5
taigrr
2y

Inspired by this post's comments: https://devrant.com/rants/1907870/...

I wanted to start a pgp key-exchange post for devrant users. I'll start.

Comments
  • 3
    0X5C78C66869422D4E
  • 3
    0xe7b585a75d8462ab would be me 🙂
  • 2
    Will post mine but i just woke up.
  • 2
    @condor how did you get that type of key from the app ?
  • 2
    Wait. You already have mine. I posted it in that rant of mine.
  • 2
  • 2
    @Haxk20 I've searched for my email on pgp.mit.edu and used the hex value that's in the link to it. So http://pgp.mit.edu/pks/lookup/...
  • 1
    @Condor -----BEGIN PGP MESSAGE-----

    hQEMA4OXYbYnhJLnAQgAoKKoCboqvxKa7aw7ImcONERRI9jOOV0ICFnPuGHfY88p

    8uDSqp8HoyGBEGP4D3htlsXrrzwy1FWHMQ9H+2glstbjim7gsw6GOhoj6G6Wdpe5

    j/osqEjO6s1vBr3GABfUO8iJV9naqO6O8mtg6N1mdAwOUAr9DAVnMvPeEZBXQVNN

    4fC/nmyG1fYzEVfPe0PAGVC6RLNQZwkWUoykb07PX+cFu8JZCPxZLiOw0+QLZpbb

    FqEcfIV8UioPWu3UPP7w4vlK1cHoT63g8LAPHmcZwjPXTwttdwL4luiUeBM8VbF/

    IzEjrbvpVq37zrebz7HgNskWgpFTuScwfLzyTUCHNtJ8AeDtW3nnspt6hLf2W357

    vKEQi07l+4yRG+Bn5yi68v8P0SlEnvLHRaqCY0MfWLJpBa14BEEEhTUSFE5taMfv

    HHbe0qCCoKBuZ18QnlOt1QxykoGGA5Z5mJvbDmjLYcDXSnoy1wvFvCH+sp2CWXdr

    3PcNMD6KwLLnnVe7Bg==

    =WaHX

    -----END PGP MESSAGE-----
  • 1
    @Haxk20

    -----BEGIN PGP MESSAGE-----

    hQEMAx7fPoM97tetAQf+IcLelHmWVq0bXRSLAoe/VBKJuTi0ezX+9hlBSqNd/1ZV
    JtjyTPYM4Z7tIGs6Hd7YlaYOfr3s5gSmGcwBdarJhAmhhkE0PmYzfMUYN9O9OuEP
    bc4v0W0LdqL3ClL1G5N/sOu5o7mlFhiBIIEO3zw5gDp2GzjE3cIgPd412vVi7NP2
    d61fFT2aUnIBuw/6CfztffYzwWgApep/vhZA8x829IdMc/6dECY4xJXP33LDrAfz
    lhU9L0pr4aUQds+RkB7QZNFXGiGF/rbwZW6MGy24Xaziu45x4aaqwWMBBYLrr4kV
    66yXBwesQLg7k0utediRDk8Lz5Skoh82HjYFl9zIhIUBDAODl2G2J4SS5wEH/21+
    hWgHhyEXeYzi3kvyT+SJ/KTWxFaL3667V6n2fDykmhLgIYlX/CJrXMrKV3CPJFbX
    ZjP4QMXjVWaQf35/duXwRy/K/7KxTgGvQ/f9ccYNDYIG7JfImbcvkk/hy9B5gUeg
    XuXlbJwn0z+WFpiNuoJvuLpu9608kslY8AmpTlF3uzLCuE1dZ8ukzN0rE7yNjtpY
    pccOaEfAuRmmC/mO1kvQDrmMhUCGGsbyPTLRFBMObBVpmdezr8Jhzw766MNf8JFy
    B/utEI5zSqkt9Sqjic4OzqyAAqbl11wH5sFzFcNplvgXofUHj7IHds7TeUYHhgiu
    w0uf6Mvq62Q83c+hUUbSwUkBqyJ1SCCM+RCoP/1n9aSLeMq9nZa/uGlrKUfrd5nS
    ndodO28JZfEr9VvJOWQdQAFM/4wDkDaucWEqixi9YT2JcpZx5kRhqiQ5JizHJGrd
    /zQQ1wluhNr5cwLDMzUz7Auhg5oFiBrxeHqodqOsb0Ga8Eo0iSUx49dr9wqYHfT/
    LT/PWd7cH3ZIVjJE4Hsaqo70blEkG0PpHr31EBZzRXNueu95skh8yzEC7KfPhdWE
    L0MtF2xwIyvBCuBdn2zas4YAewdPlANTciUeaKGvZOw2WOdiu5DNODScAFIPYKzn
    lIz0rmpVz5o/h3iqfuDIsCuRocZz6RXnDClMWv6LOkmY29a1oCkyjpNu8htPvwk0
    bB05XcTM9rlOwgQn5j+8x51QrCaDky096jV1EnskuhrOGMBy8t70tJbsCvKkFN7N
    DgS3osysu8mMKIg+xnStgjm59EzYlvilhjDTS6I5cT8qNoL93txizH89PBKcDy54
    Mdv5mlKHSU1pShgh6mmZTn7McA4K7o8iO47V53mkNI2mRBcPYouKv8C79njXCChS
    4P3lupTaI9L3TL6QBnCy6e2zU4Cr+7KGxkgdr4rEk1UsA1hPRUwFS8DvTwSi7FO7
    mljm6NsGS22nrMJGjoVsK4k56w4HcDnP6jis2PFWUuorcmO/HDrSIfYJJUkS1aHo
    HBEfDZhYCd7dNQ==
    =PMM2
    -----END PGP MESSAGE-----
  • 2
  • 1
    @Condor

    -----BEGIN PGP MESSAGE-----

    hQEMA4OXYbYnhJLnAQgAi5+bJ8l5cu9+ePW0KDwkbm3JLtNphfQoWvpcuq8pXRM+

    GpncyE0XDOSDtXUYJHmQRQrrlbc7VMNI/ZINgSrEIf5JR5Tm/ueE94Akf8r93rs0

    x8W1y5kf+X5JPPb1iDUH0/0gLiWaLQDO4dmGK+bwseR35/M28uvkdDQK3yA09BMn

    6EcjshoQUI1wjld33i1YD6Y5HrglnIg2FiPzqDkGAk30HzY6YFHc9xwThCl3S+qH

    9O3Dv5T7dpQNN6kCp5ER2AqtKccAoMTfHY+uN8z/kCtL795NdIbU1RwjRPO9d7qR

    8+FxBxOiSsJGndQcSv9CCFo0bejkqiagjoY3LxlziNJ/AXbX0fAIoza1kqH/bkKg

    ThvSYUWT7qvLm7izTCWL0Z4SBE7h72t69IDS+epnwocuJhKFYe8H1ECDLydYiMIw

    Au/trdLi0+bOwaqUx6NoVD3EKlizgjqGsdUbO9ykG5QXNqAI43df1vgpdOiyK4/h

    igdlV1SguWiO5dJwceA05g==

    =5WK8

    -----END PGP MESSAGE-----
  • 3
    @Haxk20 @Condor is there a method to make the message encrypted such that it is decryptable by all who have your public key?
  • 3
    @gitlog No ! PGP works this way:

    You have two numbers (pub key and priv key) you generate priv key or just get random one and then you derive pub key from that. Even tho pu key is derived from priv key this process cannot be reversed. And so making it very secure. Also when you encrypt the message with pub key this means that it can be decrypted only by the priv key because pub key which was used to encrypt was derived prom priv key.

    This is indeed Pretty Good Privacy !
  • 2
    @gitlog unfortunately, nope you'll never know what me and @Haxk20 discussed here 😛
    PGP messages can be signed with a private key -

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Like this

    -----BEGIN PGP SIGNATURE-----

    iQFUBAEBCgA+NxxNaWNoYWVsIERlIFJvb3ZlciAoUGVyc29uYWwga2V5KSA8Y29u
    ZG9yQG5peG1hZ2ljLmNvbT4FAlwNoCYACgkQ57WFp12EYqtnpgf/SNosIReumelT
    rWrAeVjUaKShxoISJJYGwKH+Dem2cTmMAxOPFyT07j0DQ9UIL9YRnMWwqubHdL8H
    5G9uMeBJKhj7ZP8TyvlQY7tOSytiJkc3fj49zV1JGmJ3x85uCF5GQo9NidjmQM+r
    /0VQ6cAy6V2C27WiU+wYd4obpcoOfxVJsle6yiJFPeemLSIP8R9D8JG2+QZ+cA+Y
    KtuX5zcBfB4SGQ1MXX8APjMwE3k2TDnS39lu36FuZcSQlFP3wVkWAvFr9IQvg/6r
    deU1gROr8kP29jr7jO37tRW1YYHoHpch9EZN5iQD4nanJB9/GOcXhN0Itj9lvO3V
    YEFzy9jlJg==
    =oxlk
    -----END PGP SIGNATURE-----

    Which means that I've used my private key to verify that this message comes from me. It isn't encrypted in any way. Most of my outbound email is signed like this.

    Alternatively, messages can be encrypted against public keys. @Haxk20's messages were made like this, against my public key and thus decryptable when I use my private key.

    You can also combine signing and encryption. My messages to @Haxk20 were encrypted against his public key, and signed with my private key.

    You can encrypt against multiple keys to enable more than one recipient decrypt it. In fact, most PGP messages are already like this. My messages are encrypted against both Haxk20's key and mine actually, and so are Haxk20's messages. Otherwise we wouldn't be able to read what we wrote ourselves! So multi-recipient conversations are definitely possible in PGP.

    Encrypting it to everyone on the other hand.. signing comes closest to it. But it isn't very much encryption when everyone can decrypt it, is it 😜
  • 2
    @gitlog kind of ... have a look at Keybase :)
  • 1
    @D3add3d how?
    PGP requires the decrypter to have private key of the public key which was used to encrypt the message
    I don't have it
  • 2
    @gitlog keybase allows you to share files with multiple people, probably re-encrypting each file for every user
  • 1
    @D3add3d didn't properly understand

    How does keybase gets public keys of everyone else and that too a particular one

    Didn't find any such option out there
  • 1
    @gitlog when you are a Keybase user you will have a public key for every device you have. When you share a folder with other user (by naming a folder you-someone //or something like that) the files apart from being encrypted for every device you own are now also encrypted for every device "someone" owns and they can decrypt them on their devices... at least that's how I understand it works, I am almost certain it is explained somewhere on their website (keybase.io)
  • 1
    @gitlog I just realized that I didn't see your comment posting your key.. so I feel kinda bad for inadvertently leaving you out of the conversation like that earlier 😔

    Here's the messages between me and @Haxk20 earlier, encrypted to both of you. https://clbin.com/0T1lO

    (@irene this is what I meant with encrypting to multiple people in codrTalk earlier btw)
  • 1
    @irene no, that message in clbin is one message encrypted to both Haxk20 and gitlog simultaneously.
  • 1
  • 1
    @irene by encrypting to both of them?
  • 1
  • 1
    @irene it is on that topic yes.. say I want to encrypt something to you, I'd do it against your public key, my public key (so that I can still see my message at a later point in time), and anyone else I'd like to encrypt to. It's really just a matter of multiple recipients that are then able to decrypt a single encrypted message.
Add Comment