CH-J Toolsserver management over SSH
Menu
All key examples →

Example 44 · V2 · RSA 2048 (legacy)

Version 2 key (PGP 2.x, RFC 1991): MD5 fingerprint of 32 hex digits, RSA only, no subkeys, unlimited validity; the primary key certifies, signs and encrypts. IDEA protection and MD5 signatures are obsolete. Only GnuPG 1.4 with weak-digest allowances or historical PGP read it.

Key overview

Key versionV2
SpecificationRFC 1991 · RFC 2440
StatusObsolete – legacy, kept for historical compatibility only
Primary key (certify, sign)RSA 2048 · ID 1
Encryption subkeyNone: version 2 and 3 keys have no subkeys, the primary RSA key also encrypts (C/S/E derived from the algorithm)
Fingerprint55AC229DCC134C267809F0D9D6FCE76F
Passphrase of the private keysynthetic-key-password

Algorithms and use

RSA 2048: RSA with a modulus of 2048 bits. Still accepted by most software, but RFC 9580 no longer recommends generating RSA keys below 3072 bits; kept as a legacy option.

Public key

The public key with its user ID and self-signature. Version 2 and 3 keys have no subkeys: the same RSA key verifies signatures and is used to encrypt to this test identity.

Download → 868 bytes

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=2hSt
-----END PGP PUBLIC KEY BLOCK-----

Private key

The private key, protected with the passphrase shown above. Published for testing only: anyone can use it.

Download → 1 763 bytes

Show
-----BEGIN PGP PRIVATE KEY BLOCK-----
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=4qL2
-----END PGP PRIVATE KEY BLOCK-----

Revocation certificate

A pre-generated key compromise certificate, signature class 0x20 defined by RFC 1991 ("This is my key, and I have revoked it") and implemented by PGP 2.6. Importing it marks the key as revoked.

Download → 1 245 bytes

Show
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=2y3k
-----END PGP PUBLIC KEY BLOCK-----

Signature of test_1MB.bin

Detached ASCII-armored signature of test_1MB.bin made with this key in CH-J Tools. Save it as test_1MB.bin.asc next to the test file.

Download → 447 bytes

-----BEGIN PGP SIGNATURE-----

iQEVAgUAaveVrjtHsH2TYea7AQEGewf6A6u4O9FXbuChBU8JOyz2q/urvR4UC01H
9KMvP1bP2Ik0CtArzs2QAH7GhEgvjEygLUSgyUxntQHBF+dkGlGOZMwkqBIeoauN
t7ZWWgKb1UAlggvNNiUMsvRIEA/c3g/jTaNUufGdWqhZ0eF6NKe/O4vKvrVHELCz
26XH2JEP8BTDxC4CdaAq2PishBseKd7GxAGZzlqBaM4TchGdIi0427kRP8+po/oj
i2B4VunmA8HwulraMFc9e2uuh8UUBC5k1Ur2IUx70FKYjvwGoA00ySM/IszwYGoA
37wmM+UHxHM2omv9mHqbmT64E2AcSRKokUgcmH5ewySEg44cExygQw==
=99+I
-----END PGP SIGNATURE-----

Verify the signature

Version 3 and 2 keys need GnuPG 1.4 (gpg1) with explicit allowance for MD5, or historical PGP, or CH-J Tools. Use a temporary GNUPGHOME so the test key does not enter your real keyring:

export GNUPGHOME="$(mktemp -d)"
gpg1 --allow-weak-digest-algos --import pgp-example-44-public.asc
gpg1 --allow-weak-digest-algos --verify test_1MB.bin.asc test_1MB.bin

Download test_1MB.bin →