An Advanced Introduction to GnuPG

I Main Matter 7 Introduction 9 History 10 OpenPGP Criticism 11 Usability 11 Deniability 11 Forward Sececy 12 Modern Chat Protocols 12 Privacy 13 Scope 13 A GnuPG Primer 15 Cryptography 17 OpenPGP 19 Data at Rest 20 Unbuffered Message Processing 22 OpenPGP Messages 22 Encryption 23 Hybrid Encryption 24 Algorithm 25 An Encrypted Message 25 Signing 30 Multiple Signers 30 Algorithm 31 Example 32 Keys 36 Multiple Public and Private Key Pairs 36 Self Signatures 38 Example 38 Key Signing 43 Local Signatures 44 Confidence 44 Trusted Introducers 45 Non-Revocable Signatures 46 Example 46 Revocations 48 Notations 49 Summary 50 Passwords 51 Diceware 51 Key Creation 53 Keys Aren't Forever, Revocation Certificates Are 54 Backing Up a Revocation Certificate 56 Publishing a Revocation Certificate 57 Recruiting Your Friends 58 Tweaking, Twiddling, and Frobbing 59 Security Tokens 60 Hardware 61 Creating a Key 63 Tails 65 Initializing the Security Token 67 Formatting the Removable Storage Devices 70 Generating the Keys 71 Saving Your Progress 73 Creating a Backup 74 Copying the Keys to the Security Token 75 Using the Keys 79 Saving the Revocation Certificate 81 Signing Keys with an Offline Master 81 Key Expiration 85 Subkey Rotation 86 Validating Keys 89 Key Discovery 90 GnuPG's Architecture 91 gpg-connect-agent 92 signals 92 Assuan 92 Debugging 92 configuration 93 Good Practices and Tips 95 Refresh keys. 95 Key Disclosure 95 Backups 95 ssh 95 Remote gpg-agent 96 MUA Integration 99 Integration 101 Key Creation 102 Revocation Certificate 104 Expiration 105 Sending Mail 105 Encryption Keys 107 BCC Recipients 108 Saving Drafts 109 Sent Mails 109 Attaching Keys 109 Reading Mail 110 Verifying Messages 110 Multi-part Emails 113 Unencrypted Cache 114 Key Management 114 Key Discovery 115 Key Verification 119 TOFU Conflict Resolution 121 Address Book Integration 122 Programming with GnuPG 123 Misc. 125