Neatly managing and handling PGP/GnuPG keyrings
GUI Key Management
If graphical programs appeal more to you than tools for the command line, you should take a look at Seahorse (Gnome) [18] or KGpg (KDE) [19], as well as the GNU Privacy Assistant (GPA) [20].
You can manage certificates (Figures 4 and 5), as well as GnuPG and SSH keys, with the compact Seahorse application. It is integrated within the Ubuntu and Gnome desktops. To keep your local GnuPG keyring up to date, Seahorse can synchronize the available keys with the key server network on request with the Remote | Match and share keys menu item.
On first sight, the GPA operates more comprehensively than Seahorse, but concentrates on GnuPG key management (Figure 6). In GPA, for example, you can add keys, modify and sign them, or match your keyring with the key server network.
Conclusion
Your keyring is always up to date with little effort using GnuPG and its graphical front ends. To browse for more information, I recommend the GnuPG wiki [21] and an article on OpenPGP best practices [22]. The question of where and how you can store private keys and their related files securely has remained unanswered to this point.
Note of Thanks
The author thanks Sebastian Andres, Wolfram Eifler, Sven Guckes, Gerold Rupprecht, and Martin Ebnother for their suggestions and criticism before the publication of this article.
Infos
- "PGP with GnuPG" by Martin Loschwitz, Ubuntu User, issue 24, 2015, pg. 56, http://www.ubuntu-user.com/Magazine/Archive/2015/24/Reliably-encrypting-emails-using-GnuPG
- Key signing party: https://en.wikipedia.org/wiki/Key_signing_party
- Monkeysign: http://web.monkeysphere.info/monkeysign/
- "Submitting your GPG key to a keyserver": https://debian-administration.org/article/451/Submitting_your_GPG_key_to_a_keyserver
- GnuPG: https://www.gnupg.org
- GPG options: https://www.gnupg.org/documentation/manuals/gnupg/GPG-Options.html
- Key servers: https://sks-keyservers.net/status/
- GnuPG server pools: https://sks-keyservers.net/overview-of-pools.php
- "Creating a new GPG key with subkeys": https://www.void.gr/kargig/blog/2013/12/02/creating-a-new-gpg-key-with-subkeys/
- Sending encrypted emails using Thunderbird and PGP: http://www.wefightcensorship.org/article/sending-encrypted-emails-using-thunderbird-and-pgphtml.html
- Mutt and GnuPG: https://dev.mutt.org/trac/wiki/MuttGuide/UseGPG
- The difference between electronic signatures and digital signatures: https://www.globalsign.com/en/blog/electronic-signatures-vs-digital-signatures/
- Tank, Margo H. K., Sara E. Emley, and R. David Whitaker. A Brief Guide to Using Electronic Signatures in Securities Transactions, http://www.buckleysandler.com/uploads/1082/doc/A-Brief-Guide-to-Using-Electronic-Signatures-in-Securities-Transactions.pdf
- X.509 certificates: https://en.wikipedia.org/wiki/X.509
- Enigmail (DEB): https://packages.debian.org/jessie/enigmail
- Setting up OpenPGP encryption in Thunderbird/Icedove, https://wiki.debian.org/Icedove#Setting_up_OpenPGP_Encryption
- The GNU Privacy Handbook, Chapter 3, Key Management: https://www.gnupg.org/gph/en/manual/c235.html
- Seahorse: https://wiki.gnome.org/Apps/Seahorse
- KGpg: https://utils.kde.org/projects/kgpg/
- GNU Privacy Assistant: https://www.gnupg.org/related_software/gpa/index.html
- GnuPG wiki: https://wiki.gnupg.org
- OpenPGP best practices: https://help.riseup.net/en/security/message-security/openpgp/best-practices
« Previous 1 2 3
Buy this article as PDF
(incl. VAT)
Buy Linux Magazine
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters
Support Our Work
Linux Magazine content is made possible with support from readers like you. Please consider contributing when you’ve found an article to be beneficial.
News
-
Canonical Offers 12-Year LTS for Open Source Docker Images
Canonical is expanding its LTS offering to reach beyond the DEB packages with a new distro-less Docker image.
-
Plasma Desktop 6.1 Released with Several Enhancements
If you're a fan of Plasma Desktop, you should be excited about this new point release.
-
SUSE Offers CentOS 7 Support with Liberty Linux Lite
SUSE's Liberty Linux support offering now includes CentOS 7, which means businesses won't be forced to migrate those servers for some time.
-
Ubuntu's App Center Finally Supports Local Installs Again
If you regularly download .deb files and would prefer a GUI method of installing, Ubuntu has your back.
-
AlmaLinux Now Supports Raspberry Pi 5
If you're looking to create with the Raspberry Pi 5 and want to use AlmaLinux as your OS, you're in luck because it's now possible.
-
Kubuntu Focus Releases New Iterations of Ir14 and Ir16 Laptops
If you're a fan of the Kubuntu Focus laptops or have been waiting for the right time to purchase one, that time might be now.
-
NixOS 24.05 Is Ready for Prime Time
The latest release of NixOS (Uakari) has arrived and offers its usual reproducible, declarative, and reliable goodness.
-
Linux Lite 7.0 Officially Released
Based on Ubuntu 24.04 and kernel 6.8, Linux Lite version 7 now offers more options than ever.
-
KaOS Linux 2024.05 Adds Bcachfs Support and More
With updates all around, KaOS Linux now includes support for the bcachefs file system.
-
TUXEDO Computers Unveils New Iteration of the Stellaris Laptop Line
The Stellaris Slim 15 is the 6th generation and includes either an AMD or Intel CPU