GnuPG (GPG)

GnuPG (also known by its command name, gpg) is a tool primarily for public key Encryption[1] and cryptographic authentication.

There is a lot of material about GnuPG out there, so I won't be duplicating it all here. But, I do have some more unique contributions for those familiar with GnuPG:

• There are alternatives to gpg/gpgv that may be useful in some cases: Age (Encryption)[2] for encryption and signify[3] for authentication.
• GPG makes a nice companion to Filespooler[4]; see Verifying Filespooler Job Integrity[5] and Encrypting Filespooler Jobs with GPG[6].

--------------------------------------------------------------------------------

Links to this note

• Why You Should (Still) Use Signal as Much as Possible[7]

As I write this in March 2025, there is a lot of confusion about Signal messenger[8] due to the recent news of people using Signal in government, and subsequent leaks.

• Building an Asynchronous, Internet-Optional Instant Messaging System[9]

I loaded up this title with buzzwords. The basic idea is that IM systems shouldn't have to only use the Internet. Why not let them be carried across LoRa radios, USB sticks, local Wifi networks, and yes, the Internet? I'll first discuss how, and then why.

• Dead USB Drives Are Fine: Building a Reliable Sneakernet[10]

"OK," you're probably thinking. "John, you talk a lot[11] about things like Gopher[12] and personal radios[13], and now you want to talk about building a reliable network out of... *USB drives*?"

• Age (Encryption)[14]

Age is a public-key encryption system, similar in certain concepts to GnuPG (GPG)[15], but simpler because it isn't focused on building a web of trust.

• Sequoia PGP[16]

Sequoia PGP is a Rust-based implementation of OpenPGP, aimed to be modern and secure. It is often thought of as an alternative to GnuPG (GPG)[17].

• Signify[18]

Signify is a toool to create and verify signatures on files.

• Verifying Filespooler Job Integrity[19]

Sometimes, one wants to verify the integrity and authenticity of a Filespooler[20] job file before processing it.

• Encrypting Filespooler Jobs With GPG[21]

Thanks to Filespooler[22]'s support for decoders, data for filespooler can be Encrypted[23] at rest and only decrypted when Filespooler needs to scan or process a queue.

• Encrypted[24]

Encryption is a way to encode data so that people that might intercept it can't decipher the original message (often called the "plaintext").

More on www.complete.org

(c) 2022-2024 John Goerzen