KGpg

KGpg fournit une interface graphique aux commandes de gpg

GnuPG chiffre et déchiffre vos e-mails et les fichiers que vous avez choisi. Il y a plusieurs options de ligne de commande pour réaliser cela. Avec KGpg, l'anxiété disparait - vous n'avez pas besoin de vous rappelez les commandes. KGpg peut vous aider à paramétrer et à gérer vos clés, à importer et exporter des clés, à voir les signatures des clés, le statut de confiance et les dates d'expiration. En fait, tout ce dont vous avez besoin est pris en charge par KGpg. Un assistant est présent pour vous aider à paramétrer vos clés.

KGpg est intégré dans Konqueror et Dolphin, où un menu contextuel vous permet de choisir de chiffrer un fichier, avec ou sans signature.

Vue des propriétés des clés

Cliquez avec le bouton droit pour voir les options

Étendre le vie de vos clés

As you can see in the image above, you can extend the life of your keys using the Change Expiration button. Simply choose the new date from the popup calendar. To do this, however, you must have access to the private key and its pass-phrase. Without them you can do nothing.

Change your passphrase

Should you suspect your passphrase is compromised, you can change this also from the Key Properties dialogue. The Change Passphrase button is below Change Expiration.

Revoking a key

If you lose your private key or think it has been compromised in some way you need to revoke it. To reliably render a key unusable you need to revoke it. Revoking is done by adding a special revocation signature to the key.

The revocation signature can be created together with the key. In this case it is stored in a separate file. This file can later be imported into the keyring and is then attached to the key rendering it unusable.

Warning

Please note that to import this signature to the key no password is required. Therefore you should store this revokation signature in a safe place, usually one that is different from you key pair. It is a good advise to use a place that is detached from your computer, either copy it to an external storage device like an USB stick or print it out.

If you have not created such a detached revocation on key creation you can create such a revocation signature at any time choosing Your Key -> Revoke key, optionally importing it to your keyring immediately.

Note

The option to revoke a key has only been available in the context menu until KDE SC 4.7.1. Since then it has been moved to the key menu.

Tip

When you start KGpg with default settings it will hide in the system tray. If you started KGpg and do not see it anywhere you can probably reach it when you expand the Plasma system tray widget.

Tip

If a contact has more than one key - perhaps some old keys in addition to the current one - and the wrong key is being used for encryption, find the old keys and reduced their Trust status to Not Trusted. They will remain available for decrypting old messages, but not used for new ones.

A full illustrated manual helps you through every detail.

If you are not in a position to physically verify the identity of your contacts you should especially read the key-signing section which explains the benefits of local-signing.

Useful external resources

• Explanation of OpenPGP concepts for beginners

• the base software: GnuPG