Silk Road forums

Discussion => Security => Topic started by: g30duck on October 08, 2012, 01:01 am

Title: GPG4win - Public vs Private Keys
Post by: g30duck on October 08, 2012, 01:01 am
Hello, I am trying to understand the system and am using GPG4win. I have been able to generate a public key (I think) but not a private key. Could someone answer the questions below from a GPG4win standpoint where applicable?

i) How can I create a private key? The part in Kleopatra where one clicks on "File" tab and selects "New Certificate" comes up with "Create a personal openPGP key pair" and "Create a personal x.509 key pair and a certification request". I used the first one to create the public key but have failed in making a private one.

ii) For what do I use a private key for?

iii) While I'm at it, I can try and create an encrypted message for anyone that wants to help me send and receive my first encrypted email (I posted a message for pine at the PGPClub but she's either not around or busy so...).

iv) Thanks...
Title: Re: GPG4win - Public vs Private Keys
Post by: waynegretski on October 08, 2012, 02:02 am
RUN > GPA.EXE

That is what you use to create your key. You do not need one right now unless you plan on receiving encrypted messages.

Title: Re: GPG4win - Public vs Private Keys
Post by: waynegretski on October 08, 2012, 02:06 am
Try sending me a message, This is my public key. I can only decode messages on a computer where my private key is present.

recap:
Public key - used for people to send messages to you.
Private key - has to be present in order to decode a message.

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.19 (GNU/Linux)

mQENBFByNOIBCAC7baq466fmeMf7sJDVNs4MY5IbAeBxYW+n5RkhAe66aegw3AxZ
keqbYvlw/GVVf4KPJCY0RYXd10gJYfhgL2JEgjFr8a9snCd/pjsxCQYClSviDK1E
G11OA5CfqTKkIzhf5XWuO3vjrpT9T03yFz8PdbG+OcPLLZA6wuBB3N31navpTgeP
LrjC72UUG01qU5rVxJkSCLRYfI9ZfI6NCb0Wm9nU6ahwjGW6UyV7Ge5YX4PgnBIp
HhAkAmrFVc84h6U7BYMAcPDsXv1j+lgkDpp9duOQruph8Lf0XQ2eyDn6t44LsVah
dwoZ20Dp1ECwrnqmQy0KwmUogxzh1yFzRtjjABEBAAG0GHRlc3Q0ZzMwZHVjayA8
ZmRkZkBkZHNmPokBOQQTAQIAIwUCUHI04gIbAwcLCQgHAwIBBhUIAgkKCwQWAgMB
Ah4BAheAAAoJEAvluk8E8Pu076YH/Rhdexcue1lArTqINEg60eTBrmeDuq5EqQX0
yNG4A/KP1/KTG+l34HPI2jYUnyyPajWbIjQa1EejVGIyC3CmTTc8AOF89dhxAl16
BeIOGbkCIpLx39YCN6VU8YeOzlqzwmCsqfnqz4iZ8XTumgb8xGiG2Ln8hVTqv20W
Kzpod1Z6PRiw0Eg3W1ytdJasb88/wlElIYFV0k3h3SQi3WUgLPHqJSYuQUU8Yd3t
r1v69+7mM4he+iKEqaaapXUxxP2iiOsw/I1+XzQxBdmFYpdAC+7mNV5Lu6VmRdfN
jHSnwwte+G3r6n/PVtkFeRz+aKaZI0zuIMUdeUwN+Jw+2Yq3SxS5AQ0EUHI04gEI
AL7gmn3LRqbcVBYeOrFlAPI1Ti0mv2zUJV/gqTdmtLLS/Q/GhUd4RHn/igrupbMH
M9EudtPQzh1ZGLu222Y9dHiVyKOClyJWdJU5XhUOwEyYA2jLQ05BnF9+hNtJJnQD
gGObDLdMaUsjPgHImHu47HgWZ6E0SCx+cv2ZGrUR0iAPiOes6WLQlyuweSkwAbE7
7qNLQGpi+K/ynhR3s0saw6tpukevkR8HZySqBWhcPOghwDdyO+J1wwM1f304jxof
Hgzf3fQVSqSIsL0G9NwJONLB1fYtiWrQMy2vuAJARCy8MkWt0RcVdl2pAAiQ1XWq
Xi4oWo66GAfz3yttguxWZ4UAEQEAAYkBHwQYAQIACQUCUHI04gIbDAAKCRAL5bpP
BPD7tEWUB/9ZcqR4Dq2NrNuFV3V/fhmQT6ifNSvvmJE+V2THGy9jkG2ibJtXmdLC
V9uRJSHtEr+mrce8xWyGhQdhB994CuTj+mHMc21CsPEcnOTJecGad+dw6Bw8NufJ
MaLrHJUG4oG+TxawaOblbYcz6PaDyY7Ngolji1tSQYOpv8KxEbHRy86ehHI8poHG
QkWDzVXW+36wSCdahzCx6uKipsQPwIiLhMBSuf8j0XpLCWyNHcrdVtobScdY8ObI
JvCVvg0788MXlRQyu4H1tpia+pFjoAMyxdpWrng4iKXv4hxbk7Gl9Stkuw98NuJW
ALm62oXgMzv2yIwVOe/R0GNmlp4EFFqo
=BaT8
-----END PGP PUBLIC KEY BLOCK-----
Title: Re: GPG4win - Public vs Private Keys
Post by: g30duck on October 08, 2012, 02:54 am
Hello wayne, thanks for offering to help. I have encoded the below message to your key (and mine) so...were you able to decipher it?

-----BEGIN PGP MESSAGE-----
Version: GnuPG v2.0.17 (MingW32)

hQEMA5fOFCXjsG3aAQf/UNOwTE69JR0EBGwcK7KLYPBNpxVQW/I/sE601VEIlEbs
qGL5xQ6MKcFbaPLsS9h/pg9QMXzqQZ44oAeABdT6EuuOfHftmJx3iUFsQCRbxyKS
wMy1UCHr+bnOf3mFlXSdzKohg3sQM2jEKDiTCX12KjmejEN5YbHs7HM3/q74niOv
aJmChmUMqBoa++ZS3s/726nYNuvwTOXeAqVBRPBYVy8CrcohxGWCDpO75NDslmGl
TMEYAFvjBTcy+SI+k4mTYiWzGgyzISMB4lXOJGdlLtJof/XN0B4jFyg54jfYyi+q
xWOEnafLDtsqTsPhXMwfrp10QHOTPEjZDGlCjcSyfIUBDAPH58/5tDtqFAEH/iib
LAKSGO8TqfOHWzCvKW+rPTxRW9oNp0nCHlVjWOIuWxxhuZPc/ynXMsHt+GbhAPvb
oPfRMJZ1dUJJDRXpdEJq3GSzaC7Z/NZ2PqBhl+7Gj+59LSxG35Q7FtqZXl9ZhAgp
R72Ij0XtuP7XB0iYJT0I3mbnEzfc+qIVFbo9cAWdYtmrjGt/2j2nMevymGrcccY3
lFUNyA97GVKisTm5wtCyBCO5EHy0d0MJzowopARtDET4QfxHSIjegyQdPRFxeDKX
hjaSnTPuSJuB2ReZVN1QWu4J12hcTEI98tsYuRkLgQ9fTU/Xakrk6Lmfw+I2qW6g
D8cNRjbrjWidWQ4MHUXSUwF5UC/hK3C/i/osLh0USoGbdfYvuWHSC+fWlZjZfqLU
2U8fRmsDRDtxmaPHMwh4gjz1DHKuunnY6Ycgfh85OpOPPRusZyJyWcuHEik79nTj
w6EW
=dMpr
-----END PGP MESSAGE-----
Title: Re: GPG4win - Public vs Private Keys
Post by: g30duck on October 08, 2012, 03:10 am
Private key - has to be present in order to decode a message.

and wayne, when I drag my mouse over my keys, GNU says "The key has both a private and a public part" so do you know if this means that one does not separately create a prvate key? As in when one creates a public key, the private key is already in there?

Or am I not making any sense here?
Title: Re: GPG4win - Public vs Private Keys
Post by: Nightcrawler on October 08, 2012, 06:38 am
Private key - has to be present in order to decode a message.

and wayne, when I drag my mouse over my keys, GNU says "The key has both a private and a public part" so do you know if this means that one does not separately create a prvate key? As in when one creates a public key, the private key is already in there?

Or am I not making any sense here?

The private and public keys are both generated at the same time. Do yourself a favor-- ditch gpg4win, and Kleopatra; use gpg4usb instead. Kleopatra is garbage.

gpg4usb homepage: http://gpg4usb.cpunk.de/index.html



Title: Re: GPG4win - Public vs Private Keys
Post by: g30duck on October 08, 2012, 08:51 am
The private and public keys are both generated at the same time. Do yourself a favor-- ditch gpg4win, and Kleopatra; use gpg4usb instead. Kleopatra is garbage.

gpg4usb homepage: http://gpg4usb.cpunk.de/index.html

Thanks nc but why is GPG4win garbage? I mean it works so? (I'm not trying to be weird, just trying to understand)
Title: Re: GPG4win - Public vs Private Keys
Post by: Nightcrawler on October 08, 2012, 09:20 am
The private and public keys are both generated at the same time. Do yourself a favor-- ditch gpg4win, and Kleopatra; use gpg4usb instead. Kleopatra is garbage.

gpg4usb homepage: http://gpg4usb.cpunk.de/index.html

Thanks nc but why is GPG4win garbage? I mean it works so? (I'm not trying to be weird, just trying to understand)

gpg4win works, but the problem is that its' interface sucks.  IIRC, Kleopatra is installed by default. Kleopatra operates using the clipboard (as do most gpg frontends) but the problem is, that when you encrypt or decrypt, while the data is transformed on the clipboard, you don't get any feedback from Kleopatra that it has done anything.  Guru has pointed out that Kleopatra also generates old-style RSA keys.

gpg4usb, on the other hand, is much more intuitive, and easy to use, even for newbies.  You have a toolbar at the top of the screen, and two panes. The left pane is where you compose or paste your message, and the right pane shows the keys on your pgp keyring.  To encrypt a message to someone, all you have to do is compose it in the left pane, put a check in the box beside the keys you want to encrypt to in the right-hand pane, and click the encrypt button.  It doesn't get any easier than that.

The typical newbie can be up and running in 30 seconds with gpg4usb. If people were using gpg4usb  instead of gpg4win, more than 90% of the threads on here pleading for help with gpg would simply not exist.

Title: Re: GPG4win - Public vs Private Keys
Post by: waynegretski on October 09, 2012, 03:10 am
Fear stalls all but a few.
Title: Re: GPG4win - Public vs Private Keys
Post by: g30duck on October 10, 2012, 04:27 am
Fear stalls all but a few.

Indeed....thanks wayne

And hi everyone, I'm here for a couple of hours and can help out if you want to try your hand at sending encrypted messages. My public key is below:

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.17 (MingW32)

mQENBFByPaUBCAC7caeS2LuoTgOmOeVyAYAQz3UFzaPtIt8GgxuoI4/tV1kc5C5G
sAHS9jlZD4Fi4LmFARjvLmYEXLTiuCFXU2kcxm46osfzJS/88HLDAJpe6IErnmEi
zTGOE3NEH0uEDblR0kd/daavsc2mqO9l9ER0n7APcrb6vMkqcDQ1jj7Bs4rCjybx
YVwVaqbp9OdkrprRFrK0ItAD8SVB8BXb4uebZcAPVDrLFgq9Fgob3RQaZ9t8w3Ly
OMsidv4X90lq6h2uTzCcelMG1i3r3qSYDconorWzZOnM36s0ORIIFu3Cfdoar9Qh
YWRnUhMPeT3yVpbWglcZJv3bPuUqIoDbes5xABEBAAG0GXRlc3Rwcml2a2V5IDxu
b0Bub3dheS5ubz6JATgEEwECACIFAlByPaUCGwMGCwkIBwMCBhUIAgkKCwQWAgMB
Ah4BAheAAAoJEEoZcRZleKhM7DkIAJQKufBCl9zckY1ZHgud3N2mhiLZ5zzUM8UR
oBS76rJdohMuJe/PUx4BGYN8LKrRmp5+43lwwq64wYIft8NI2NOuRh6AkSBl3+JX
asaBhvZLlj5+c4mXw3L1gI8hO0dwTarVben7F64w1qTRZSRqy20tadhO/Kc2sR/6
WfnobkRZ4vqbVkhVlgYDWy20Y9MI5KxgHpUq1vtt7i1pdvvUWl/x/36CNH2Sw8l9
HfRQkN3mxHNvZSn5k+/L2fl2oIuMSjUY7w8e3l5dTxUaYVNGoS3Kw7DKBmwywOji
wozbt/IROnzm0B0cJaF+HiW6HPX7s1BgLRSHFBkdLYZFVXqIEla5AQ0EUHI9pQEI
ALuEGdLhG0U4udXgnHwFYMClsD/Ylv3ibZ6vteP2SfR19nVx2q86samB9LEe+D82
tcjEt7Kz8KgZ09opyf648g/MwKx2B2dUpRDchojsk+RE6GE7L67cT5ft3/35oAl1
oKSJHC1W5HZeQa689n/r7288KumvurkkD06LVr4u+SM9UVDuu/VDFHyuZ43XqrvB
8xbWOwjqBFIedVdzXwY29IrnKRHx0K9hjRHx4GTiCONIL7LHzoPnr38mNw8rCF2p
OH3FdCTVfOYgqhACON+OxNHq1TC0VO0neQIg4QzBONtrwZP+FM+pyew9Ik4l7rX/
FqXzfXJKSU00maL9kWSXqc8AEQEAAYkBHwQYAQIACQUCUHI9pQIbDAAKCRBKGXEW
ZXioTBBwCACs6BaqGk//qHaCoLxZtStwMHVygGUXD0RIiYT7FEqNTuyhv+DSCW+Q
9j6mbQAniLEDNZ8/gw879ZiKqfu7UbT1LajICIHtwSvlKyNeyBpxYn4uqCoAjXpA
tpAeQsagqSAkizY68w3fdLBrx7RNtIGbW9eOXYhy4CKKBDiN68KaUmcwHGLXa+dW
W0PPPsfBvHwQ/47rG1YhK5p+Ukrj5TcbAjkhcywyp9Z7e7ySSnpW/U9nQ8Ri0Ph4
KZkaSAXTpWLZMNYoeVj+ElX+icYiX5OgTPvcl2PfpwAkqJ+T189HpBLQL0gH3WxL
EBT2WRZzERqjk5QJz5a/SN/HJPC8HAKd
=ma/H
-----END PGP PUBLIC KEY BLOCK-----
Title: Re: GPG4win - Public vs Private Keys
Post by: Nightcrawler on October 10, 2012, 04:59 am
Fear stalls all but a few.

Indeed....thanks wayne

And hi everyone, I'm here for a couple of hours and can help out if you want to try your hand at sending encrypted messages. My public key is below:

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.17 (MingW32)
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=ma/H
-----END PGP PUBLIC KEY BLOCK-----

-----BEGIN PGP MESSAGE-----

hQEMA3ZdVYYqlReJAQgAjS4bM4hSG+iqaZqg9VAwWlu0s2T4wP0WCoQjvHHEArHB
PAqikZ/QGqWrmge6mBf/LNNfCTnFXQU+7s9E/r6Cq7svGyhyr5wwQ4lL5APCNlW+
POwAqy0GtLLjg4iuxX9m0Brq2hOK7DAMnPmv7PqJtHX9hFkSf0ndKqfrTXJCLqy5
7fx3EhkZSev/RwNpTJ2xi7COGEYLlVVBMEu1bz/uTzV+akYKKtEzL1+nNBRV8YDr
lCZrWZ83yxwXX7U7cXz0P34vYCrid6AvgGTB9FCbb4eOhee5w2BVZTvUUF9eByd0
pxjtsHmZUDDLoeOEuvKkR1BDlIVn0Xz41bn3VJijooUCDAP8o3w4/5jD6gEQAMh9
QdqSCPrqDTHvFtB1qJkIHr6DM1/qIghiEa/23ntvxvDxWOjKMNexSnJBeSlQ/4Xr
MNgIX8qpDM1wsq9/d/6BLFd32qIa1AUdTIEubYJ81+lLYbdB76HJwYFt8v5YJnIQ
CipElKMoP2WI3aG8jGTl6sTGmdyNdRXmeYANxbNq1nLXtwltI5soEKHk0oPFhuyV
B99DG+EVSBl0dwYFq3E1kLNQqKhfrn5KvZ3Lev1KxifAh4/j3UXshjYXFgiU16Iu
SZZhb6AK+F8Wc68QRBrwh33jA86XpZ5BZMzmhhggfCtOloJf0umGzERYqgxAm3w+
J0prLYY/Er3VXCoLrSiMCH1o67woO489ethCv2g6MT0kxM+hYBkGm2KE7oSKTbk/
RYsQZMFOIU0ynuIW0O1TeqP01RTQehnX5t1rPubDs6BJZlSi1+bQ+1tRu7TR1KWA
FIIsEwuv3SVHf8QJi6UVJ7cuGunnaV4tiLKCK846Y/zpUPzPISGbXf6iQbbvWo3W
RlaXxOanhRRvXFw9z+EEAF2VflEMwI6oqKwo9sGmeklR2xxPIwcjeLyproTL6UkX
igT0nmR0BpO11KEnIb4t8RuuGV38k5wbATT96NqgmODRFnK5w5W18p9olqwvsCGX
aL7RpT4TyYDMNkI6YCBwAr16IcbEZOZOvcPf9HvJ0sA8AUMixQcLUMneg8ShIKnR
NTUjgEH4s/mh4Za968/nWSucNnFsATdlvxrvJQ/LV7hCjoHQQuCvhg81GFa9dhdQ
wVgJG0X0bZGnp0XjDf7Ei4EcfzUENQAI/k29rDu9Dp6vM5ozCPCADwCsKepEUZ7w
nTjMNs4sykFML36rzINSp7Xi9Y+0Uw+bJ0m5lK3iqCISydyNMM79fNmSA8y60s6h
WQkDq1Ji9IrUv9JJ6HKkPCb8WO/o3IrjMKGwAcYBCTNDdKNUT14lA2uPTR9+zNdX
KMC+oCYFlK61nwLJqyE4BS63SZlIFj/1xOxUMX5d7h33rXpKujAi80UkiJo3
=BdTx
-----END PGP MESSAGE-----

Title: Re: GPG4win - Public vs Private Keys
Post by: g30duck on October 10, 2012, 05:20 am
That's true nc, just testing is all...I will create a key with appropriate information once I get past the testing stages.
Title: Re: GPG4win - Public vs Private Keys
Post by: Nightcrawler on October 10, 2012, 05:37 am
That's true nc, just testing is all...I will create a key with appropriate information once I get past the testing stages.

Fair enough.