Pretty Good Privacy
English Version Tutorial (Windows Only)
Please wait 1/2 minutes (depending on your connection speed) to load all the images

Table of Contents

Abstract
Understanding PGP
Getting Started
- Download and Installation
- Create Your First Private and Public Keys
  - Record Key Information
    - Passpharse
    - Fingerprint
    - Backup Of Key Pair...
    - Upload Public Key To Directory Service...
- Create PGP Signed Message and Signature
- Verify PGP Signed Message and Signature
- Create Encrypted Message
- Decrypt an Encrypted Message
Some Real Life PGP Public Keys
Exercises - Home Work
FAQ
Acknowledgements
References

Abstract
Go to top

Many people do not have any clue about PGP encryption/decryption. It was same for me however I had to learn it the hard way. Explore the topic The BCT PGP/GPG Public Key Database: Stake Your PGP Key Here to understand why you need to know it. If you are an Electrum wallet user then I am pretty sure you have seen a signature link next to the installation file. You also seen a warning notification on the top which talks about a fake copy of Electrum.

Long story short, PGP gives you extensive privacy and you can easily validate the authentic source of your received file/text. In this tutorial we will learn...

# How to create PGP Signed message and signature
# How to verify a PGP Signed message and signature
# How to encrypt a message
# How to decrypt a message

Once you get a good grip of these 4 basics, I believe you will be able to grab the rest without having any further assistance.

A Better Understanding
Go to top

Before we start, it's gonna help you if I give you a brief. PGP consist of two Keys...
1. Private key <=== You need it to decrypt a content
1. a) You also need a passphrase, in other words a strong password.
2. Public key <=== You need it to encrypt a content

Think about a very sensitive message you want to email to your friend. You don't want any gov agency or any spy read the message. These people can easily access your email server. To avoid it, ask you friend to give his PGP public key. Once you have it then encrypt the message and email the encrypted message to your friend. Now only your friend can decrypt it because he knows the private key.

Warning: Do not share your private key and passphrase with anyone.

Getting Started
Go to top

Download and Installation Go to top
You will need Kleopatra desktop application. Click here and download gpg4win-3.1.1.exe (this is the current version, you might find the same or a different version but don't mind, whatever the version they will have on their server, it will be downloaded). Once download done, go ahead and install the application (I assume, you know basics of installing an application). Once installation done, you will be seeing Kleopatra icon on your desktop.

Create Your First Private and Public Keys Go to top

1. Open Kleopatra > File > New Key Pair...
LoadingOpeningKleopatra

Click here if unable to see image

2. Click on Create a personal OpenPGP key pair
LoadingCreateA personal OpenPGP key pair

LoadingCreateA personal OpenPGP key pair

Click here if unable to see image

3. Enter Name and Email > Click Next
Loading without name and email

In our case, we are using...

Code:

Name: mdayonliner Tutorial
Email: tutorial@bitcoinTalk.com

Of course these are made up information to demonstrate the tutorial

4.Click Create
Loading Click Create

5.Enter passphrase (consider a strong password) -> Repeat -> click OK
Loading without passphrase

In our case we have used... <=== Do not publish it in public ever

Code:

tutorialMday

6. Record the following information...
6.1. Fingerprint : In a text file or any other file of you choice

Code:

3DE42C11CBDD44EFC63B602DFA92987833EE3CE0

6.2. Make a Backup Of Your Key Pair...
6.3. Upload Public Key To Directory Service...
6.4 Finish
Loading Record the following information...

Loading Record the following information...

6.2 Click on Make a Backup Of Your Key Pair...
Click on Before Make a Backup Of Your Key Pair...

Click on Before Make a Backup Of Your Key Pair...

Chose a directory of your harddrive and keep the file safe. This is our private key obviously

Enter passpharse -> Click Ok
Loading...

Click Ok

This process just exported the PRIVATE KEY <===== Do not publish it in public ever
Locate the exported file and open it with notepad

Code:

6.3. Click on Upload Public Key To Directory Service... -> wait a little bit -> Click OK
This will upload the Public Key online in the PGP Directory Service
But before that we need to check if the directory domain is still active. In case of inactive domains please follow the following setting.

Quote from: Husna QA on November 17, 2020, 01:20:49 PM

Quote from: abdulodoi on November 16, 2020, 03:56:06 PM

An error occurred while trying to export OpenPGP certificates.
Server indicated a failure gpg: keyserver send failed: Server indicated a failure
-snip-

Try changing the OpenPGP keyserver.
If you are using Windows OS and Kleopatra as in the tutorial above, go to Settings -> Configure Kleopatra ...
In the OpenPGP Keyserver column (default: hkps: //hkps.pool.sks-keyservers.net), enter the keyserver that is still active/accessible, https://pgp.mit.edu; http://keyserver.ubuntu.com/; or other servers; then click OK.

Quote from: Husna QA on April 30, 2020, 03:35:34 PM

-snip-

Here's an example of my public key:
http://keyserver.ubuntu.com/pks/lookup?op=get&search=0x58bc997445d96f68db65c169a2ca884f183d22e9

Don't worry if there is an error. You can do this later after proper configuration.

Click OK and Finish

You should be seeing your newly created PGP user ID
Loading...

6.3.a. Right click -> Click on Publish on Server
Even after changing the server if you keep getting error then do not worry. You do not need any server for your public key. You can save it in your computer
Loading...

Save it in your computer in a known directory. This is your public key

Code:

So, we have now our...
1. Private Key
2. Passphrase
3. Public Key
4. Fingerprint

Red: Private only | Green: Publicly can be shared

Create PGP Signed Message and Signature Go to top

Assume below is our message and we want to sign it using PGP Signature

Code:

My username mdayonliner. It's m-day-online-r
I am going to sign this message using PGP

1. Open Notepad > Type the message > Select the message > Copy the message.

2. Open System Tray > Right Click on Kleopatra icon > Mouse hover on Clipboard > Click OpenPGP-Sign...
Loading...

3. Click Next > Enter passphrase > Click OK

By default it should have your Key pair to sign for, we can call a Key pair as Certificate. If you have more than one for yourself then you can change it to the one you are going to sign for.
Loading...

4. Click OK

Loading...

5. Open another Notepad > Paste (Ctrl+V)

Code:

Congratulations, you have just created your first PGP Signed Message with Signature.

[--------------still updating below contents ------------- 21/12/2020]

Verify PGP Signed Message and Signature Go to top

Let's say we want to verify the PGP Signed Message of Husna QA. Below we have our PGP Signed Message with Signature

Code:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Date: 2018-03-29
Bitcointalk.org login: Husna QA (1827294)
Bitcoin address: 1HdK4YRuPrgWrTkFHTPaJoLvYJ8Cgehgnc
E-mail: husna.qurrota.a.02@gmail.com

PGP fingerprints:
RSA: 0x58BC997445D96F68DB65C169A2CA884F183D22E9
Ed25519: 0xC9B290C8C87C9BB5F440E82AD21FD04306AED362

I declare that aforestated Bitcoin address
may issue signatures controlling the aforestated Bitcointalk account.
I declare that my aforestated PGP Fingerprint RSA and Ed25519 Certification key is
the peremptory trust anchor for my online identity at this time,
and unless/until that key signs a statement declaring otherwise,
Unless this statement be revoked or modified by a statement bearing
authentication rooted in that key.
-----BEGIN PGP SIGNATURE-----
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=0PbZ
-----END PGP SIGNATURE-----

1. Select everything in the code tag > Copy (Ctrl+C)

2. Open System Tray > Right Click on Kleopatra icon > Mouse hover on Clipboard > Click Decrypt/Verify...
Loading...

3. Click Search > Wait few seconds until you see an active window > Select > Click Import

You will need PGP Fingerprint/Public Key of Husna QA, imported in Kleopatra Certificate list. If you do not have it prior then start from search.

Loading...

4. Check 1 & 2 > Click Next (3)

Loading...

5. Choose your key pair > Check Certify only for myself > Click Certify

Loading...

6. Enter passphrase > Click OK

Loading...

7. Click Finish (1) > If the imported information are valid then you will see green > Click Finish(2)

Loading...

8. Open another Notepad > Paste (Ctrl+V)

Code:

Date: 2018-03-29
Bitcointalk.org login: Husna QA (1827294)
Bitcoin address: 1HdK4YRuPrgWrTkFHTPaJoLvYJ8Cgehgnc
E-mail: husna.qurrota.a.02@gmail.com

PGP fingerprints:
RSA: 0x58BC997445D96F68DB65C169A2CA884F183D22E9
Ed25519: 0xC9B290C8C87C9BB5F440E82AD21FD04306AED362

I declare that aforestated Bitcoin address
may issue signatures controlling the aforestated Bitcointalk account.
I declare that my aforestated PGP Fingerprint RSA and Ed25519 Certification key is
the peremptory trust anchor for my online identity at this time,
and unless/until that key signs a statement declaring otherwise,
Unless this statement be revoked or modified by a statement bearing
authentication rooted in that key.

Congratulations, you just verified your first PGP Signed Message with Signature.

Create Encrypted Message Go to top

Before creating an Encrypted message we need someone else's PGP Fingerprint/Public Key Certificate. We already imported Public Key information for Husna QA. So, lets assume we will send him/her the Encrypted message. <<=== Please literally do not send him/her any message. Hack, s/he does not even know about this tutorial.

Now assume, below is our message and we want to Encrypt it.

Code:

It's m-day-online-r going to Encrypt this message..
..using Kleopatra PGP Encryption

1. Open Notepad > Type the message > Select the message > Copy the message.

2. Open System Tray > Right Click on Kleopatra icon > Mouse hover on Clipboard > Click Encrypt...
Loading...

3. Click Add Recipient(1)

Loading...

4. Select Recipient > Click OK (2) > Click Next

Loading...

5. Click OK

Loading...

6. Open Notepad > Paste (Ctrl+V)

Code:

Congratulations on Encrypting the message. If you send it to Husna QA, then only s/he can Decrypt it and read the original message.

Decrypt an Encrypted Message Go to top

Assume you know my PGP Fingerprint/Public Key. You sent me an Encrypted message which is below.

Code:

My Fingerprint (This is the one I am using for the forum):

Code:

81DAEE690159E01E28FF951086FEA0B65C6E1B2C

Now, we will see how to decrypt this message.

1. Select the entire message > Copy (Ctrl + C)

2. Open System Tray > Right Click on Kleopatra icon > Mouse hover on Clipboard > Click Decrypt/Verify...
Loading...

3. Enter passphrase (1) > Click OK (2)

Loading...

4. Click Finish

Loading...

5. Open Notepad > Paste (Ctrl + V)

Code:

Hello m-day-online-r,
I am sending you this encrypted message.

Thank you.

This was the raw message which was encrypted before.

Some Real Life PGP Public Keys
Go to top

Some of the example PGP Public Keys you might be interested to explore or have it imported.

Name	Knows as	Key file or Fingerprint	Ref
satoshi	Founder and Bitcoin Creator	File	Source
theymos	Administrator of BitcoinTalk	File	Source
gmaxwell	Bitcoin Core Developer	File	Source

Exercises - Home Work
Go to top

Welcome to the exercises section. Before we start, here is what you wanna do.
1. Create a New Key Pair with the following information

Code:

Name: ex-<your bitcoinTalk username>
Email: <yourBitcoinTalkUsername@BitcoinTalk.com>

i.e:

Code:

Name: ex-mdayonliner
Email: <mdayonliner@BitcoinTalk.com>

We don't actually want to use our real name and email address for these exercises. The username part with the prefix ex- will help me and others to identify that we are communicating with you.

2. Have your Fingerprint published on the online server. It's gonna help me and other members to access your public key for encrypted communication.

We will have two assignments to practice. I will think of an award later for the successful participants.

Assignment 1: PGP Singed Message and Signature - Coming soon.
Assignment 2: Encrypt and Decrypt Message - Coming soon.

Click here for my Fingerprint on the server.

Code:

81DAEE690159E01E28FF951086FEA0B65C6E1B2C

FAQ
Go to top

electrobit: Could someone explain what is the purpose or advantages about to create or make a PGP?
Answer

Please feel free to ask any question in the comment. I will add them in here with the answer. If I do not have the answer then I will try to seek senior members' help or I will find an answer for your question. Make sure the question is related to the topic.

Acknowledgements
Go to top

Husna QA: The topic PGP/GPG Signed Message - Public Key in his/her local language was the starter for me to start my learning. I am happy that I was good enough to understand the translation in English.
TryNinja: Provided some URLs which cleared my head to understand better.
hugeblack: Suggested the idea of adding some example PGP Public Keys.
All the members who were leaving their PGP PUBLIC KEYs all around the forum. Seeing these encrypted codes were interesting for me and finally I decided to investigate what was it all about.

References
Go to top

https://en.wikipedia.org/wiki/Pretty_Good_Privacy
http://www.pitt.edu/~poole/PGP.htm

This tutorial will be continued with further materials in future
Looking forward to your expertise review and feedback