Ħarsa ġenerali lejn iċ-ċavetta
| Verżjoni taċ-ċavetta | V2 |
|---|---|
| Speċifikazzjoni | RFC 1991 · RFC 2440 |
| Stat | Skaduta – legacy, miżmuma biss għall-kompatibbiltà storika |
| Ċavetta primarja (ċertifikazzjoni, iffirmar) | RSA 1024 · ID 1 |
| Subċavetta għall-kriptaġġ | L-ebda waħda: iċ-ċwievet tal-verżjoni 2 u 3 m’għandhomx subċwievet; iċ-ċavetta RSA primarja tikkripta wkoll (C/S/E derivat mill-algoritmu) |
| Marka diġitali | 6BC0D98BBD116770A8490E45FD1AC24C |
| Frażi sigrieta taċ-ċavetta privata | synthetic-key-password |
Algoritmi u użu
RSA 1024: RSA b’modulu ta’ 1024 bit, meqjus vulnerabbli llum. Miżmum biss għall-kompatibbiltà storika; GnuPG jaċċettah, Sequoia u għodod ibbażati fuq rPGP jirrifjutaw ċwievet taħt 2048 bit, bħalma jagħmel is-server taċ-ċwievet keys2.
Ċavetta pubblika
Iċ-ċavetta pubblika bl-ID tal-utent tagħha u l-firma tagħha stess. Iċ-ċwievet tal-verżjoni 2 u 3 m’għandhomx subċwievet: l-istess ċavetta RSA tivverifika l-firem u tintuża biex tikkripta għal din l-identità ta’ prova.
Niżżel → 522 bytes
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQCPAmr3la4AAAEEALEREzp6i293syqxXyvpu7STdlnKmyaNxwAyJbVmzQuK0D/0
jXG68yBISCMUeYn+wsemu27FKB5W0bgiOFfhoT6SJvpZNtJjmT/gmje8l6y9Ml7X
ByyDUhSeW5hy2f6sXDKB4I8ZQQW9zBJc5XYMjcVpSvg2p7cpIgRNlXYTFl+HABEB
AAG0GUNILUogbWF0cml4IDQzLXYyLXJzYTEwMjSJAJUCBRBq95WuBE2VdhMWX4cB
AY3tBACR9kPU8WUizEr8NMMJpuhQPfT9n5nLp5E2fsBAkok4OTmdmF3Km2axxrcw
BjNbJ6m6cEBoXqLAh13m8RUAnLHSgv1lovyq/ysyhlmZxrtJ7D9isrLfkxvsMn6F
nx9ASP40Z6HTHdqXVqXk2Ir0Ksspcpd6nk1rmz3J0vhXQe08Tg==
=N7kq
-----END PGP PUBLIC KEY BLOCK-----
Ċavetta privata
Iċ-ċavetta privata, protetta bil-frażi sigrieta murija hawn fuq. Ippubblikata għall-ittestjar biss: kulħadd jista’ jużaha.
Niżżel → 983 bytes
Uri
-----BEGIN PGP PRIVATE KEY BLOCK-----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=h3n3
-----END PGP PRIVATE KEY BLOCK-----
Ċertifikat ta’ revoka
Ċertifikat ta’ kompromess taċ-ċavetta ġġenerat minn qabel, bil-klassi tal-firma 0x20 definita minn RFC 1991 (“This is my key, and I have revoked it”) u implimentata minn PGP 2.6. Meta timportah, iċ-ċavetta tiġi mmarkata bħala revokata.
Niżżel → 725 bytes
Uri
-----BEGIN PGP PUBLIC KEY BLOCK-----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=tjaP
-----END PGP PUBLIC KEY BLOCK-----
Firma ta’ test_1MB.bin
Firma separata ta’ test_1MB.bin f’format ASCII armor, magħmula b’din iċ-ċavetta f’CH-J Tools. Issejvjaha bħala test_1MB.bin.asc ħdejn il-fajl ta’ prova.
Niżżel → 273 bytes
-----BEGIN PGP SIGNATURE-----
iQCVAgUAaveVrgRNlXYTFl+HAQEGewP/Y5DuFAG2/8mkfq15mzDoMsiRqUP5/DK2
XfDpdSjyGS5r9Uzpbuk/MqL2M1TscfVQvjDoihIbcdUk6yZeWnP9SIXoplr3F90b
40JUSTnSoj91urqMplNSIXetoVFT4B4OH7ZnTmrmDoTcac+UIeGDAdwa6jrXj01D
5KJXGL/Hhng=
=g/kk
-----END PGP SIGNATURE-----
Ivverifika l-firma
Iċ-ċwievet tal-verżjoni 3 u 2 jeħtieġu GnuPG 1.4 (gpg1) b’permess espliċitu għal MD5, jew verżjonijiet storiċi ta’ PGP, jew CH-J Tools. Uża GNUPGHOME temporanju sabiex iċ-ċavetta ta’ prova ma tidħolx fil-ġabra taċ-ċwievet reali tiegħek:
export GNUPGHOME="$(mktemp -d)"
gpg1 --allow-weak-digest-algos --import pgp-example-43-public.asc
gpg1 --allow-weak-digest-algos --verify test_1MB.bin.asc test_1MB.bin