Ħarsa ġenerali lejn iċ-ċavetta
| Verżjoni taċ-ċavetta | V3 |
|---|---|
| Speċifikazzjoni | RFC 1991 · RFC 2440 · RFC 4880 |
| Stat | Skaduta – legacy, miżmuma biss għall-kompatibbiltà storika |
| Ċavetta primarja (ċertifikazzjoni, iffirmar) | RSA 1024 · ID 1 |
| Subċavetta għall-kriptaġġ | L-ebda waħda: iċ-ċwievet tal-verżjoni 2 u 3 m’għandhomx subċwievet; iċ-ċavetta RSA primarja tikkripta wkoll (C/S/E derivat mill-algoritmu) |
| Marka diġitali | 8C82CFA8E8957EA451848A6948E37C72 |
| Frażi sigrieta taċ-ċavetta privata | synthetic-key-password |
Algoritmi u użu
RSA 1024: RSA b’modulu ta’ 1024 bit, meqjus vulnerabbli llum. Miżmum biss għall-kompatibbiltà storika; GnuPG jaċċettah, Sequoia u għodod ibbażati fuq rPGP jirrifjutaw ċwievet taħt 2048 bit, bħalma jagħmel is-server taċ-ċwievet keys2.
Ċavetta pubblika
Iċ-ċavetta pubblika bl-ID tal-utent tagħha u l-firma tagħha stess. Iċ-ċwievet tal-verżjoni 2 u 3 m’għandhomx subċwievet: l-istess ċavetta RSA tivverifika l-firem u tintuża biex tikkripta għal din l-identità ta’ prova.
Niżżel → 522 bytes
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQCPA2r3la4AAAEEAKbAYcHV75nFBHMuEeSltY+rW8BCKK7e2P+AMtswK8sG8SSc
OBoxM9Ik/hlTO6I8hF3axTTGA7iMdyGxXtL3Nio/I/FYgthcwzZlH/HYvtfcIv7A
R91CNxsApAZSTKFzvER2OErXOTLNs8TcK07iKVhH5s9gJ/vk5QN+1/3nHRk3ABEB
AAG0GUNILUogbWF0cml4IDQxLXYzLXJzYTEwMjSJAJUDBRBq95WuA37X/ecdGTcB
AUEsA/94CUvcJjevvEkCBzcZQX4zARY+Mh6xSmSJTBXLIrGKazDFOYnWZq10Twfp
ei85gleieNQrZ7vbFvu39I0bztixSoaoFnf76oe/y9Oaerg6eUpvuWqkbfgcgArp
UvpxeJ/YLr3Ksa7hnVzR8ar6DvyrZe8gDq80hCyUnWX+M/SnmQ==
=d6DR
-----END PGP PUBLIC KEY BLOCK-----
Ċavetta privata
Iċ-ċavetta privata, protetta bil-frażi sigrieta murija hawn fuq. Ippubblikata għall-ittestjar biss: kulħadd jista’ jużaha.
Niżżel → 983 bytes
Uri
-----BEGIN PGP PRIVATE KEY BLOCK-----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=7ZMo
-----END PGP PRIVATE KEY BLOCK-----
Ċertifikat ta’ revoka
Ċertifikat ta’ kompromess taċ-ċavetta ġġenerat minn qabel, bil-klassi tal-firma 0x20 definita minn RFC 1991 (“This is my key, and I have revoked it”) u implimentata minn PGP 2.6. Meta timportah, iċ-ċavetta tiġi mmarkata bħala revokata.
Niżżel → 725 bytes
Uri
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQCPA2r3la4AAAEEAKbAYcHV75nFBHMuEeSltY+rW8BCKK7e2P+AMtswK8sG8SSc
OBoxM9Ik/hlTO6I8hF3axTTGA7iMdyGxXtL3Nio/I/FYgthcwzZlH/HYvtfcIv7A
R91CNxsApAZSTKFzvER2OErXOTLNs8TcK07iKVhH5s9gJ/vk5QN+1/3nHRk3ABEB
AAGJAJUDBSBq95WuA37X/ecdGTcBAQKBA/938RSvUEr4RE3RH8V4mIdCNHVEXim2
v1vGCyWPFp+Re1xgnraxYCt/4bceqDjaof6N3hTraaoOd2cOP3ge39ewplNH2jl1
NaYjDLROBAGl1ZU8QTEwrsP0XRXEasYuy674fbt3TscZo+T4g+J58/1vzFeDh47T
E5TqXR7x9kFoDrQZQ0gtSiBtYXRyaXggNDEtdjMtcnNhMTAyNIkAlQMFEGr3la4D
ftf95x0ZNwEBQSwD/3gJS9wmN6+8SQIHNxlBfjMBFj4yHrFKZIlMFcsisYprMMU5
idZmrXRPB+l6LzmCV6J41Ctnu9sW+7f0jRvO2LFKhqgWd/vqh7/L05p6uDp5Sm+5
aqRt+ByACulS+nF4n9guvcqxruGdXNHxqvoO/Ktl7yAOrzSELJSdZf4z9KeZ
=qfgP
-----END PGP PUBLIC KEY BLOCK-----
Firma ta’ test_1MB.bin
Firma separata ta’ test_1MB.bin f’format ASCII armor, magħmula b’din iċ-ċavetta f’CH-J Tools. Issejvjaha bħala test_1MB.bin.asc ħdejn il-fajl ta’ prova.
Niżżel → 273 bytes
-----BEGIN PGP SIGNATURE-----
iQCVAwUAaveVrgN+1/3nHRk3AQEGewP/ck01xi+d+csd/k4uhv+Dj2n5FvCmjt3B
MaTtFXxc1wgqTLkeGTFlbjvBT1GqHF9JFhhVjV4ncksZdNvhD3DMzMVNzKLi+K1K
ewxkEdjvdYtaQl2nRS/oAZAH5wRSvZZI2YYxLSDpiP2yAwkLDEf+cddUoVdLOBWX
tcXeGQeIU5I=
=wikQ
-----END PGP SIGNATURE-----
Ivverifika l-firma
Iċ-ċwievet tal-verżjoni 3 u 2 jeħtieġu GnuPG 1.4 (gpg1) b’permess espliċitu għal MD5, jew verżjonijiet storiċi ta’ PGP, jew CH-J Tools. Uża GNUPGHOME temporanju sabiex iċ-ċavetta ta’ prova ma tidħolx fil-ġabra taċ-ċwievet reali tiegħek:
export GNUPGHOME="$(mktemp -d)"
gpg1 --allow-weak-digest-algos --import pgp-example-41-public.asc
gpg1 --allow-weak-digest-algos --verify test_1MB.bin.asc test_1MB.bin