CH-J Toolsserver management over SSH
Menu
All key examples →

Example 26 · V5 · ECDSA NIST P-256 + ECDH NIST P-256

Version 5 key (LibrePGP): its own fingerprint of 64 hex digits and packet format, used by GnuPG 2.4 and newer. Not compatible with RFC 9580 V6 software such as Sequoia.

Key overview

Key versionV5
SpecificationLibrePGP draft-koch-librepgp-06
StatusActive draft, not an approved RFC
Primary key (certify, sign)ECDSA NIST P-256 · ID 19 · SHA-256
Encryption subkeyECDH NIST P-256 · ID 18
Fingerprint26D25AD540E879D954BCCE24222A10AB844C3C53A49B5C673CA25308D40422DB
Passphrase of the private keysynthetic-key-password

Algorithms and use

ECDSA NIST P-256: Elliptic-curve signature on the NIST P-256 curve, common in smart cards, HSMs and environments that require NIST curves.

ECDH NIST P-256: Elliptic-curve Diffie-Hellman encryption subkey on NIST P-256.

Public key

The public certificate with the primary key, the encryption subkey and their binding signatures. Import it to verify signatures or to encrypt to this test identity.

Download → 766 bytes

-----BEGIN PGP PUBLIC KEY BLOCK-----

xlYFaveFKhMAAABMCCqGSM49AwEHAgMEbtRXe4yHqkr8SoA/pASCzT7llDumJREh
zF00ARdKZAS41KEDcJdde0lkkibEUHErfdToqd5xL3ZCZWq7+tinp80mQ0gtSiBt
YXRyaXggMjYtdjUtZWNkc2EtcDI1NitlY2RoLXAyNTbClgUTEwgAPgUCaveFKiIh
BSbSWtVA6HnZVLzOJCIqEKuETDxTpJtcZzyiUwjUBCLbAhsDAhkBBAsJCAcEFQoJ
CAQWAgEAAAoJECbSWtVA6HnZr9ABAP9XElZt2V78IQDUcplKJ+HY/YdgPuhkaYsx
y6/XKX2AAQD7vchU43A3IqTI6lTRKIONODHyffv3W5jslGIXHqJsks5aBWr3hSoS
AAAAUAgqhkjOPQMBBwIDBCnyBvrIf+a7PEdJfn1eq6Dq+r5nAd0FL6gKaydhO2bs
FaB2FCroQCtF+VGcGdlpLLf+SeOMEyOg41R7981xHRQDAQgHwoQFGBMIACwFAmr3
hSoiIQUm0lrVQOh52VS8ziQiKhCrhEw8U6SbXGc8olMI1AQi2wIbDAAKCRAm0lrV
QOh52WXZAP9bM/cZHkWStiJFQkNOu8u9wqUYyqxzX3IOLoK3RfKs6wD9HsXMa/Ws
YjlrjnW4o+Cg+LTO1QHtpQvj3UgATSW+oQM=
=Il1M
-----END PGP PUBLIC KEY BLOCK-----

Private key

The private key, protected with the passphrase shown above. Published for testing only: anyone can use it.

Download → 1 008 bytes

Show
-----BEGIN PGP PRIVATE KEY BLOCK-----
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=XH2r
-----END PGP PRIVATE KEY BLOCK-----

Revocation certificate

A pre-generated revocation certificate. Importing it marks the key as revoked; it is published so you can test how software handles revoked keys.

Download → 945 bytes

Show
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=m+uw
-----END PGP PUBLIC KEY BLOCK-----

Signature of test_1MB.bin

Detached ASCII-armored signature of test_1MB.bin made with this key in CH-J Tools. Save it as test_1MB.bin.asc next to the test file.

Download → 244 bytes

-----BEGIN PGP SIGNATURE-----

woEFABMIACkFAmr3jvIiIQUm0lrVQOh52VS8ziQiKhCrhEw8U6SbXGc8olMI1AQi
2wAKCRAm0lrVQOh52ZHaAP0SiEHFG2wAEj3fvcuQcEkyWEMJcxv12inBUsWYD2Wm
RgEAz1k2rQPMi6ZUpfJkpG36cEIYQQTblG8i7eVatgOnnRY=
=wgEY
-----END PGP SIGNATURE-----

Verify the signature

Version 5 keys need GnuPG 2.4 or newer, or CH-J Tools. Use a temporary GNUPGHOME so the test key does not enter your real keyring:

gpg --import pgp-example-26-public.asc
gpg --verify test_1MB.bin.asc test_1MB.bin

Download test_1MB.bin →