Basic File Encryption with GPG key pairs!
Вставка
- Опубліковано 27 сер 2024
- Forum (BRAND NEW): forum.lukesmit...
Support the channel!: / lukesmith
Send money: PayPal.me/Luke...
Ask a question: luke@lukesmith.xyz
Get my configs: github.com/Luk...
See my website: lukesmith.xyz
I'm putting this vid out to go with my new mutt-wizard, which you should check out! (ua-cam.com/video/SsEJz9f9VMQ/v-deo.html)
Dear sir I have Ex4 encrypted file so how can find key or how can change key or editing in it ? How can compile it ? I used mt4 platform.
If you want to encrypt text when editing it in vim (usefull for email encryption): %! gpg -er --armour
I prefer a rot13 double encryption
A simple spell but quite unbreakable
jul gb lbh cersre ebg guvegrra
@Pseudonyymi nsgre 11 zbaguf v svanyyl xabj
I use quadruple. It offers double the security
it worked for the romans
Thank you! This is perfect. I'm writing a script to backup a configuration file over the network but the config file has other secrets stored in plain text. Now I can write a stable script to store the backups securely in a legit way. Thanks for explaining!
If I may suggest, I think you should follow up this video with a video about pass, the "Standard UNIX password manager", since it uses gpg for the encryption of the password and it can be used by many programs. For example, I have my email password stored in pass, and whenever offlineimap needs to access it to update my emails it uses a pass command (`pass show Path/To/Password`) so I don't need to store it in plain text and I also don't need to type it everytime I update my emails.
kcat Yeah, I forgot to mention those helper scripts. There are also two of them for rofi, rofi-pass and autopass, even though I never really got to make them work and I just use passmenu.
Fun fact: he actually did make that video!
Enjoyed the video. Thanks for keeping it simple and to the point without a lot of "or you could do this" "or you could do that".
Thank you very much man, this helped me a lot. Very clear video, lovely (non hindi) english, everything's super cool. Thanks again
omg thank you for having the balls to say that bro. USA! USA!
Great video Luke, and great content in general. Glad I stumbled across this tonight. Hopefully will remember to follow you wherever on the other content sites you inhabit.
Good intro for me. Now I need to go learn more, and what the fluff you where typing in the terminal half the time :)
Can you make another video for things below >
1. how to back up those key.
2. how another person import your public key before encrypting
I prefer to back up my key by pigeon.
You can use the `--export-secret-keys [ names ]` to export your key (including the private one. It’ll write to stdout by default.
No video needed. It's documented everywhere.
You explain really good. You're gifted
Use gpg --full-generate-key --expert , Luke!
8:19 don't tell me what to do
anyway awesome video ! i had to deal with gpg keys when i was using arch but i never took the time to learn more than that they deal with security and now i know
thanks
Clear crystal info , thanks Bro
I'm really new at this and your video helped me a lot, thank you. But, how do you put your signature on the encrypted file, and how does the recipient open it? You give him the password by phone?
You're great at explaining this, but I always feel like I'm watching that "How English sounds to non-English
speakers" video. Like my brain is saying "you know this language but he's saying fake words!"
Thanks for this simple explanation.
Thank you for this valuable information.
How do you get that view in a terminal?
Wow, didn't know about shred -u. Tnx :D About keys expiring, so I assume if private key expires, you can no longer decrypt files that were encrypted with that private key ?
You can always decrypt the files, even if the private key is expired. Someone trying to use that key to encrypt something to you would receive a warning that the key is expired and another should be used. If you could not use expired keys to decrypt files you would lose data and nobody would want that :)
Thank you for the nice tutorial ♡
What distro are you using? It looks cool
gpg is awesome
Hey Luke, nice and useful video as always. What was that task managing program on the right at the beginning?
looks like vtop
Thank you, I also have figured that out however. Next question is, how did he manage to make borders in ranger look like pipes?
i know this man :) if i set it to true, the borders look like straight (i mean connected lines), however in his video his vertical borders look like pipe symbols.
Hahah, even thoigh its and oddity it looks dope
07:34 I have to set that cache to 0 if I wanted being asked every time for my passphrase - right? How I'm going to do that? Thanks.
Update: I fixed it with the *gpa* and set the _default-cache-ttl_ at zero. _[gpa = graphical frontend for the GNU Privacy Guard]_
Can you share your vim multi-scree setting, thank u .
What application are you using as your File Manager in this video?
Nice presentation.
How do you make it so that you have the terminal up on the top and the current directory state at the bottom of the screen?
tmux
What is the best way to store your gpg backup file ?
Nice and to the point!
Do you have any tutorial/guide on how to setup a working environment like yours? Seems pretty cool and efficient...
Lol. Yeah see the rest of the channel! Or just use larbs.xyz
Luke Smith Thanks dude, great stuff btw, been following for 6 months now... Keep it up
Use gpgtar if you want to encrypt a folder and now you can hide your 1.5 tb homework folder
Is there a convenient way to encrypt big file? Asymmetrical keypair encryption requires a lot of resource
7megas While purely asymmetrical encryption is slow, most software use the public key to encrypt a secret symmetric key an that is used to encrypt the hole file instead.
Eletronicafg this is what GPG does. GPG is in fact using a hybrid cipher, what that process of encrypting the symmetric key is called.
exactly
What about 'veracrypt' ?
very nice video. good stuff.
Luke,
Why not use pinentry-curses instead of those annoying popups?
what is that funky file manager in the bottom half of the window?
ranger but lf is better
Someone on a forum said to always write down your key.... Weirdest thing happened though.... I was not told my password.. I also know for a fact that I did NOT encrypt anything, yet there are encrypted files.. I updated mint, and boom!! my wifi changed names, half of my kernels are gone, some of the apt conf were erased and I can't use the internet anymore.. I don't understand what happened
This is fantastic! I need to ask: can I decrypt my encrypted file from a Windows pc? And what if my linux laptop (which I used to encrypt my file) doesn't work? Will I still be able to decrypt my file? Thank you
What's the package to install in order to get the GUI that asks for the passphrase ?
Do you have a video or resource for your command prompt setup? It looks very nice!
Is this a joke?
@@devikapluspoint8306 Nope! Genuine question. I like the way the filesystem is visible below the terminal. It looked like there was some shortcut used to open the filesystem viewer which I wanted to learn more about. I also like how these new terminal pages are opened and their spacing.
@@roberthensley7130 tiling window managers let you map a key to any command. It's obvious. The fact that it appeared below is because of his layout.
And this is bash not command prompt
@@roberthensley7130 wait you don't know about tiling window managers? They also let you tile stuff like browsers
Thanks @Lukesmith
m8 sorry for the dum questions. What is the color hex of your windows border? I don't found it in the conf file kek
It's just the default color. I didn't set anything.
kek thx bro
thx bro very helpful !!
Hi Luke! I followed your instructions and generated a key in mac os, but the wizard says it can't locate the gpg keys. I looked at /usr/bin/ and indeed I don't see a gpg folder or file... Any clues?
Google image search: "Apple tech support azis"
How do you keep making videos on exactly the things I've just started looking into myself? This is like the 4th time.
he's watching you
How do you setup your terminal?
he uses st
his terminal build is on his github
Whats name of that font on your terminal??? and do you highlight active window??
Inconsolata is the font. The border around the windows is automatic in i3.
What's the gui that comes up and asks for your pass?
That pinentry. I think it comes by default, but if you uninstall it, it'll just prompt you on the command line.
Yeah, I'm used to seeing it ask on the command line. I'm kinda more curious about the "save in password manager" checkbox, where does that go?
Dude what is the tool you are using to navigate at 4:40?
ranger, but lf is better
@@avsbq Thanks a lot. These tools look awesome.
@@aviator7479 no problem, luke has a more recent video on the "lf" file manager
What are the advantages of this compared to say, keepass?
Harshal Lele just a front end.
You can post your public key online other people to send you encrypted files.
Wht is the terminal how do I get it
What operation system you can use?
What window manager are you using that's text based? Is that mc?
No! it's i3wm
Since you brought up mc you're probably asking for file manager. In that case it's Ranger
Thanks!
Any plans for a vimwiki video?
Yup.
The command gpgtar to encrypt folders
If I may ask, what's that linux distro?
It's probably arch linux with dwm window manager
this useful in conjunction with apps like pass
How is an expiring key used for encrypting files? :rofl
Greetings,
How can I encrypt a file, and not have it associated (or dependent upon) a public key/private key?
In other words, I simply want to encrypt a file with a passphrase. Anyone that knows that passphrase will be able to decrypt it.
This would be useful to put my secret key on a backup drive, and not have to worry that my secret key will fall into the wrong hands (because I will encrypt the secret key, before saving it to a backup drive).
I cannot figure out the options for the command line to instruct gpg to encrypt a file. It seems determined to associate any encryption with a public key.
Please advise.
Thank you.
gpg --symmetric filename
Take a look at ccrypt. Its a modern replacement for the UNIX crypt command and is designed to simply encrypt or decrypt a file using a passphrase.
So does the person who receives your message have to know your password you created it with or do they have their own password to open your encrypted message?
To encrypt a file or message to someone else, you have to first get their public key and use that to encrypt the file (no password is necessary on encryption). That person would then decrypt using their own private key, for which they need the corresponding password.
Good video
>mfw me and some friends were just looking this up.
a-are you a CIA?
GPG keypair creation and how to use it in certain file that we want to encrypt. I suppose it is same as gnupg
GPG *is* GnuPG
Hi Luke. In what system ( distro ) do you work ?, thanks
Artix, Arch derivative without systemd
gg!
Thanks dude! And if i want to keep editing the file after encrypting it?
You need to decrypt it and encrypt it again
nice
I can't seem to decrypt it?
skill issue
@@QWERTY-gp8fd thanks for your shitty ignorant comment I've worked it out now you've got an asshole issue
@@aaron6841 LMAO
Does this also works for entire directories of files?
No. You should first compress (zip/tar/whatever) the directory into a single file. You can, however, encrypt or decrypt several files at once.
I would like to see a video on pass (password manager) :)
I don't know why this does not work in my computer but openssl works.....
vtop? really?
Hi, how can we prevent duplicate key pairs? Imagine I've generated a key pair (with expiration date) and another person generates the same one, is that possible? If no, how does GPG manage that? What about signing packages with GPG? Is it the same logic behind ? Thanks.
Gpg Is Virus ?
nice thanks. btw I have this in my .bashrc: alias rm='echo escape rm' ... too often I mixed up rm and mv. With that, you need to type:
m. (additionally I have the 'trash' command)
that 'certain' period 7:25 is definied in seconds i.e. in: .gnupg/gpg-agent.conf default-cache-ttl 30000 (and restart gpg-agent)
No pywal anymore???
OCmyBrain I'd imagine it's because he's using ST now which has its theme compiled into the binary so the terminal wouldn't change theme with pywal
There are some builds of st out on github that have pywal support, but I honestly moved away from using pywal generally. No hard feelings against it, I just don't really use it now.
time to buy drugs
longer is better
1024 key length would suffice, 4096 is just completely insane
People always assume the NSA is willing to spend billions on them, they are not, noone gives a fuck 1024 bit still takes years to crack, not really necessary to get bigger keys to encrypt some email with some pictures of your dog in it
dOuWe hUiJsMaNs iS aN NsA aGeNT!!1
depends on the size of your secret
@@knpstrr You don't encrypt large data with RSA, you use it to encrypt a symmetric key so you can send it over the internet without having to fear for eavesdroppers
If someone's looking for a nice cross-platform encrypted chat and file storage with a git remote helper build on top of PGP check out Keybase keybase.io/
L33t
Haha Boomer, if you're so good why don't you write your own version of gpg?
Well I did not know asymmetric encryption is good for file encryption.. I love to laught at your videos... I just hope nobody is actually going to use what you just presented in this or any other video or nobody is going to listen to your gnu/linux propaganda.. and it is linux not gnu/linux because kernel is not in any way connected to gnu software and you can run gnu software on windows... but do you say it is gnu/dos or gnu/windows.. No! And about the topic : asymmetrical encryption is slow and not intended for file encryption in its core design which is signing and key exchanges.. after key exchange(hmm key to the ->) there is symmetrical encryption anyway.. so read something about encryption before makeing misleading videos.. try to encrypt which this something like a 20G and then try this hardware accelerated symmertrical encryption I was talking about.. well if you have one of this nice intel chips with thier proprietary technology (best performance on vPro i7 chips) I mean thinkpads or stuff like that will probably burn if I were to do this on them.. but come on.. anyway I loved posting this comment from my proprietary iphone’s IOS11 with symmetrically encrypted flash that I knew nothing about but I love that they keep my data safe and this closed source youtube I cannot imagine how that must hurt you so you post videos here.. I would be scared if I were you maybe they will track you having the metadata you supplied with the vidoes.. dude I love that I am not you..
@default kozlowsqi at least we own the software that runs our computers, and at any time i can just format my harddrive and reinstall my entire system without having to be connected to the internet,
while you can't even use the maps application or siri digital assistant on your iphone’s iOS without having to be connected to the internet
@techno tux I can do that too(reinstall from linux to linux to windows to linux.. and so on).. and come on nobody uses siri(or cortana(or hey google)) ..and are you using paper maps ?!
_UTC-8🌤️8AM Jan 9th 2023_