GPG for Asymmetric File Encryption
Use GPG to encrypt files for specific recipients, sign content, and manage the GPG key ring.
GPG Overview and Purpose
GNU Privacy Guard (GPG) implements the OpenPGP standard (RFC 4880) for asymmetric file encryption and digital signatures. It enables two fundamental operations: encrypting a file so only the intended recipient can decrypt it, and signing a file so others can verify its authenticity and integrity. GPG is the standard tool for secure file transfer and software release signing.
Generating GPG Keys
GPG key generation is interactive with gpg --gen-key or scriptable with gpg --quick-gen-key. Modern GPG defaults to ed25519 for signing and cv25519 (Curve25519) for encryption, creating a primary signing key and a subkey for encryption. The --full-gen-key option provides full control over key type, size, and expiration date for users who need custom configurations.
All lessons in this course
- GPG for Asymmetric File Encryption
- The age Encryption Tool: Modern GPG Alternative
- Encrypted Containers with VeraCrypt
- Secure Deletion and Key Destruction