|| Author: Rembrandt/Helith || Back to articles ||

_ _ _____ _ ___ _____ _ _ / / / / ____/ / / _/_ __/ / / / / /_/ / __/ / / / / / / / /_/ / / __ / /___/ /____/ / / / / __ / /_/ /_/_____/_____/___/ /_/ /_/ /_/ Topic : Security Information: HowTo Author : Rembrandt Status : Stable How to create a RSA/ElGamal-Key or an RSA/RSA-Key with GnuPG? ------------------------------------------------------------- To make this HowTo short I won't spend much time explaining the basics which should be known. It demotivates to read the Manpage if you wanna create other keypairs then those provided by the limited generator. If you create a normal Keypair you`ll mostly get an DSA/ElGamal-Keypair if you don`t choose RSA. A normal DSA/ElGamal-Keypair is 1024Bit/4096Bit strong. The ElGamal value is variable but the DSA value is limited by the specification to exactly 1024Bit. DSA (1024Bit FIPS-180-1) is used to sign your messages and ElGamal is used to encrypt the messages. The problem with DSA is the limitation to 1024Bit and propably also that it was invented by the NSA. I prefer ElGamal because the mathematical concepts behind RSA and Elgamal are different. If you choose RSA all your trust belongs to the mathematical princip this algorithm belongs to. This means if the mathematical problem of RSA was solved some day your signatures can be faked. I personaly recomment ElGamal-RSA combination. So how do you create other Kay-Pairs then those provided by the Keygeneration? Both Methods provide a 4096/4096 Bit Keypair (compared to 1024/4096 wich is the default). I won't make this HowTo big so just type the following commands at your shell. shell-type -> gpg --gen-key choose -> 5 choose -> your options (4096Bit should be used) shell-type -> gpg --key-edit &KEY-ID shell-type -> addkey shell-type -> ElGamal (4) or RSA (6) choose-> your options (4096Bit are prefered again.. right?) type -> Quit the interactive-mode with "quit" To check the results use gpg --list-keys &KEYID ------------------------------- pub 4096R/0D09C0CC 2006-05-09 uid Rembrandt <rembrandt@testbox.org> sub 4096g/4FE5EE5F 2006-05-09 ------------------------------- As you can see we generated a 4096/4096 Bit Keypair (I choosed RSA/ElGamal). Have Fun...