What is PGP Key ID?

A PGP key ID is just the bottom 64 bits of the public modulus (but only the bottom 32 bits are displayed with pgp -kv). It is easy to select two primes which when multiplied together have a specific set of low-order bits. This makes it possible to create a fake key with the same key ID as an existing one.

Why should we check the fingerprint of the public key before signing it?

By personally checking the fingerprint you can be sure that the key really does belong to him, and since you have signed they key, you can be sure to detect any tampering with it in the future.

How do I encrypt a PGP key?

Choose Encrypt & Sign. This will bring up the PGP Tray Key Selection dialog box where you should see the list of Public Keys including that of the person or persons to whom you wish to send your message. Double click on the Public Key of the person to whom you wish to send your message. Click OK.

How can I get fingerprint of PGP key?

How to Generate PGP Keys

1. Initialize the GPG Directory. > gpg –gen-key. gpg (GnuPG) 1.0.
2. Generate a Private Key. > gpg –gen-key.
3. Generate and print a copy of your public key ID and fingerprint >gpg –fingerprint. An an example of the fingerprint output, here is the output of the NMLUG Keymaster’s fingerprint:

How do I trust a PGP key?

At the gpg> prompt, type trust , then type 5 for ultimate trust, then y to confirm, then quit . –trust-model pgp|classic|direct|always|auto Set what trust model GnuPG should follow. The models are: always Skip key validation and assume that used keys are always fully trusted.

How do I encrypt a file using gpg?

How to use GPG to encrypt stuff

1. Make sure everything is in one file.
2. (OPTIONAL) Sign the file using your private key.
3. Encrypt the file using the recipient’s public key.
4. Send the encrypted file and (optionally) the signature to the other person.