispo on May 06, 2021, 09:25:34 PM Is there a way to use a hardware wallet with this program?
Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Husna QA on May 07, 2021, 01:22:46 AM Is there a way to use a hardware wallet with this program? As far as I know, most hardware wallets don't have the feature to create encrypted messages using PGP.But there is one device, namely Keyxentic KX 906, which was able to secure email signing and encryption with S/MIME and PGP protocol. At the moment, I don't know how the reputation and reviews from its users are. -Do With Your Own Risk- For further information, you may find it here: https://www.keyxentic.com/kx906. Quote from: https://www.keyxentic.com/kx906 Capabilities - Multi-modal authentication : Biometric, Public Key, PIN authentication - Secure key container - Key backup with smart card with multi-modal authentication - Hardware cryptographic acceleration(AES 256 Bits) for data and disk(MicroSD Card) encryption - Public key infrastructure(PKI) function and X.509 certificate supported - Open Authentication Reference Architecture(OATH) one time password(OTP) and OATH challenge-response algorithm(OCRA) supported - Fingerprint (ISO 19794-2 / Proprietary format) Match-On-Card supported - Bitcoin wallet supported Applications - Secure Email signing and encryption with S/MIME and PGP protocol - File encryption and data protection - PDF Security (signing and encryption) - Secure access control with identification and authentication - Cryptocurrency transaction Cryptography - RSA 1024/2048 - ECC 192/256/320 (Multiple Named Curves) - ECDSA, NIST and Brainpool Curves - ECDH - Wrap/Unwrap - SHA-1, SHA-2 - Hardware Crypto-Accelerator(AES256) Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: dansus021 on May 07, 2021, 06:05:41 AM thanks for sharing
would be great is there youtube video ;) PGP is important if you guys still confuse with PGP you can also sign message on bitcoin as well Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: Husna QA on May 07, 2021, 08:54:10 AM would be great is there youtube video ;) I see on Youtube there are already several tutorials on how to use PGP encryption messages, e.g .:PGP is important if you guys still confuse with PGP you can also sign message on bitcoin as well - How To Use PGP Encryption | gpg4win Kleopatra Tutorial (https://www.youtube.com/watch?v=lAblt1Qt_ng) - Signing with OpenPGP using Kleopatra (https://www.youtube.com/watch?v=ZJSLTdJKiH4) - How to encrypt message with PGP using Kleopatra | Gpg4win ? (https://www.youtube.com/watch?v=99-FjKNrpBI) So depending on the person's habits, it is more comfortable to learn through written media or videos. Title: Re: [Eng: Tutorial] PGP Signature - Encrypt/Decrypt message - Fingerprint Post by: jamyr on June 08, 2021, 02:26:46 PM ~ Thank you for the tutorial.Exercises - Home Work Go to top (#post_top) Welcome to the exercises section. Before we start, here is what you wanna do. 1. Create a New Key Pair with the following information Code: Name: ex-<your bitcoinTalk username> Code: Name: ex-mdayonliner 2. Have your Fingerprint published on the online server. It's gonna help me and other members to access your public key for encrypted communication. ~ Here comes nothing! Fingerprint: Code: B482C8020831ECE3BE6D51DC17ED09A4369CB7AF No idea if the fingerprint have to be separated with spaces. |
