mirror of
https://github.com/Brandon-Rozek/website.git
synced 2024-12-24 13:31:03 +00:00
105 lines
No EOL
3 KiB
Markdown
105 lines
No EOL
3 KiB
Markdown
---
|
|
title: "GPG Keygen"
|
|
date: 2020-04-11T19:35:05-04:00
|
|
draft: false
|
|
tags: ["GPG/PGP"]
|
|
medium_enabled: true
|
|
---
|
|
|
|
GPG keys have a variety of different uses from sending encrypted emails to verifying git commits. Here I'll show how to create a public/private key-pair. This post assumes you have the `gpg` client installed.
|
|
|
|
Type the following command
|
|
|
|
```bash
|
|
gpg --full-gen-key
|
|
```
|
|
|
|
This will then show
|
|
|
|
```
|
|
gpg (GnuPG) 2.2.12; Copyright (C) 2018 Free Software Foundation, Inc.
|
|
This is free software: you are free to change and redistribute it.
|
|
There is NO WARRANTY, to the extent permitted by law.
|
|
|
|
Please select what kind of key you want:
|
|
(1) RSA and RSA (default)
|
|
(2) DSA and Elgamal
|
|
(3) DSA (sign only)
|
|
(4) RSA (sign only)
|
|
Your selection? 1
|
|
```
|
|
|
|
I generally recommend selecting the default option. As cryptography standards change, I would expect the options presented to you to differ from my selection screen.
|
|
|
|
```
|
|
RSA keys may be between 1024 and 4096 bits long.
|
|
What keysize do you want? (3072) 4096
|
|
Requested keysize is 4096 bits
|
|
```
|
|
|
|
For keysizes, the bigger the more secure. The tradeoff is in the time it takes to perform the cryptographic operations.
|
|
Since I rarely encrypted very large inputs, I went for the highest available option as the encryption time to me
|
|
is negligable.
|
|
|
|
```
|
|
Please specify how long the key should be valid.
|
|
0 = key does not expire
|
|
<n> = key expires in n days
|
|
<n>w = key expires in n weeks
|
|
<n>m = key expires in n months
|
|
<n>y = key expires in n years
|
|
Key is valid for? (0) 1y
|
|
```
|
|
|
|
I highly recommend that you set an expiration date. Not only does this allow for the key to become invalid if you happen to
|
|
lose your private key, it also announces to the wider world that you actually use your GPG key.
|
|
|
|
I try to set my key expiration dates to be a year out.
|
|
|
|
```
|
|
Key expires at Mon 11 Apr 2021 06:42:01 PM EDT
|
|
Is this correct? (y/N) y
|
|
```
|
|
|
|
As a quick sanity check, it'll provide the date that the key will expire.
|
|
|
|
```
|
|
GnuPG needs to construct a user ID to identify your key.
|
|
|
|
Real name: Brandon Rozek
|
|
Email address:
|
|
Comment: Git
|
|
|
|
```
|
|
|
|
All the fields are optional. Fill them in as you wish.
|
|
|
|
```
|
|
You selected this USER-ID:
|
|
"Brandon Rozek (Git)"
|
|
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O
|
|
```
|
|
|
|
Another sanity check, to ensure that you set your user information correctly.
|
|
Keep in mind that this information is included in plaintext as part of your public key.
|
|
|
|
```
|
|
We need to generate a lot of random bytes. It is a good idea to perform
|
|
some other action (type on the keyboard, move the mouse, utilize the
|
|
disks) during the prime generation; this gives the random number
|
|
generator a better chance to gain enough entropy.
|
|
```
|
|
|
|
Do as it says, start going crazy.
|
|
|
|
```
|
|
gpg: key IFMWDHXYSKTICHSE marked as ultimately trusted
|
|
public and secret key created and signed.
|
|
|
|
pub rsa4096 2020-04-11 [SC] [expires: 2021-04-11]
|
|
FDMGHVYEIWPDKVT83ICUZOEKSLFIVYQALKZMNTYR
|
|
uid Brandon Rozek (Git)
|
|
sub rsa4096 2020-04-11 [E] [expires: 2021-04-11]
|
|
```
|
|
|
|
Congratulations, you now have a GPG key set. |