Re: encrypt linux backup folder using gpg
On Wed, Nov 07, 2018 at 08:56:53AM +0530, Kaushal Shriyan wrote: > Thanks Francesco for the email. I have encrypted the file using my gpg key. > How > do i share the encrypted helloworld.gpg file to the recipients. For example > j...@example.com. Do I need to encrypt the file to the recipients id using > gpg pub key? Any examples to understand it better. Please comment. -r is for recipient! You should have the id/mail of your friend there! ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: encrypt linux backup folder using gpg
On Tue, 6 Nov 2018 06:55, kaushalshri...@gmail.com said: > I am using CentOS 7.5 Linux OS in my setup. I have compressed a folder > using tar utility tar czvf backupfolder.tar.gz backupfolder. Is there a way > to encrypt backupfolder.tar.gz using gpg? Are there any best practices to Sure: tar czf - WHATEVER | gpg -z0 -e -r KEY > WHATEVER.tar.gz.gpg The -z0 disable gpg's internal compression which would to to the compressed tar format anyway be disabled but -z0 gains a small speed boost. If you prefer to use only symmetrical encryption tar czf - WHATEVER | gpg -z0 -e -c > WHATEVER.tar.gz.gpg For that you need to enter the passphrase when encryption. Thus I strongly suggest to create a keypair and use the first form. There is no performance penalty using the first form because the bulk encryption is done symmetrically in both variants. You may also use tar czf - WHATEVER | gpg -z0 -e -r KEY \ | ssh HOST 'cat > WHATEVER.tar.gz.gpg' to avoid storing the data on the sender site. For restoring the data I would however strongly suggest to first decrypt (or decrypt and untar into a temporary directory) and take the new data in use only after gpg has indicated that the decryption showed no problems. If you have huge amounts of data it is possible to tweak gpg for some extra speedup but you need to build gpg from source then. Please don't use the gpg-zip script; it is obsolete and only there for compatibility with PGP. gpg-zip has been replaced by gpgtar which is part of GnuPG but it still uses an old tar format (ustar) with some limits on modern systems. gpgtar is also not as fast as the standard tar on your CentOS. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. pgpGvrhSw7lcX.pgp Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: encrypt linux backup folder using gpg
Hi Francesco, Thanks Francesco for the email. I have encrypted the file using my gpg key. How do i share the encrypted helloworld.gpg file to the recipients. For example j...@example.com. Do I need to encrypt the file to the recipients id using gpg pub key? Any examples to understand it better. Please comment. This works for me. #gpg-zip --encrypt --output helloworld.gpg -r kaushal helloworld Thanks in Advance and i look forward to hearing from you. Best Regards, On Wed, Nov 7, 2018 at 8:39 AM Francesco Ariis wrote: > On Wed, Nov 07, 2018 at 08:10:48AM +0530, Kaushal Shriyan wrote: > > Hi Francesco, > > > > Whom do i need to contact to correct the examples provided in manual > page? > > I opened a bug in Debian yesterday (after replying to you), albeit > with no patch: > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=913060 > > Let's hope it gets fixed soon! > ___ > Gnupg-users mailing list > Gnupg-users@gnupg.org > http://lists.gnupg.org/mailman/listinfo/gnupg-users > ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: encrypt linux backup folder using gpg
On Wed, Nov 07, 2018 at 08:10:48AM +0530, Kaushal Shriyan wrote: > Hi Francesco, > > Whom do i need to contact to correct the examples provided in manual page? I opened a bug in Debian yesterday (after replying to you), albeit with no patch: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=913060 Let's hope it gets fixed soon! signature.asc Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: encrypt linux backup folder using gpg
Hi Francesco, Whom do i need to contact to correct the examples provided in manual page? GPG-ZIP(1) >GNU Privacy Guard > GPG-ZIP(1) > NAME >gpg-zip - Encrypt or sign files into an archive > SYNOPSIS >gpg-zip [options] filename1 [ filename2, ... ] directory1 [ > directory2, ... ] > DESCRIPTION >gpg-zip encrypts or signs files into an archive. It is an gpg-ized > tar using the same format as used by PGP's PGP Zip. > OPTIONS >gpg-zip understands these options: >--encrypt >-e Encrypt data. This option may be combined with --symmetric > (for output that may be decrypted via a secret key or a passphrase). >--decrypt >-d Decrypt data. >--symmetric >-c Encrypt with a symmetric cipher using a passphrase. The > default symmetric cipher used is CAST5, but may be chosen with the > --cipher-algo option to gpg. >--sign >-s Make a signature. See gpg. >--recipient user >-r user > Encrypt for user id user. See gpg. >--local-user user >-u user > Use user as the key to sign with. See gpg. >--list-archive > List the contents of the specified archive. >--output file >-o file > Write output to specified file file. >--gpg gpgcmd > Use the specified command gpgcmd instead of gpg. > > --gpg-args args > Pass the specified options to gpg. >--tar tarcmd > Use the specified command tarcmd instead of tar. >--tar-args args > Pass the specified options to tar. >--version > Print version of the program and exit. >--help Display a brief help page and exit. > EXAMPLES >Encrypt the contents of directory ‘mydocs’ for user Bob to file > ‘test1’: > *gpg-zip --encrypt --output test1 --gpg-args -r Bob mydocs* >List the contents of archive ‘test1’: > gpg-zip --list-archive test1 > DIAGNOSTICS >The program returns 0 if everything was fine, 1 otherwise. > SEE ALSO >gpg(1), tar(1), >The full documentation for this tool is maintained as a Texinfo > manual. If GnuPG and the info program are properly installed at your site, > the command > info gnupg >should give you access to the complete manual including a menu > structure and an index. > GnuPG 2.0.22 > 2018-07-13 > GPG-ZIP(1) Best Regards, Kaushal On Wed, Nov 7, 2018 at 7:53 AM Kaushal Shriyan wrote: > > On Tue, Nov 6, 2018 at 7:12 PM Francesco Ariis wrote: > >> On Tue, Nov 06, 2018 at 05:32:40PM +0530, Kaushal Shriyan wrote: >> > [centos]# ls helloworld/ >> > check_cpu_perf.sh check_mem.pl jdk-8u162-linux-x64.rpm >> > [centos]# gpg-zip --encrypt --output hellogpg --gpg-args -r kaushal >> >> Ah, the example in the manual is wrong. This should work >> >> gpg-zip --encrypt --output hellogpg -r kaushal somefile.xyz >> >> > Thanks Francesco and i am still working on it. Appreciate your help > ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: encrypt linux backup folder using gpg
On Tue, Nov 6, 2018 at 7:12 PM Francesco Ariis wrote: > On Tue, Nov 06, 2018 at 05:32:40PM +0530, Kaushal Shriyan wrote: > > [centos]# ls helloworld/ > > check_cpu_perf.sh check_mem.pl jdk-8u162-linux-x64.rpm > > [centos]# gpg-zip --encrypt --output hellogpg --gpg-args -r kaushal > > Ah, the example in the manual is wrong. This should work > > gpg-zip --encrypt --output hellogpg -r kaushal somefile.xyz > > Thanks Francesco and i am still working on it. Appreciate your help ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: encrypt linux backup folder using gpg
On Tue, Nov 06, 2018 at 05:32:40PM +0530, Kaushal Shriyan wrote: > [centos]# ls helloworld/ > check_cpu_perf.sh check_mem.pl jdk-8u162-linux-x64.rpm > [centos]# gpg-zip --encrypt --output hellogpg --gpg-args -r kaushal Ah, the example in the manual is wrong. This should work gpg-zip --encrypt --output hellogpg -r kaushal somefile.xyz ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: encrypt linux backup folder using gpg
Hi Francesco, Thanks for the reply. I did the below [centos]# ls helloworld/ check_cpu_perf.sh check_mem.pl jdk-8u162-linux-x64.rpm [centos]# gpg-zip --encrypt --output hellogpg --gpg-args -r kaushal helloworld /usr/bin/tar: kaushal: Cannot stat: No such file or directory gpg: missing argument for option "-r" [centos]# Am i missing something? Thanks Wiktor, I'll check it out. Best Regards, Kaushal On Tue, Nov 6, 2018 at 4:52 PM Wiktor Kwapisiewicz wrote: > On 06.11.2018 10:42, Francesco Ariis wrote: > > Hello Kaushal, > > > > On Tue, Nov 06, 2018 at 11:25:47AM +0530, Kaushal Shriyan wrote: > >> I am using CentOS 7.5 Linux OS in my setup. I have compressed a folder > >> using tar utility tar czvf backupfolder.tar.gz backupfolder. Is there a > way > >> to encrypt backupfolder.tar.gz using gpg? Are there any best practices > to > >> use gpg application to encrypt the data. Any help will be highly > >> appreciated and i look forward to hearing from you. > > > > in Debian is there a small utility (`gpg-zip`, found in the `devscripts` > > package) which does just that. Maybe it's packaged in CentOS too! > > -F > > Maybe that's too simple but what about just: > > gpg --encrypt --recipient $YOU backupfolder.tar.gz > > Of course after generating the key (gpg --gen-key). > > Best practices: > - use most recent GnuPG, > - you can generate keys on another computer (offline?) and export just > public parts to the one that does encryption, > - you can move decryption keys to a hardware token. > > Kind regards, > Wiktor > > -- > https://metacode.biz/@wiktor > ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: encrypt linux backup folder using gpg
On 06.11.2018 10:42, Francesco Ariis wrote: > Hello Kaushal, > > On Tue, Nov 06, 2018 at 11:25:47AM +0530, Kaushal Shriyan wrote: >> I am using CentOS 7.5 Linux OS in my setup. I have compressed a folder >> using tar utility tar czvf backupfolder.tar.gz backupfolder. Is there a way >> to encrypt backupfolder.tar.gz using gpg? Are there any best practices to >> use gpg application to encrypt the data. Any help will be highly >> appreciated and i look forward to hearing from you. > > in Debian is there a small utility (`gpg-zip`, found in the `devscripts` > package) which does just that. Maybe it's packaged in CentOS too! > -F Maybe that's too simple but what about just: gpg --encrypt --recipient $YOU backupfolder.tar.gz Of course after generating the key (gpg --gen-key). Best practices: - use most recent GnuPG, - you can generate keys on another computer (offline?) and export just public parts to the one that does encryption, - you can move decryption keys to a hardware token. Kind regards, Wiktor -- https://metacode.biz/@wiktor ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: encrypt linux backup folder using gpg
Hello Kaushal, On Tue, Nov 06, 2018 at 11:25:47AM +0530, Kaushal Shriyan wrote: > I am using CentOS 7.5 Linux OS in my setup. I have compressed a folder > using tar utility tar czvf backupfolder.tar.gz backupfolder. Is there a way > to encrypt backupfolder.tar.gz using gpg? Are there any best practices to > use gpg application to encrypt the data. Any help will be highly > appreciated and i look forward to hearing from you. in Debian is there a small utility (`gpg-zip`, found in the `devscripts` package) which does just that. Maybe it's packaged in CentOS too! -F ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
encrypt linux backup folder using gpg
Hi, I am using CentOS 7.5 Linux OS in my setup. I have compressed a folder using tar utility tar czvf backupfolder.tar.gz backupfolder. Is there a way to encrypt backupfolder.tar.gz using gpg? Are there any best practices to use gpg application to encrypt the data. Any help will be highly appreciated and i look forward to hearing from you. #tar czvf backupfolder.tar.gz backupfolder Thanks in Advance. Best Regards, Kaushal ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
