1.可以使用 gpg --help 查看说明
2.使用gpg --gen-key 生成key
:~$ gpg --gen-key
gpg (GnuPG) 1.4.20; Copyright (C) 2015 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Please select what kind of key you want:
(1) RSA and RSA (default)
(2) DSA and Elgamal
(3) DSA (sign only)
(4) RSA (sign only)
Your selection? ==>选择 1
RSA keys may be between 1024 and 4096 bits long.
What keysize do you want? (2048) ==>回车即可
Requested keysize is 2048 bits
Please specify how long the key should be valid.
0 = key does not expire
<n> = key expires in n days
<n>w = key expires in n weeks
<n>m = key expires in n months
<n>y = key expires in n years
Key is valid for? (0) ==> key 到期时间,默认是永不到期
Key does not expire at all
Is this correct? (y/N) ==> y
You need a user ID to identify your key; the software constructs the user ID
from the Real Name, Comment and Email Address in this form:
"Heinrich Heine (Der Dichter) <[email protected]>"
Real name: ==> 输入名字
Email address: ==> 输入邮箱
Comment: ==> 输入描述
You selected this USER-ID:
"tomato (I am tomato) <[email protected]>"
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? ==>输入 O,代表输入无误
You need a Passphrase to protect your secret key.
gpg: gpg-agent is not available in this session
Enter passphrase: ==>输入密码
Repeat passphrase: ==>再次输入密码
gpg: gpg-agent is not available in this session
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
Not enough random bytes available. Please do some other work to give
the OS a chance to collect more entropy! (Need 118 more bytes) ==>gpg需要随机数, 做自己的事情就好,等它自己收集完后,会自动关闭.
====>大概15分钟
.....+++++
gpg: /home/yangxiaoyu/.gnupg/trustdb.gpg: trustdb created
gpg: key 48C72730 marked as ultimately trusted
public and secret key created and signed.
gpg: checking the trustdb
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0 valid: 1 signed: 0 trust: 0-, 0q, 0n, 0m, 0f, 1u
pub 2048R/48C72730 2018-09-26
Key fingerprint = 44BA F73B 2629 519B 00E8 2C4D 0EED 90BA 48C7 2730
uid tomato (I am tomato) <[email protected]>
sub 2048R/1EE2CCE3 2018-09-26
====> 生成KEY
3.
使用 gpg -k 显示公钥
:~$ gpg -k
/home/yangxiaoyu/.gnupg/pubring.gpg
-----------------------------------
pub 2048R/48C72730 2018-09-26
uid tomato (I am tomato) <[email protected]>
sub 2048R/1EE2CCE3 2018-09-26
使用 gog -K 显示私钥
:~$ gpg -K
/home/yangxiaoyu/.gnupg/secring.gpg
-----------------------------------
sec 2048R/48C72730 2018-09-26
uid tomato (I am tomato) <[email protected]>
ssb 2048R/1EE2CCE3 2018-09-26
4.使用 gpg --import import他人的公钥
:~/.gnupg/pub$ gpg --import zhongzhendong.asc
gpg: key XXXXXXXX: public key "zhongzhendong <[email protected]>" imported
gpg: Total number processed: 1
gpg: imported: 1 (RSA: 1)
:~/.gnupg/pub$
5.使用 gpg --export -a [email protected] 导出公钥
:~/.gnupg/pub$ gpg --export -a [email protected]
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1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=xGgm
-----END PGP PUBLIC KEY BLOCK-----
6. 使用 gpg -a --export-secret-keys [email protected] 导出私钥
:~/.gnupg/pub$ gpg -a --export-secret-keys [email protected]
-----BEGIN PGP PRIVATE KEY BLOCK-----
Version: GnuPG v1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=JIbn
-----END PGP PRIVATE KEY BLOCK-----
7. 使用 gpg -s 通过非对称加密(就是通过生成的private key加密)。
:~$ gpg -s man_as.txt
You need a passphrase to unlock the secret key for
user: "tomato (I am tomato) <[email protected]>"
2048-bit RSA key, ID 48C72730, created 2018-09-26
gpg: gpg-agent is not available in this session
Enter passphrase: ==>输入生成key时输入的密码
:~$
生成加密文件 man_as.txt.gpg
使用gpg man_as.txt.gpg 解密文件
:~$ gpg man_as.txt.gpg
File `man_as.txt' exists. Overwrite? (y/N) ==>输入N
Enter new filename:1.txt ==>输入新的文件名
gpg: Signature made Wed 26 Sep 2018 06:00:17 PM CST using RSA key ID 48C72730
gpg: Good signature from "tomato (I am tomato) <[email protected]>"
:~$