Home
Tworzenie kluczy szyfrujących - prywatny i publiczny
Tworzenie kluczy szyfrujących - prywatny i publiczny
December 2005
Podczas tworzenia klucza zostaniemy poproszeni o kilka odpowiedzi. Początkowe dotyczą typu i siły klucza. Używamy wartości domyślnych. Następnie pytani jesteśmy o nazwisko i imię, adres email oraz komentarz. Musimy też podać hasło jakim będzie zabezpieczony nasz klucz prywatny. Następnie czekamy i wciskamy co popadnie żeby komputer mógł wylosować odpowiednio dużo liczb losowych.
Przykład utworzenia pary kluczy:
gpg --gen-key
A oto wyniki komendy i przykład dodadkowych pytań zadawanych w trakcie wykonania. Proces wymaga bardzo dużej ilości liczb losowych tak ze może zatrzymać się w połowie i poprosić o rzuszanie myszą lub wciskanie klawiszy by wygenerować dodatkowe liczby losowe.
gpg (GnuPG) 1.4.1; Copyright (C) 2005 Free Software Foundation, Inc. This program comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it under certain conditions. See the file COPYING for details. gpg: directory `/home/users/art79/.gnupg' created gpg: new configuration file `/home/users/art79/.gnupg/gpg.conf' created gpg: WARNING: options in `/home/users/art79/.gnupg/gpg.conf' are not yet active during this run gpg: keyring `/home/users/art79/.gnupg/secring.gpg' created gpg: keyring `/home/users/art79/.gnupg/pubring.gpg' created Please select what kind of key you want: (1) DSA and Elgamal (default) (2) DSA (sign only) (5) RSA (sign only) Your selection? 1 DSA keypair will have 1024 bits. ELG-E keys may be between 1024 and 4096 bits long. What keysize do you want? (2048) Requested keysize is 2048 bits Please specify how long the key should be valid. 0 = key does not expire <n> = key expires in n days <n>w = key expires in n weeks <n>m = key expires in n months <n>y = key expires in n years Key is valid for? (0) Key does not expire at all Is this correct? (y/N) y You need a user ID to identify your key; the software constructs the user ID from the Real Name, Comment and Email Address in this form: "Heinrich Heine (Der Dichter)" Real name: Testowy klucz ireta Email address: art79@iret.math.uni.lodz.pl Comment: You selected this USER-ID: "Testowy klucz ireta " Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O You need a Passphrase to protect your secret key. We need to generate a lot of random bytes. It is a good idea to perform some other action (type on the keyboard, move the mouse, utilize the disks) during the prime generation; this gives the random number generator a better chance to gain enough entropy. +++++++++++++++.+++++.++++++++++.+++++++++++++++++++++++++................+++++ Not enough random bytes available. Please do some other work to give the OS a chance to collect more entropy! (Need 255 more bytes)We need to generate a lot of random bytes. It is a good idea to perform some other action (type on the keyboard, move the mouse, utilize thedisks) during the prime generation; this gives the random number generator a better chance to gain enough entropy. .++++++++++..++++++++++..+++++.+++++.++++++++++.++++++++++.++++++++..... gpg: /home/users/art79/.gnupg/trustdb.gpg: trustdb created gpg: key 378B6C1A marked as ultimately trusted public and secret key created and signed. gpg: checking the trustdb gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model gpg: depth: 0 valid: 1 signed: 0 trust: 0-, 0q, 0n, 0m, 0f, 1u pub 1024D/378B6C1A 2005-11-05 Key fingerprint = 2EB6 BDA9 2143 63DB 857F 7690 0900 62D4 378B 6C1A uid Testowy klucz ireta sub 2048g/B9C83713 2005-11-05
W taki sposób wygenerowaliśmy klucze potrzebne do podpisów i szyfrowania.
Main Blog Categories
About the author

Hi, my name is Artur Ejsmont,
welcome to my blog.
I am a passionate software engineer living in Sydney and working for Yahoo! Drop me a line or leave a comment.
Enjoy!
Comments
Post new comment