Jump to content

GNU Privacy Guard: Difference between revisions

From Wikipedia, the free encyclopedia
Browse history interactively
← Previous editNext edit →
Content deleted Content added
VisualWikitext
Undid revision 845770877 by Er22chi (talk) See previous reversion
Er22chi (talk | contribs)
18 edits
Undid revision 845771426 by Zazpot (talk)
Line 87: Line 87:


In 2005, g10 Code GmbH and Intevation GmbH released [[Gpg4win]], a software suite that includes GnuPG for Windows, GNU Privacy Assistant, and GnuPG plug-ins for [[File Explorer|Windows Explorer]] and [[Microsoft Outlook|Outlook]]. These tools are wrapped in a standard Windows installer, making it easier for GnuPG to be installed and used on Windows systems.
In 2005, g10 Code GmbH and Intevation GmbH released [[Gpg4win]], a software suite that includes GnuPG for Windows, GNU Privacy Assistant, and GnuPG plug-ins for [[File Explorer|Windows Explorer]] and [[Microsoft Outlook|Outlook]]. These tools are wrapped in a standard Windows installer, making it easier for GnuPG to be installed and used on Windows systems.

In 2018, Sevenuc Consulting released a free utility named Guard7 on [[Mac App Store]] that make the daily work with GnuPG easy and simple on [[macOS]], it is a graphical frontend for GPG with some additional features, e.g. organise contacts into group, switch different keyrings. Guard7 smoothly integrated with the macOS' built-in Mail app, and can easily organise dozens of recipients for email message. Encrypt or decrypt file just require dragging the file from Finder into Guard7, it is very convenient and simple. <ref>{{cite web|url=http://sevenuc.com/en/guard.html|title=GUI frontend of GNU Privacy Guard on macOS}}</ref>


== {{Anchor|GPGME}}Limitations ==
== {{Anchor|GPGME}}Limitations ==
Line 126: Line 128:
* [[The Bat!]]&nbsp;— email client, that can use GnuPG as an OpenPGP provider
* [[The Bat!]]&nbsp;— email client, that can use GnuPG as an OpenPGP provider
* [[WinPT]]&nbsp;— a graphical front end to GPG for Windows (discontinued)
* [[WinPT]]&nbsp;— a graphical front end to GPG for Windows (discontinued)
* [http://sevenuc.com/en/guard.html Guard7]&nbsp;— a graphical frontend of GPG on [[macOS]] (available on [[Mac App Store]])
{{div col end}}
{{div col end}}


Revision as of 04:56, 14 June 2018

Not to be confused with PGP.
Original author(s)Werner Koch
Developer(s)GNU Project
Initial release7 September 1999; 25 years ago (1999-09-07)[1]
Repositorydev.gnupg.org/source/gnupg/
Written inC
Operating systemMicrosoft Windows, macOS, RISC OS, Android, Linux
TypeOpenPGP
LicenseGNU GPLv3
Websitegnupg.org

GNU Privacy Guard (GnuPG or GPG) is a free software replacement for Symantec's PGP cryptographic software suite.[2] GnuPG is compliant with RFC 4880, which is the IETF standards track specification of OpenPGP. Modern versions of PGP are interoperable with GnuPG and other OpenPGP-compliant systems.

GnuPG is part of the GNU Project, and has received major funding from the German government.[3]

Overview

GnuPG is a hybrid-encryption software program because it uses a combination of conventional symmetric-key cryptography for speed, and public-key cryptography for ease of secure key exchange, typically by using the recipient's public key to encrypt a session key which is only used once. This mode of operation is part of the OpenPGP standard and has been part of PGP from its first version.

The GnuPG 1.x series uses an integrated cryptographic library, while the GnuPG 2.x series replaces this with Libgcrypt.

GnuPG encrypts messages using asymmetric key pairs individually generated by GnuPG users. The resulting public keys may be exchanged with other users in a variety of ways, such as Internet key servers. They must always be exchanged carefully to prevent identity spoofing by corrupting public key ↔ "owner" identity correspondences. It is also possible to add a cryptographic digital signature to a message, so the message integrity and sender can be verified, if a particular correspondence relied upon has not been corrupted.

GnuPG also supports symmetric encryption algorithms. By default, GnuPG uses the CAST5 symmetrical algorithm. GnuPG does not use patented or otherwise restricted software or algorithms. Instead, GnuPG uses a variety of other, non-patented algorithms.[4]

For a long time it did not support the IDEA encryption algorithm used in PGP. It was in fact possible to use IDEA in GnuPG by downloading a plugin for it, however this might require a license for some uses in countries in which IDEA was patented. Starting with versions 1.4.13 and 2.0.20, GnuPG supports IDEA because the last patent of IDEA expired in 2012. Support of IDEA is intended "to get rid of all the questions from folks either trying to decrypt old data or migrating keys from PGP to GnuPG",[5] and hence is not recommended for regular use.

As of versions 2.0.26 and 1.4.18, GnuPG supports the following algorithms:

Public key
RSA, ElGamal, DSA
Cipher
3DES, IDEA (since versions 1.4.13 and 2.0.20), CAST5, Blowfish, Twofish, AES-128, AES-192, AES-256, Camellia-128, -192 and -256 (since versions 1.4.10 and 2.0.12)
Hash
MD5, SHA-1, RIPEMD-160, SHA-256, SHA-384, SHA-512, SHA-224
Compression
Uncompressed, ZIP, ZLIB, BZIP2

More recent releases of GnuPG 2.x ("modern" and the now deprecated "stable" series) expose most cryptographic functions and algorithms Libgcrypt (its cryptography library) provides, including support for elliptic curve cryptography (ECDSA, ECDH and EdDSA)[6] in the "modern" series (i.e. since GnuPG 2.1).

History

GnuPG was initially developed by Werner Koch.[7][8] Version 1.0.0, which was the first production version, was released on September 7, 1999, almost two years after the first GnuPG release (version 0.0.0).[1][7] The German Federal Ministry of Economics and Technology funded the documentation and the port to Microsoft Windows in 2000.[8]

GnuPG is a system compliant to the OpenPGP standard, thus the history of OpenPGP is of importance; it was designed to interoperate with PGP, the email encryption program initially designed and developed by Phil Zimmermann.[9][10]

On February 7, 2014, a GnuPG crowdfunding effort closed, raising €36,732 for a new Web site and infrastructure improvements.[11]

Branches

As of January 2018, there are two actively maintained branches of GnuPG:

  • "Modern" (2.2), with numerous new features, such as elliptic curve cryptography, compared to the former "stable" (2.0) branch, which it replaced with the release of GnuPG 2.2.0 on August 28, 2017.[12] It was initially released on November 6, 2014.[6]
  • "Classic" (1.4), the older, but still maintained standalone version, most suitable for older or embedded platforms. Initially released on December 16, 2004.[13]

Different GnuPG 2.x versions (e.g. from the 2.2 and 2.0 branches) cannot be installed at the same time. However, it is possible to install a "classic" GnuPG version (i.e. from the 1.4 branch) along with any GnuPG 2.x version.[6]

Before the release of GnuPG 2.2 ("modern"), the now deprecated "stable" branch (2.0) was recommended for general use, initially released on November 13, 2006.[14] This branch reached its end-of-life on December 31, 2017;[15] Its last version is 2.0.31, released on December 29, 2017.[16]

Before the release of GnuPG 2.0, all stable releases originated from a single branch; i.e., before November 13, 2006 no multiple release branches were maintained in parallel. These former, sequentially succeeding (up to 1.4) release branches were:

  • 1.2 branch, initially released on September 22, 2002,[17] with 1.2.6 as the last version, released on October 26, 2004.[18]
  • 1.0 branch, initially released on September 7, 1999,[1] with 1.0.7 as the last version, released on April 30, 2002.[19]

Note that branches with an odd minor release number (e.g. 2.1, 1.9, 1.3) are development branches leading to a stable release branch with a "+ 0.1" higher version number (e.g. 2.2, 2.0, 1.4), hence branches 2.2 and 2.1 both belong to the "modern" series, 2.0 and 1.9 both to the "stable" series, while the branches 1.4 and 1.3 both belong to the "classic" series.

Platforms

Although the basic GnuPG program has a command-line interface, there exists various front-ends that provide it with a graphical user interface. For example, GnuPG encryption support has been integrated into KMail and Evolution, the graphical email clients found in KDE and GNOME, the most popular Linux desktops. There are also graphical GnuPG front-ends, for example Seahorse for GNOME and KGPG for KDE.

For macOS, the GPG Suite project provides a number of Aqua front-ends for OS integration of encryption and key management as well as GnuPG installations via Installer packages.[20] Furthermore, the GPG Suite Installer[21] installs all related OpenPGP applications (GPG Keychain Access), plugins (GPGMail) and dependencies (MacGPG) to use GnuPG based encryption.

Instant messaging applications such as Psi and Fire can automatically secure messages when GnuPG is installed and configured. Web-based software such as Horde also makes use of it. The cross-platform extension Enigmail provides GnuPG support for Mozilla Thunderbird and SeaMonkey. Similarly, Enigform provides GnuPG support for Mozilla Firefox. FireGPG was discontinued June 7, 2010.[22]

In 2005, g10 Code GmbH and Intevation GmbH released Gpg4win, a software suite that includes GnuPG for Windows, GNU Privacy Assistant, and GnuPG plug-ins for Windows Explorer and Outlook. These tools are wrapped in a standard Windows installer, making it easier for GnuPG to be installed and used on Windows systems.

In 2018, Sevenuc Consulting released a free utility named Guard7 on Mac App Store that make the daily work with GnuPG easy and simple on macOS, it is a graphical frontend for GPG with some additional features, e.g. organise contacts into group, switch different keyrings. Guard7 smoothly integrated with the macOS' built-in Mail app, and can easily organise dozens of recipients for email message. Encrypt or decrypt file just require dragging the file from Finder into Guard7, it is very convenient and simple. [23]

Limitations

As a command-line-based system, GnuPG 1.x is not written as an API that may be incorporated into other software. To overcome this, GPGME (abbreviated from GnuPG Made Easy) was created as an API wrapper around GnuPG that parses the output of GnuPG and provides a stable and maintainable API between the components.[24] This currently requires an out-of-process call to the GnuPG executable for many GPGME API calls; as a result, possible security problems in an application do not propagate to the actual crypto code [citation needed] due to the process barrier. Various graphical front-ends based on GPGME have been created.

Since GnuPG 2.0, many of GnuPG's functions are available directly as C APIs in Libgcrypt.[25]

Vulnerabilities

The OpenPGP standard specifies several methods of digitally signing messages. In 2003, due to an error in a change to GnuPG intended to make one of those methods more efficient, a security vulnerability was introduced.[26] It affected only one method of digitally signing messages, only for some releases of GnuPG (1.0.2 through 1.2.3), and there were fewer than 1000 such keys listed on the key servers.[27] Most people did not use this method, and were in any case discouraged from doing so, so the damage caused (if any, since none has been publicly reported) would appear to have been minimal. Support for this method has been removed from GnuPG versions released after this discovery (1.2.4 and later).

Two further vulnerabilities were discovered in early 2006; the first being that scripted uses of GnuPG for signature verification may result in false positives,[28] the second that non-MIME messages were vulnerable to the injection of data which while not covered by the digital signature, would be reported as being part of the signed message.[29] In both cases updated versions of GnuPG were made available at the time of the announcement.

In June 2017, a vulnerability (CVE-2017-7526) was discovered within Libgcrypt by Bernstein, Breitner and others: a library used by GnuPG, which enabled a full key recovery for RSA-1024 and about more than 1/8th of RSA-2048 keys. This side-channel attack exploits the fact that Libgcrypt used a sliding windows method for exponentiation which leads to the leakage of exponent bits and to full key recovery.[30][31] Again, an updated version of GnuPG was made available at the time of the announcement.

In October 2017, the ROCA vulnerability was announced that affects RSA keys generated on the YubiKey 4 tokens, often used with PGP/GPG. Many published PGP keys were found to be susceptible.[32]

Application support

Notable applications, front ends and browser extensions that support GPG include the following:

In May 2014, The Washington Post reported on a 12-minute video guide "GPG for Journalists" posted to Vimeo in January 2013[33] by a user named anon108. The Post identified anon108 as fugitive NSA whistleblower Edward Snowden, who it said made the tutorial — "narrated by a digitally disguised voice whose speech patterns sound similar to those of Snowden" — to teach journalist Glenn Greenwald email encryption. Greenwald said that he could not confirm the authorship of the video.[34]

See also

References

  1. ^ a b c "Release Notes". GnuPG. Retrieved 2014-01-30.
  2. ^ "Gnu Privacy Guard". GnuPG.org.
  3. ^ "Bundesregierung fördert Open Source" (in German). Heise Online. 1999-11-15. Retrieved July 24, 2013.
  4. ^ "GnuPG Features". Retrieved October 1, 2009.
  5. ^ Koch, Werner (2012-12-21). "GnuPG 1.4.13 released" (Mailing list). gnupg-users. Retrieved 2013-05-19.
  6. ^ a b c Koch, Werner (2014-11-06). "[Announce] GnuPG 2.1.0 "modern" released". gnupg.org. Retrieved 2014-11-06.
  7. ^ a b Angwin, Julia (5 February 2015). "The World's Email Encryption Software Relies on One Guy, Who is Going Broke". ProPublica. Retrieved 6 February 2015.
  8. ^ a b Wayner, Peter (19 November 1999). "Germany Awards Grant for Encryption". The New York Times. Retrieved 2014-08-08.
  9. ^ "Gnu Privacy Guard". OpenPGP.org. Archived from the original on 2014-02-27. Retrieved 2014-02-26. {{cite web}}: Unknown parameter |deadurl= ignored (|url-status= suggested) (help)
  10. ^ "Where to Get PGP". Philzimmermann.com. Retrieved 2014-02-26.
  11. ^ "GnuPG: New web site and infrastructure". goteo.org. Retrieved 2014-03-09.
  12. ^ Koch, Werner (2017-08-28). "[Announce] GnuPG 2.2.0 released". gnupg-announce (Mailing list). Retrieved 2017-09-21.
  13. ^ Koch, Werner (2004-12-16). "[Announce] GnuPG stable 1.4 released". gnupg.org. Retrieved 2004-12-16.
  14. ^ Koch, Werner (2006-11-13). "[Announce] GnuPG 2.0 released". gnupg.org. Retrieved 2014-01-30.
  15. ^ Koch, Werner (2017-01-23). "[Announce] GnuPG 2.1.18 released". gnupg.org. Retrieved 2017-02-04.
  16. ^ "GnuPG 2.0.31". 2017-12-29. Retrieved 2017-12-30.
  17. ^ Koch, Werner (2002-09-06). "[Announce]GnuPG 1.2 released". gnupg.org. Retrieved 2014-11-06.
  18. ^ Koch, Werner (2004-08-26). "[Announce] GnuPG 1.2.6 released". gnupg.org. Retrieved 2014-11-06.
  19. ^ Koch, Werner (2002-04-30). "[Announce] GnuPG 1.0.7 released". gnupg.org. Retrieved 2014-11-06.
  20. ^ "Mac GPG Suite". GPG Suite. Retrieved 2017-12-24. {{cite web}}: Italic or bold markup not allowed in: |publisher= (help)
  21. ^ "Mac GPG Suite installer". GPG Suite. Retrieved 2017-12-24. {{cite web}}: Italic or bold markup not allowed in: |publisher= (help)
  22. ^ "FireGPG's developers blog". Retrieved July 24, 2013.
  23. ^ "GUI frontend of GNU Privacy Guard on macOS".
  24. ^ "GPGME (GnuPG Made Easy)". gnupg.org. February 11, 2015. Retrieved March 3, 2015.
  25. ^ "Libraries". GNUPG. Retrieved 2 December 2015.
  26. ^ Nguyen, Phong Q. "Can We Trust Cryptographic Software? Cryptographic Flaws in GNU Privacy Guard v1.2.3". EUROCRYPT 2004: 555–570.
  27. ^ Koch, Werner (November 27, 2003). "GnuPG's ElGamal signing keys compromised".
  28. ^ Koch, Werner (February 15, 2006). "False positive signature verification in GnuPG".
  29. ^ Koch, Werner (March 9, 2006). "GnuPG does not detect injection of unsigned data".
  30. ^ Edge, Jake (5 July 2017). "Breaking Libgcrypt RSA via a side channel". LWN.net.
  31. ^ "Sliding right into disaster: Left-to-right sliding windows leak" (PDF).
  32. ^ The Return of Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli, Matus Nemec, Marek Sys, Petr Svenda, Dusan Klinec,Vashek Matyas, November 2017
  33. ^ "GPG for Journalists - Windows edition - Encryption for Journalists". Vimeo. Retrieved 2016-10-14.
  34. ^ Peterson, Andrea (May 14, 2014). "Edward Snowden sent Glenn Greenwald this video guide about encryption for journalists. Greenwald ignored it". The Washington Post.
Retrieved from "https://en.wikipedia.org/w/index.php?title=GNU_Privacy_Guard&oldid=845791442"