GPG — encryption and signatures

cheat sheet · GnuPG 2 https://lab.dimsanych.ru/en/wiki/gpg/

Cheat sheet

gpg -c file encrypt symmetrically (with a passphrase)
gpg -d file.gpg decrypt
gpg -e -s -r who file encrypt for a recipient + sign
gpg --detach-sign -a file a detached signature
gpg --verify file.asc file verify a signature
gpg --fingerprint your keys' fingerprints
gpg --import pub.asc import a public key
gpg --recv-keys KEYID fetch a public key from a keyserver
gpg --export-secret-keys -a me > priv.asc BACKUP the private key (keep it safe!)

Options

bash

gpg --full-generate-key           # create a pair (choose type/size/expiry)
gpg --quick-generate-key "Name <you@mail>" ed25519 sign,encrypt 1y   # quick
gpg --fingerprint you@mail        # a fingerprint (verify it when exchanging keys!)
gpg --export -a you@mail > pub.asc        # export the public key (ASCII with -a)
gpg --export-secret-keys -a you@mail > priv.asc   # back up the private key (keep it safe!)
gpg --import pub.asc              # import someone else's public key
gpg --send-keys KEYID             # publish it to a keyserver
gpg --recv-keys KEYID            # fetch someone else's from a keyserver
gpg --gen-revoke you@mail > revoke.asc   # a revocation certificate (in case of compromise)