public
/
presentations
5
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

Compare commits

base: public:bfe3aca5f76c84ed1a6fd20999c8448775492fb4
Branches Tags
public:master
public:terraform-workshop
public:feat/add-openpgp-workshop
public:ryansquared/editorializing
..
compare: public:d0ce07d4034b9bbc9ea3a9227819f87ed942b37e
Branches Tags
public:terraform-workshop
public:master
public:feat/add-openpgp-workshop
public:ryansquared/editorializing

No commits in common. "bfe3aca5f76c84ed1a6fd20999c8448775492fb4" and "d0ce07d4034b9bbc9ea3a9227819f87ed942b37e" have entirely different histories.
bfe3aca5f7 ... d0ce07d403

1 changed files with 8 additions and 10 deletions
Show Stats Expand all files Collapse all files

18
openpgp-workshop/index.md
View File

@ -77,12 +77,12 @@ developed by Phil Zimmermann in the 1990s.
* `gpg --list-keys` * `gpg --list-keys`
* `echo "super secret text" > test.txt && cat test.txt` * `echo "super secret text" > test.txt && cat test.txt`
* `gpg --encrypt --recipient <email/ID> test.txt` * `gpg --encrypt --recipient <email/ID> test.txt`
* `gpg -er <email/ID> <filename> && cat test.txt.gpg`: notice it's a binary * `gpg -er <email/ID> <filename> && cat text.txt.gpg`: notice it's a binary
* You can use `--armor/-a` to encode it as ASCII so you can send the encrypted data as text * You can use `--armor/-a` to encode it as ASCII so you can send the encrypted data as text
* `gpg --armor -er <email/ID> test.txt && cat test.txt.asc` * `gpg --armor -er <email/ID> test.txt && cat test.txt.asc`
* `rm test.txt && ls` * `rm test.txt && ls`: remove original file
* `gpg --decrypt test.txt.gpg > test.txt` * `gpg --decrypt test.txt.gpg && cat test.txt && rm test.txt`
* `gpg --decrypt test.txt.asc > test.txt` * `gpg --decrypt test.txt.asc && cat test.txt && rm text.txt`
--- ---
@ -143,10 +143,10 @@ developed by Phil Zimmermann in the 1990s.
--- ---
## Basic: On-board generation: ## Basic: On-board generation:
* YubiKey offers generating keys inside of the YubiKey * YubiKey offers generating keys inside of the YubiKey
* Cryptographic attestation keys were never exposed available: https://developers.yubico.com/PGP/Attestation.html * Cryptographic attestation keys were never exposed available: https://developers.yubico.com/PGP/Attestation.html
* CON: can't back up the keys * CON: can't back up the keys
* PRO: simple setup * PRO: simple setup
--- ---
## Advanced - cold / virtualization ## Advanced - cold / virtualization
@ -225,8 +225,6 @@ developed by Phil Zimmermann in the 1990s.
## Further Studies ## Further Studies
* [pass](https://www.passwordstore.org/): Unix based `gpg` password manager
* [OpenPGP for application developers](https://openpgp.dev/book/): Deep dive on OpenPGP * [OpenPGP for application developers](https://openpgp.dev/book/): Deep dive on OpenPGP
* [Sequoia](https://sequoia-pgp.org/): alternate OpenPGP implementation in rust * [Sequoia](https://sequoia-pgp.org/): alternate OpenPGP implementation in rust