PL文件 加密解密.docxVIP

?Protect your privacy with GnuPGThursday, November 5th, 2009 @ 12:04 pm众所周知，GnuPG是一个强大的，提供加密解密、签名认证服务的开源软件。网上有关它的介绍很多，本文主要说明如何在debian lenny上使用GnuPG。更新gnupg配置Debian lenny默认会安装GnuPG，首先修改gnupg的配置文件$ vi ~/.gnupg/gpg.conf文件最后加上下面内容:personal-digest-preferences SHA256cert-digest-algo SHA256default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressedpersonal-digest-preferences: 消息摘要 算法优先顺序， debian-admin 推荐用 SHA-256cert-digest-algo: 签名key 时使用的消息摘要算法default-preference-list: 以后创建新key时的默认算法顺序，可以通过”setpref“修改创建 Key这里创建的是primary key，默认的DSA在新版本的GnuPG (1.4.10+) 已经不被推荐了，还是遵循某Debian大拿的指示(参考文档[6])，采用RSA。$ gpg --gen-keygpg (GnuPG) 1.4.9; Copyright (C)2008 Free Software Foundation, Inc.This is free software: you are free to change and redistribute it.There is NO WARRANTY, to the extent permitted by law.?Please select what kind of key you want:(1) DSA and Elgamal (default)(2) DSA (sign only)(5) RSA (sign only)Your selection? 5RSA keys may be between 1024 and 4096 bits long.What keysize do you want? (2048)4096Requested keysize is 4096 bitsPlease specify how long the key should be valid.0 = key does not expiren = key expires in n daysnw = key expires in n weeksnm = key expires in n monthsny = key expires in n yearsKey is valid for? (0)Key does not expire at allIs this correct? (y/N) y?You need a user ID to identify your key; the software constructs the user IDfrom the Real Name, Comment and Email Address in this form:Heinrich Heine (Der Dichter) heinrichh@duesseldorf.de?Real name: Tommy WangEmail address: x@a.orgComment:You selected this USER-ID:Tommy Wang x@a.org?Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? oYou need a Passphrase to protect your secret key.?We need to generate a lot of random bytes. It is a good idea to performsome other action (type on the keyboard, move the mouse, utilize thedisks) during the prime generation; this gives the random numbergenerator a better chance to gain enough entropy.?gpg: key A565F2C2 marked as ultim