Wednesday, July 9, 2014

GNUPG exporting the public key

The next step after creating the keypair and the revocation certificate is to publicize the public key. The simplest (more universally independent) way of start doing this is by exporting the public key. This is well explained in PGP & GPG - Email for the practical paranoid.

Again, I'll use the fictitious user John Smith to follow the export process.

Assume that the private and public keys have been successfully created.
Assume that the revocation certificate has already been created.
 
$ gpg --list-secret-key
/home/.../.gnupg/secring.gpg
------------------------------
sec   4096R/F50D9DFD 2014-07-08 [expires: 2015-07-08]
uid                  John Smith (Business Corp. HR Manager)

                    
ssb   4096R/6CB8D3D2 2014-07-08


$ gpg --list-key
/home/.../.gnupg/pubring.gpg
------------------------------
pub   4096R/F50D9DFD 2014-07-08 [expires: 2015-07-08]
uid                  John Smith (Business Corp. HR Manager)

                    
sub   4096R/6CB8D3D2 2014-07-08 [expires: 2015-07-08]


The export of the public key can be both in binary and ASCII format (--armor).
Each format may be more convenient for an specific purpose.
The export process is quiet:

$ gpg --output pubkey.jsmith@business.corp.gpg 
      --export "jsmith@business.corp"

$ gpg --output pubkey.jsmith@business.corp.gpg.asc --armor 
      --export "jsmith@business.corp"

But both output files can be located in the current directory.
The ASCII version can be seen as follows:
 
$ cat pubkey.jsmith@business.corp.gpg.asc
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.17 (SunOS)
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=Vy02
-----END PGP PUBLIC KEY BLOCK-----

      
This completes the basic start up with GNUPG.
But it's advisable to hush to adjust some defaults.