PGP密钥对生成和应用

一、安装方法

[root@centos gnupg-2.1.4]# yum install gnupg

二、检查安装是否成功

[root@centos gnupg-2.1.4]# gpg --help

如果屏幕显示GPG帮助，就表示安装成功。

三、生成密钥对

[root@centos gnupg-2.1.4]# gpg --gen-key
gpg (GnuPG) 2.0.22; Copyright (C) 2013 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.gpg: directory `/root/.gnupg' created
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
Please select what kind of key you want:(1) RSA and RSA (default)(2) DSA and Elgamal(3) DSA (sign only)(4) RSA (sign only)
Your selection? 1    #选择密钥类型（这里我们选择加密算法是RSA、数字签名算法也是RSA）
RSA keys may be between 1024 and 4096 bits long.
What keysize do you want? (2048) 2048          #设置密钥的比特数
Requested keysize is 2048 bits
Please specify how long the key should be valid.0 = key does not expire<n>  = key expires in n days<n>w = key expires in n weeks<n>m = key expires in n months<n>y = key expires in n years
Key is valid for? (0) 1y           #设置密钥有效期（一年）
Key expires at Mon 14 Oct 2019 09:51:43 AM CST
Is this correct? (y/N) y   #确认有效性GnuPG needs to construct a user ID to identify your key.Real name: cakin           #输入姓名
Email address: 798102175@qq.com         #输入邮箱地址
Comment: cakin           #输入备注
You selected this USER-ID:"cakin (cakin) <798102175@qq.com>"Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O         #选择OK
You need a Passphrase to protect your secret key.       #口令输入界面We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
gpg: /root/.gnupg/trustdb.gpg: trustdb created             #创建信任网的数据库
gpg: key F15FE9FE marked as ultimately trusted          #自己生成的密钥将被设置为“绝对信任”
public and secret key created and signed.gpg: checking the trustdb
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: next trustdb check due at 2019-10-14
pub   2048R/F15FE9FE 2018-10-14 [expires: 2019-10-14]    #F15FE9F密钥生成完毕Key fingerprint = 9B42 B3CC DBA4 B411 ACEA  F0F5 08C9 3BF3 F15F E9FE
uid                  cakin (cakin) <798102175@qq.com>
sub   2048R/E672385C 2018-10-14 [expires: 2019-10-14]

四、查看刚才生成的公钥

[root@centos gnupg-2.1.4]# gpg --export --armor E672385C
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.22 (GNU/Linux)mQENBFvCof4BCACyb/vGxaAqlpT3X/XAkXwV34j7e+KhrBEKdDIjY3Uwc7tmXfcf
0gtyJ+XYGjo/umz9lfD1eCfmqHqXAX4yw6qCqSonb7MforYYVwIcC9MgCY4zJS93
mteKLnJBBdEinylC34EAYKKJ8+nVJ0j8J4AREcFELseqpzbzszKqAcj+ZSif5ov+
sOSaMxKJfFLmxw/7MQ/imL0pko93VQtWdIXVlCIlw9CcWNxkDsR1rOeHlm7nEPTb
tjzdto+nZR85J93eAWvJuFc+sQVh6jqtVf8d7/RxbCxLxyXCZITIvCY/G8exDE5c
3kzhV+lHrAnQVXUeLfkR73MaLUlyjmdkgt/XABEBAAG0IGNha2luIChjYWtpbikg
PDc5ODEwMjE3NUBxcS5jb20+iQE/BBMBAgApBQJbwqH+AhsDBQkB4TOABwsJCAcD
AgEGFQgCCQoLBBYCAwECHgECF4AACgkQCMk78/Ff6f5r2wgAioaYmQx1RRKVTkmQ
bL6LmMTpswqqvTn2OwqZZGT2OHf8TqHcJbzemFO+RdRVLDNROspWUYqUAey0Ky3H
VXOM1CJrcWh6pXWgL5ZtHieDMulYaeWt9guDrEYt3a9KsnBfQD8f86uxpd55d7Lg
xHFADksUNVMK204eVZZ3FrK3cHLBu3vGtwyBQUAT4UTRE8W1a/CJC6259vJd0bc9
8wQ/QIYKLUKuCuF+6+xLucQrcv/0APWsdQQS9UOFGAcW/beNXkUTKazadeulLen0
KyovDVR2YMNrj73iP1bOdfIglCIQVe/3OsA1H1OXnzOO1n5G1Uex+fdZZAnrRkoW
CLszNLkBDQRbwqH+AQgAyX8bPz/mDC/gtFZjnhLkvaw35tfkTpTeNHrfZ2GFqLIE
C+jqX+2H4YwjXwX6D+eYLGzZxbQ3Mhi44Pf1dMmhD7m75qoALTlyQVmiMy3JqSuf
db31r29gcO5oq0RJks8visNTKCSNwDPT7M9Od7EyS6oD9wjOgSYwsAiThqDQGUDB
VzeVzVEW6L3DxUGuiPm+WSMEQCQWb3w2yXJTC5GmlB2jyweHh8VMNcoiIfPx95jL
1M/N92BJt8cZsQr1WsT/dprF0NVM33wDpHq5hjFffunB3jntcFH1N23lZ+gQCPs3
jBtua3kXm8aItvQlD3L7y6Ielq96Jbh+JAd0qgcmiwARAQABiQElBBgBAgAPBQJb
wqH+AhsMBQkB4TOAAAoJEAjJO/PxX+n+fvcIAK67lctvQSVLu/X836s/RJ2dwrWt
VJfjQwi4LP/ww1fsHlQ/RgI8h/wiJRCmzYrsT2cB7jvxVducNqmgg4z9/xAX1Jy9
TKmtk3qllnyeK29DkJN1P6RBTchlRImQAID3w7QEB8dj3sCNlQNgV8oB4YWqVxjE
PE+uaQQGa4VBOB40iAr45bfWLVlkuwqYRbI3GZNjsbCQKcfQO1HD8/87zKXHTEUa
neVGfQVscSqq4LYDlkDFDfs6r7uckD2w7vi4M3YjG2XH7CwAJDxAE5HUX8EaMxU2
RAHumd1Z9Otqfds38yeHTxTGhCszu3DteYWX6f0kwuZmLfAGUT7Kv/idJBY=
=4oaQ
-----END PGP PUBLIC KEY BLOCK-----

五、列出密钥

#list-keys 参数列出系统已有的密钥
[root@centos gnupg-2.1.4]# gpg --list-keys
#显示公钥文件名
/root/.gnupg/pubring.gpg
#显示公钥特征（4096位，Hash字符串和生成时间）
pub   2048R/F15FE9FE 2018-10-14 [expires: 2019-10-14]
#显示用户ID
uid                  cakin (cakin) <798102175@qq.com>
#显示私钥特征
sub   2048R/E672385C 2018-10-14 [expires: 2019-10-14]

六、将公钥导入文件

公钥文件（.gnupg/pubring.gpg）以二进制形式储存，armor 参数可以将其转换为 ASCII 码显示。
"用户 ID"指定哪个用户的公钥，output 参数指定输出文件名gpgkey.pub.asc）。

[root@centos gnupg-2.1.4]# gpg --armor --output gpgkey.pub.asc --export cakin
[root@centos gnupg-2.1.4]# cat gpgkey.pub.asc
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.22 (GNU/Linux)mQENBFvCof4BCACyb/vGxaAqlpT3X/XAkXwV34j7e+KhrBEKdDIjY3Uwc7tmXfcf
0gtyJ+XYGjo/umz9lfD1eCfmqHqXAX4yw6qCqSonb7MforYYVwIcC9MgCY4zJS93
mteKLnJBBdEinylC34EAYKKJ8+nVJ0j8J4AREcFELseqpzbzszKqAcj+ZSif5ov+
sOSaMxKJfFLmxw/7MQ/imL0pko93VQtWdIXVlCIlw9CcWNxkDsR1rOeHlm7nEPTb
tjzdto+nZR85J93eAWvJuFc+sQVh6jqtVf8d7/RxbCxLxyXCZITIvCY/G8exDE5c
3kzhV+lHrAnQVXUeLfkR73MaLUlyjmdkgt/XABEBAAG0IGNha2luIChjYWtpbikg
PDc5ODEwMjE3NUBxcS5jb20+iQE/BBMBAgApBQJbwqH+AhsDBQkB4TOABwsJCAcD
AgEGFQgCCQoLBBYCAwECHgECF4AACgkQCMk78/Ff6f5r2wgAioaYmQx1RRKVTkmQ
bL6LmMTpswqqvTn2OwqZZGT2OHf8TqHcJbzemFO+RdRVLDNROspWUYqUAey0Ky3H
VXOM1CJrcWh6pXWgL5ZtHieDMulYaeWt9guDrEYt3a9KsnBfQD8f86uxpd55d7Lg
xHFADksUNVMK204eVZZ3FrK3cHLBu3vGtwyBQUAT4UTRE8W1a/CJC6259vJd0bc9
8wQ/QIYKLUKuCuF+6+xLucQrcv/0APWsdQQS9UOFGAcW/beNXkUTKazadeulLen0
KyovDVR2YMNrj73iP1bOdfIglCIQVe/3OsA1H1OXnzOO1n5G1Uex+fdZZAnrRkoW
CLszNLkBDQRbwqH+AQgAyX8bPz/mDC/gtFZjnhLkvaw35tfkTpTeNHrfZ2GFqLIE
C+jqX+2H4YwjXwX6D+eYLGzZxbQ3Mhi44Pf1dMmhD7m75qoALTlyQVmiMy3JqSuf
db31r29gcO5oq0RJks8visNTKCSNwDPT7M9Od7EyS6oD9wjOgSYwsAiThqDQGUDB
VzeVzVEW6L3DxUGuiPm+WSMEQCQWb3w2yXJTC5GmlB2jyweHh8VMNcoiIfPx95jL
1M/N92BJt8cZsQr1WsT/dprF0NVM33wDpHq5hjFffunB3jntcFH1N23lZ+gQCPs3
jBtua3kXm8aItvQlD3L7y6Ielq96Jbh+JAd0qgcmiwARAQABiQElBBgBAgAPBQJb
wqH+AhsMBQkB4TOAAAoJEAjJO/PxX+n+fvcIAK67lctvQSVLu/X836s/RJ2dwrWt
VJfjQwi4LP/ww1fsHlQ/RgI8h/wiJRCmzYrsT2cB7jvxVducNqmgg4z9/xAX1Jy9
TKmtk3qllnyeK29DkJN1P6RBTchlRImQAID3w7QEB8dj3sCNlQNgV8oB4YWqVxjE
PE+uaQQGa4VBOB40iAr45bfWLVlkuwqYRbI3GZNjsbCQKcfQO1HD8/87zKXHTEUa
neVGfQVscSqq4LYDlkDFDfs6r7uckD2w7vi4M3YjG2XH7CwAJDxAE5HUX8EaMxU2
RAHumd1Z9Otqfds38yeHTxTGhCszu3DteYWX6f0kwuZmLfAGUT7Kv/idJBY=
=4oaQ
-----END PGP PUBLIC KEY BLOCK-----

七、导出私钥

export-secret-keys 参数可以转换私钥

[root@centos gnupg-2.1.4]# gpg --armor --output private-key.txt --export-secret-keys
[root@centos gnupg-2.1.4]# cat private-key.txt
-----BEGIN PGP PRIVATE KEY BLOCK-----
Version: GnuPG v2.0.22 (GNU/Linux)lQO+BFvCof4BCACyb/vGxaAqlpT3X/XAkXwV34j7e+KhrBEKdDIjY3Uwc7tmXfcf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=EWAX
-----END PGP PRIVATE KEY BLOCK-----

===================================================================================================

八、PGP密钥对的使用

1.列出所有公钥和私钥

    gpg -kgpg -K

2.导入别人的公钥

gpg --import gpgkey.pub.asc

3.非对称加密文件
加密：当你导入完好友的公钥后，就可以用朋友的公钥加密文件了，

gpg -e -r username filename (-r 表示指定用户)
example: gpg -e -r cakin test.c

4.非对称解密文件
解密：上面的操作会生成 filename.gpg 加密文件，之后你可以把此文件发送给好友了，对方就可以用自已的密钥来解密文件了。

gpg --output 新文件名 --decrypt 加密文件名
example：gpg --output aa.c --decrypt test.c.gpg

参考1
参考2
参考3 基本操作

PGP密钥对生成和应用相关推荐

PGP安装,生成密钥及上传服务器的完整步骤
PGP安装,生成密钥及上传服务器的完整步骤(windows版) 1. 下载gpg4win:https://files.gpg4win.org/gpg4win-3.1.3.exe 安装后用图形界面生成密 ...
java xml签名_Java使用DSA密钥对生成XML签名的方法
本文实例讲述了Java使用DSA密钥对生成XML签名的方法.分享给大家供大家参考.具体实现方法如下: MainClass.java代码如下: import java.security.KeyPair; ...
RSA密钥对生成工具代码
RSA密钥对生成工具 RSA密钥对生成工具 RSA密钥生成 RSA密钥写入文件 RSA密钥生成测试 Github代码仓 RSA密钥对生成工具最近研究License方案,用到了Java生成RSA公私钥 ...
前后端RSA互相加解密、加签验签、密钥对生成(Java)
目录一.序言二.关于PKCS#1和PKCS#8格式密钥 1.简介 2.区别二.关于JSEncrypt 三.关于jsrsasign 四.前端RSA加解密.加验签示例 1.相关依赖 2.crypto ...
sn 强名称工具 (Sn.exe) 创建密钥对生成工具
sn 强名称工具 (Sn.exe) 创建密钥对生成工具: sn强名称工具(Sn.exe)创建密钥对下载.rar-互联网文档类资源-CSDN下载使用强命名工具(Strong Name Utility) ...
公钥生成命令_ECDSA密钥对生成以及在Token中的应用
1 概述本文主要讲述了如何利用Openssl生成ECDSA密钥对,并利用Auth0库进行Token生成及验证的过程. 2 ECDSA 2.1 简介 ECC(Elliptic Curve Crypto ...
Java生成pgp密钥对_在Javascript中生成PGP密钥对,并使用加密的PGP私钥对文本进行签名...
我写的东西是 needs to do electronic signatures. 有些用户会像我这样的极客,并且已经拥有自己的PGP密钥.大多数人不会,也不会想要安装或维护它. 作为一种解决方案,我 ...
支付宝打造公共账号业务网关， RSA密钥对生成
作者: 玉龙版权全部,同意转载. 请注明出处(创建金融_玉龙 http://www.weibo.com/u/1872245125) 原文地址: http://blog.csdn.net/ ...