{"id":773,"date":"2021-01-16T18:51:50","date_gmt":"2021-01-16T18:51:50","guid":{"rendered":"https:\/\/dft.wiki\/?p=773"},"modified":"2022-03-21T21:27:53","modified_gmt":"2022-03-21T21:27:53","slug":"encrypting-files-with-gnupg-openpgp-in-linux-cli","status":"publish","type":"post","link":"https:\/\/dft.wiki\/?p=773","title":{"rendered":"Encrypting and Decrypting Files with GnuPG (OpenPGP) in Linux CLI"},"content":{"rendered":"

Creating<\/strong> a key-pair:<\/p>\n

gpg --gen-key<\/strong>\r\n\r\nOR\r\n\r\ngpg --full-generate-key<\/strong><\/pre>\n
Backing up<\/strong> the secret\/private key:<\/p>\n
gpg --list-secret-keys<\/strong>\r\ngpg --export-secret-keys<\/strong> -a 'youremail@example.com' > priv.asc<\/pre>\n
List the keys<\/strong> present in the system, export<\/strong> from the machine that contains the key, and import<\/strong> in the machine that will use the key to encrypt the files:<\/p>\n
gpg --list-keys<\/strong>\r\ngpg --export<\/strong> -a 'youremail@example.com' > pub.asc\r\ngpg --import<\/strong> pub.asc<\/pre>\n
NOTE:<\/strong> the argument -a<\/code> defines the output type to asc<\/code>, if not provided the key will have a binary format.<\/p>\n
Replace the email with the correct recipient email associated with the key.<\/p>\n
List the keys<\/strong> to confirm it was imported correctly and edit the key<\/strong>:<\/p>\n
gpg --list-keys<\/strong>\r\ngpg --edit-key<\/strong> 9DC8C540E9FF1344<\/em><\/pre>\n
Replace the ‘9DC8C540E9FF1344<\/em>‘ with the identification you find.<\/p>\n
It is important to trust the key so if you use a script to automate encrypt backup files, for example, it will not prompt confirmation question:<\/p>\n
gpg> trust<\/strong>\r\ngpg> quit<\/strong><\/pre>\n
Answer 5<\/strong> and confirm.<\/p>\n
Then you are able to encrypt files using the imported and trusted key:<\/p>\n
gpg -a -r \"youremail@example.com\" --yes --encrypt FILE.TXT\r\n\r\nOR\r\n\r\ncat FILE.TXT | gpg -r \"youremail@example.com\" --yes --encrypt - > FILE.TXT.GPG<\/pre>\n
Later the file can be decrypted using the following command:<\/p>\n
gpg --decrypt FILE.TXT.asc > FILE.TXT<\/pre>\n
See also this tool for encrypting and decrypting files using GnuPG using Nautilus File Browser:<\/p>\n
sudo apt install seahorse-nautilus<\/pre>\n","protected":false},"excerpt":{"rendered":"
Creating a key-pair: gpg –gen-key OR gpg –full-generate-key Backing up the secret\/private key: gpg –list-secret-keys […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,6],"tags":[],"class_list":["post-773","post","type-post","status-publish","format-standard","hentry","category-linux","category-raspberry-pi"],"_links":{"self":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/773","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=773"}],"version-history":[{"count":9,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/773\/revisions"}],"predecessor-version":[{"id":2845,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/773\/revisions\/2845"}],"wp:attachment":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=773"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=773"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=773"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}