GPG - Any one know about it?

gobbo · 11 Feb 2009 at 21:12

Does anyone know much about GPG, specifically importing of an RSA private key?

I've been given an RSA private key to encode a file with, unfortunately there doesn't appear to be any way of importing it into GPG to do this!

Any help rewarded with internet cookies!

BigglesPiP · 11 Feb 2009 at 21:17

according to the man page:

Code:

#gpg --import

No other terms are mentioned, so I'd have to assume it's a wizard.

slylittlefox · 11 Feb 2009 at 21:20

gobbo said:
Does anyone know much about GPG, specifically importing of an RSA private key?

I've been given an RSA private key to encode a file with, unfortunately there doesn't appear to be any way of importing it into GPG to do this!

Any help rewarded with internet cookies!

Tutt tutt. What would Chuck say. Which of the crypto challenges are you upto?

gobbo · 11 Feb 2009 at 21:26

^Now that is weird!! Still on Q31 of the PKI challenge, been trying to figure it out for the past 2 hours.

Tried all the normal import commands but no luck at all!

slylittlefox · 11 Feb 2009 at 21:36

Yeah it is a bit wierd

You need to be using openssl. Take it you're on a Linux box? It should be installed by default.

You'll need to setup a CA as per the docs given in Semester 1 (they're still available, substitute http://blah/semester_2/ with semester_1) - Lab #10 is the one you want.

And then:

Code:

man openssl
man rsautl
man x509

Plenty of good guides around on the net - from my history:
http://www.entropy.ch/blog/Develope...Public-Key-and-PKI-Crash-Course-Part-1-4.html
http://www.5dollarwhitebox.org/wiki/index.php/OpenSSL_Quick_Reference
http://www.madboa.com/geek/openssl/

If all else fails, e-mail Chuck - he's helped me out whenever I've been staring at the screen for hours on end.

One other note - whenever you use echo, use echo -n - that kills the line feed.

gobbo · 11 Feb 2009 at 21:53

Thank you my friend! I'll have to buy you a beer, now...who are you again?!

slylittlefox · 11 Feb 2009 at 22:24

Shout Luke in the next lecture and have the beer ready with you

gobbo · 11 Feb 2009 at 23:39

Making some progress, sadly Chucks website keeps rejecting it, but i'm sure it's the right command!

echo -n "enigma" | openssl rsautl -sign -inkey Q31RSA.PRI | openssl enc -base64

slylittlefox · 12 Feb 2009 at 11:22

You don't need quotes when using echo

Oh and I think you need a -e on the end of the base64 command - but perhaps not!

gobbo · 12 Feb 2009 at 12:37

i've cracked that one, on to the next one!

slylittlefox · 12 Feb 2009 at 13:41

You'll breeze through until you get stuck on 36

tntcoder · 12 Feb 2009 at 14:03

Whats this stuff you guys are doing? Sounds like fun

slylittlefox · 12 Feb 2009 at 14:26

tntcoder said:
Whats this stuff you guys are doing? Sounds like fun

Cryptography challenges, for a 'Network and Systems Security' module in final year of our course

And from reading your blog/website - it sounds like it'd be right up your street

/Installs Damn Vulnerable Linux

gobbo · 12 Feb 2009 at 14:31

slylittlefox said:
You'll breeze through until you get stuck on 36

Spent a bit of time on 32, was being an artard with it though.

33 looks pretty simple really.

slylittlefox · 12 Feb 2009 at 14:47

What's the command? And come to think of it, what's the question

Remember you have to use a public key to verify - not the private key! In fact, is that right...

/goes off to check

gobbo · 12 Feb 2009 at 14:52

Yep, verify signature using public key

slylittlefox · 12 Feb 2009 at 15:00

So come on, what's the commands you're giving? And the keys? I'm not a mind reader

Ah, just seen your ninja edit!