PGP (Pretty Good Privacy)

• GnuPG : GnuPG forms the heart of Gpg4win – the actual encryption software.
• Kleopatra : The central certificate administration of Gpg4win, which ensures uniform user navigation for all cryptographic operations.

You can use your host machine for this. Download Gpg4win (GNU Privacy Guard for Windows) from ​https://www.gpg4win.org/index.html

Installation

• Open the windows installer file and click Next
• The next page displays the licensing agreement. Make an Exception for this Lab and click next without reading the license.
• Select GnuPG, Kleopatra, GpgOL and GpgEX as applications to be install and click next
• Click next in all the other steps.

Create Certificate

• Open Kleopatra
• Click on File > New Key Pair .
• In the following dialog you select the format for the certificate. You can choose from the following:

OpenPGP (PGP/MIME) or X.509 (S/MIME).

• [ Create personal OpenPGP key pair ] .
• Now enter your your name and e-mail address in the following window.
• Click Advanced Settings and Tick the Valid Until check box
• You will see a list of all of the main entries and settings for review purposes. If you are interested in the expert settings, you can view these via the Show All details option.If everything is correct, click on Create
• Now to the most important part entering your passphrase! To create a key pair, you must enter your personal passphrase. Choose passphrase which is easy-to-remember but hard to break secret passphrase. You can't recover this passphrase if you lost it. Confirm the passphrase and click Create
• Now your OpenPGP key pair is being created. This may take a couple of minutes.
• As soon as the key pair creation has been successful, you will see the following dialog

The 40-digit “fingerprint” of your newly generated OpenPGP certificate is displayed in the results text field. This fingerprint is unique anywhere in the world, i.e. no other person will have a certificate withthe same fingerprint. Actually, even at 8 digits it would already be quite unlikely that the same sequence would occur twice anywhere in world. For this reason, it is often only the last 8 digits of a fingerprint which are used or shown, and which are described as the key ID. This fingerprint identifies the identity of the certificate as well as the fingerprint of a person.