Home‎ > ‎security‎ > ‎

GPG

Windows Deployment:

Security and privacy is always harder on a windows computer.  Here are the steps you need to follow to deploy GPG on your PC:

1. GPG:

Download and install GPG from http://www.gnupg.org/download/.  This is a shell program, and thus does not have any window UI.  So you will want to continue on, and download the following helper apps.

2.  GPGShell:

GPG Shell offers you a nice way to encrypt and decrypt files simply by right clicking on them.  The install is simple, and you can get the application here:
http://www.jumaros.de/rsoft/index.html
(note, you might have to enter ";C:\Program Files\GNU\GnuPG" into your PATH statemeent to get this to work.)

Once you install GPGkeys for the first time, you will need to go through a few steps to get a key created.  To do this, you will just need to know what email address you want this bound to.  You will also want to define the type of key (RSA or DSA), and the Size of the key (bigger is better and slower).

It might also toss you into a windows shell to enter in your new password.  Do that twice, then "exit" out, and save changes. 

Once you get the GPGkeys window opened, you will want to export your public key so that you can post it, and share it with your friends.  To do this, under <Key(s)>, select <Export...>, and the file somewhere you will be able to find it.  (on your desktop?)  Note that this will be your public key, so make sure that the file is formatted as "* pub.asc".  If you are asked to export your secret key, say *NO*.  This is your private key that should be kept very safe.  Do not send your secret key out to anyone, as it will enable your encrypted files to be read. 

You probably want to also associate .gpg files to GPGShell so that they automatically run the app if you select them.  (with the assumption that you would select an encrypted .gpg file to decrypt it.  To do this double click on the gpg file, and if/when windows says it can not open the file, choose "Select the program from a list" and in "program files" select "GPGShell, and GPGtools.exe"

GPGShell will be very useful for taking a file and encrypting or decrypting it.  It's not very useful, though, for quickly glancing at an encrypted file.  To do this, you will want to use WinPT, as it decrypts files into memory and does not write the decryption necessarily to disk. 

3. WinPT:

WinPT is an application similar to GPGShell.   It can be downloaded here:
http://winpt.gnupt.de/int/


Comments