Silk Road forums

Discussion => Security => Topic started by: jack2324 on September 07, 2012, 03:35 am

Title: Online PGP Encryption Tool
Post by: jack2324 on September 07, 2012, 03:35 am
Anyone ever tried this?  Safe/effective?  https://www.igolder.com/pgp/encryption/
Title: Re: Online PGP Encryption Tool
Post by: pharmer_pete on September 07, 2012, 05:30 am
Put simply, you're uploading a message that you want to keep secret, and you're asking an untrusted third party to encrypt the message on your behalf and send you the result. This is a bad thing.

As to the claim that they don't log or monitor activity on the site.. maybe they do, maybe they don't. They probably do.  But even if they don't, the whole notion of encrypting messages this way is bad. Stay away.
Title: Re: Online PGP Encryption Tool
Post by: jack2324 on September 07, 2012, 05:45 am
Gotcha!  The issue is I'm on a Mac and haven't found a good reliable program for encrypting and decrypting :/
Title: Re: Online PGP Encryption Tool
Post by: jack2324 on September 07, 2012, 06:44 am
Done.  I feel like an idiot, but what do I do now?  Like how do I take a sellers PGP and send them a shipping address? 

I'm generally pretty good with computers, but encryption is not my specialty...
Title: Re: Online PGP Encryption Tool
Post by: LouisCyphre on September 07, 2012, 11:53 am
Done.  I feel like an idiot, but what do I do now?  Like how do I take a sellers PGP and send them a shipping address? 

I'm generally pretty good with computers, but encryption is not my specialty...

Generate a PGP keypair, it comes in two parts: the public key and the secret key.  The public key is the part you provide to people you want to be able to encrypt messages to you and the secret key (also called the private key) is the part you guard with your life.

I suggest you read Guru's post on correctly labelling a PGP key before you make it:

http://dkn255hz262ypmii.onion/index.php?topic=33566.0

To generate the key open GPG Keychain Access and click on Key and then Generate.  Leave it at "RSA and RSA (default)" and select "4096" in the drop down menu.  Change the "Full Name" field to your SR and/or forum username (as per Guru's post).  Put in an obviously fake email or a tormail.org address.  Don't worry about the comment.

You will need to import a vendor's key to be able to encrypt messages to them.

A good list of the PGP and GPG related threads is here:

http://dkn255hz262ypmii.onion/index.php?topic=38861.0
Title: Re: Online PGP Encryption Tool
Post by: jack2324 on September 07, 2012, 01:49 pm
OK so I've made my key, and have vendors keys off of Keyserver and SR.  Now how do I encrypt a message into them?  I'm really have trouble with it because so many of the guides are written for windows  ???
Title: Re: Online PGP Encryption Tool
Post by: LouisCyphre on September 07, 2012, 02:24 pm
OK so I've made my key, and have vendors keys off of Keyserver and SR.  Now how do I encrypt a message into them?  I'm really have trouble with it because so many of the guides are written for windows  ???

If you have set the hotkeys that Guru posted you can type your message in TextEdit, highlight it (Command+A) and then encrypt it.  You should be prompted for which keys to encrypt it to, include the vendors key and your own (if you want to decrypt it later).

The GPGTools website also has instructions on how to use it and some videos too.
Title: Re: Online PGP Encryption Tool
Post by: Shroomeister on September 07, 2012, 02:25 pm
OK so I've made my key, and have vendors keys off of Keyserver and SR.  Now how do I encrypt a message into them?  I'm really have trouble with it because so many of the guides are written for windows  ???

 Type your uber secret message in TextEdit (or any notepad app)
 
 Right click > Highlight ubersecret message >>>> bottom of your right click context menu find "services" >>>>>"Encrypt selection" >>>choose the person you want to be able to decrypt it >>>>>highlight and copy output>>>paste said output into your message.
 
Title: Re: Online PGP Encryption Tool
Post by: jack2324 on September 07, 2012, 05:40 pm
Ahhhhh TextEdit!  I feel very stupid at the moment because I was using Notes.  When I use TextEdit everything works except for encrypting for some reason.  Like I can insert fingerprint, insert key, sign, verify, etc but for some reason nothing happens when I do shift-control-e or shift-control-d
Title: Re: Online PGP Encryption Tool
Post by: jack2324 on September 08, 2012, 02:54 pm
Ahhhhh TextEdit!  I feel very stupid at the moment because I was using Notes.  When I use TextEdit everything works except for encrypting for some reason.  Like I can insert fingerprint, insert key, sign, verify, etc but for some reason nothing happens when I do shift-control-e or shift-control-d

ARe those shortcut keys selected (i.e. are the boxes checked?)

Are those keys assigned to other programs, by any chance?

Guru



Not sure what happened because I didn't change anything, but after turning my computer off last night and back on this morning it works!  Thanks for all your help!