How to use PGP: PGPkeys


When you click on 'Launch PGPkeys' (from the PGPtray's menu), this little window will come out:

  • File just to close the window.
  • Edit you can copy, paste, delete a key contained into your keyring (the above window). You can select all keys, collapse or expand selections. You can set PGP preferences (I will talk about this feature in a specified section. You can look at the page by clicking on the link contained in the previous page).
  • Keys here you can manage keys.
  • Groups here you can manage groups. PGP allows you to select some recipient groups, so you will be able to encrypt a message simultaneously to all recipients. After creating a group, you can add users to it by dragging users from the list contained into the PGPkeys' window to the Group pane.

Keys

This is the 'Keys' menu:

  • Sign If you select a key from your keyring and the click on 'Sign', you can sign the key. This is a very important issue: you shouldn't sign a key if you aren't really (read: REALLY) sure about that key. Since this is a very hot issue, I will talk about signing keys in a specific section (in order to read that section go back to the previous page and follow the link).
  • Set as Default Key If you have more than one couple of keys, you can set one couple as your default set of keys (each time you create a couple of keys, the keys are designated as your default keys and are automatically selected when you perform certain PGP functions. For instance, your default key pair is used when you sign a message or someone’s public key). A bold text line default key points out a default key.
  • Add Name You can add another name and e-mail address to a selected key.
  • Update from Server You can connect to a keyserver and update a selected key.
  • Send Key to Server You can connect to a keyserver and send a key.
  • Search You can connect to a keyserver and search for a specified key. You can search for User ID, Key ID, Key Type, Creation Date, Expiration Date, Revoked Keys, Key Size. To know more go back to the page describing keyservers.
  • New Key You can create a new key. A wizard will guide you to create the key. To know more go back to the page showing the installation procedure.
  • Enable You can enable a key in your keyring. You can use an enabled key to encrypt or sign a message.
  • Disable You can disable a key in your keyring. You don't delete the key from your keyring, but PGP won't use it to encrypt or sign messages.
  • Revoke You can disable permanently a key. Notice that a revoked key can't be used anymore. You won't be able to restore a revoked key!! You can revoke your keys only.
  • Import You can import a key from a file.
  • Export You can axport a key from your keyring to a file.
  • Select Columns You can show or hidden columns inside of PGPkeys window.
  • Key Properties You can examine and change some properties of a selected key. When you select a key from your keyring and click on this item, a window showing the key's properties will come out:

  • Key ID is a unique identifying number associated with each key. This number allows to distinguish a key between two keys with the same user name and e-mail address.
  • Created means the date when the key was created.
  • Key Type defines the key (either RSA or Diffie-Hellman/DSS).
  • Expires defines the date when the key will expire. You specify this date when a key is created. The value is usually set to never. However, if you only need a key for a limited period of time, you can set it to expire on a specific date.
  • Key Size defines the length of the key. When you create a new key, you can define its size in bits: a) up to 2048 bits for a RSA key b) from 512 up to 4096 bits for the 'DH' part of a DH/DSS key and up to 1024 for the 'DSS' part of a DH/DSS key. Obviously the larger the key, the less chances someone will ever be able to crack it, but the longer it will take to decrypt/encrypt messages. Usually you are quite safe using a 2048 bits key.
  • Cipher defines the used algorithm to encrypt a message by the selected key. When you create a new couple of keys, you have to specify the algorithm that PGP will use to encrypt messages (IDEA, Triple-DES or CAST. The default algorithm is CAST). After key creation you won't be able to change (for that key) the used algorithm anymore. So you have to specify the algorithm *before* than key creation (Preferences/Advanced/Preferred algorithm).
  • Trust Model indicates the validity of the key, based on the level of trust you have in the owner to vouch for the authenticity of someone else’s public key. You can set the trust level by sliding the bar.
  • Fingerprint is a 128 bits string (128 bits for a RSA key and 160 bits for a DH/DSS key) which consist of numbers and characters used to check and authenticate a public key. A fingerprint identifies univocally a key: there aren't 2 different keys with the same fingerprint.
  • Enabled Indicates whether or not the key is currently enabled. When a key in your keyring is disabled, it is not be available for performing any PGP functions. You can turn on or off a key (Enable/Disable) by means of PGPkeys.
  • Change Passphrase If you click here, you will be able to change the passphrase for your private key. It is generally a good idea to change your passphrase every six months.

Index           Home  Back     About  Contact us!

Copyright (c) 1998-2006 Wowarea