OpenPGP.foo
openpgp.foo
Information Security
Claim pageClaim
Follow
Overview
News
Salaries
Products
People
Growth
Offices
Financials
Overview
A subjective and somewhat random look at OpenPGP #This site is a starting point for any readers who want to learn about OpenPGP.OpenPGP acts as a building block for a diverse range of privacy and security infrastructure, including package integrity validation in many Linux distributions.
News
File encryption with SOP/OpenPGP (and age)
This article explores file encryption with Stateless OpenPGP (SOP) tools, and contrasts this use of SOP with the age tool. SOP is a CLI standard for (vendor-agnostic) OpenPGP tools. There are numerous independent implementations of SOP, based on a variety
Read more
Report
rsop now decrypts GnuPG-proprietary messages
This is a short writeup about a new feature in the rsop CLI tool: Since version 0.8.0, rsop can decrypt a GnuPG-proprietary message encryption format. GnuPG sometimes produces non-standard encrypted messages # Unfortunately, under some circumstances, GnuP
Read more
Report
Inspecting OpenPGP certificates
This article outlines using the new rpgp CLI tool to inspect OpenPGP certificates (aka "public keys") 1 . The rpgp tool is available as part of the rpgpie crate. This article describes the tool as of rpgpie version 0.6.6. rpgp/...
Read more
Report
Using a second OpenPGP card for my primary key
Personal blog: One more OpenPGP card # This is a writeup about my OpenPGP card setup. It's a mix of general observations about OpenPGP card devices and a report about setting up a secondary OpenPGP card for myself. Disclaimer # Th...
Read more
Report
Post-quantum cryptography
Post-quantum cryptography (PQC) # Post-quantum cryptography (PQC) is a branch of cryptography that develops algorithms which are thought to be secure against attacks using hypothetical quantum computers (which don't exist right now, but may be develop...
Read more
Report
OpenPGP mechanisms
OpenPGP mechanisms # OpenPGP acts as a toolkit that offers a variety of operations, which may be combined to achieve a variety of goals. Encryption # Encryption, which provides confidentiality, is one central facility of OpenPGP. In a way, encryption is t
Read more
Report
oct-git - Git signing with OpenPGP cards
oct-git # Git signing and verification with a focus on OpenPGP cards. https://crates.io/crates/openpgp-card-tool-git oct-git can act as a replacement for one mode of operation of the gpg tool, specifically as it is combined with the git version control to
Read more
Report
ASCII Armor
"ASCII Armor" # One of the properties of OpenPGP that is recognizable to many is its "armored" format. For example, certificates (aka public keys) are often seen in armored form like this: -----BEGIN PGP PUBLIC KEY BLOCK----- xjMEaApiDxYJKwYBBAHaRw8BAQdAL
Read more
Report
ocsa - SSH Agent for OpenPGP cards
openpgp-card-ssh-agent # A standalone SSH Agent for use with OpenPGP cards. https://crates.io/crates/openpgp-card-ssh-agent This SSH Agent tool aims for simple and enjoyable UX (including desktop notifications for touch confirmation). It serves the same p
Read more
Report
Exploring signatures
Data Signatures # (Data) signatures are a cryptographic tool to demonstrate the authenticity of some data. In the narrowest sense, a data signature shows that some signer has used their key to issue a cryptographic statement about some data (such as an em
Read more
Report
Show more news