Tworzenie kluczy szyfrujących - prywatny i publiczny

Podczas tworzenia klucza zostaniemy poproszeni o kilka odpowiedzi. Początkowe dotyczą typu i siły klucza. Używamy wartości domyślnych. Następnie pytani jesteśmy o nazwisko i imię, adres email oraz komentarz. Musimy też podać hasło jakim będzie zabezpieczony nasz klucz prywatny. Następnie czekamy i wciskamy co popadnie żeby komputer mógł wylosować odpowiednio dużo liczb losowych.

Przykład utworzenia pary kluczy:

gpg --gen-key

A oto wyniki komendy i przykład dodadkowych pytań zadawanych w trakcie wykonania. Proces wymaga bardzo dużej ilości liczb losowych tak ze może zatrzymać się w połowie i poprosić o rzuszanie myszą lub wciskanie klawiszy by wygenerować dodatkowe liczby losowe.

gpg (GnuPG) 1.4.1; Copyright (C) 2005 Free Software Foundation, Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under certain conditions. 
See the file COPYING for details.
gpg: directory `/home/users/art79/.gnupg' created
gpg: new configuration file `/home/users/art79/.gnupg/gpg.conf' created
gpg: WARNING: options in `/home/users/art79/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/home/users/art79/.gnupg/secring.gpg' created
gpg: keyring `/home/users/art79/.gnupg/pubring.gpg' created
Please select what kind of key you want:
(1) DSA and Elgamal (default)
(2) DSA (sign only)
(5) RSA (sign only)
Your selection? 1
DSA keypair will have 1024 bits.
ELG-E keys may be between 1024 and 4096 bits long.
What keysize do you want? (2048)
Requested keysize is 2048 bits
Please specify how long the key should be valid.
0 = key does not expire
<n> = key expires in n days
<n>w = key expires in n weeks
<n>m = key expires in n months
<n>y = key expires in n years
Key is valid for? (0)
Key does not expire at all
Is this correct? (y/N) y
You need a user ID to identify your key; the software constructs the user ID
from the Real Name, Comment and Email Address in this form:
"Heinrich Heine (Der Dichter) "
Real name: Testowy klucz ireta
Email address: art79@iret.math.uni.lodz.pl
Comment:
You selected this USER-ID:
"Testowy klucz ireta "
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O
You need a Passphrase to protect your secret key.
We need to generate a lot of random bytes. It is a good idea to perform some other 
action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number generator a better 
chance to gain enough entropy.
+++++++++++++++.+++++.++++++++++.+++++++++++++++++++++++++................+++++
Not enough random bytes available. Please do some other work to give the OS a chance to 
collect more entropy! (Need 255 more bytes)We need to generate a lot of random bytes. 
It is a good idea to perform some other action (type on the keyboard, move the mouse, 
utilize thedisks) during the prime generation; this gives the random number generator a 
better chance to gain enough entropy.
.++++++++++..++++++++++..+++++.+++++.++++++++++.++++++++++.++++++++.....
gpg: /home/users/art79/.gnupg/trustdb.gpg: trustdb created
gpg: key 378B6C1A marked as ultimately trusted
public and secret key created and signed.
gpg: checking the trustdb
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0 valid: 1 signed: 0 trust: 0-, 0q, 0n, 0m, 0f, 1u
pub 1024D/378B6C1A 2005-11-05
Key fingerprint = 2EB6 BDA9 2143 63DB 857F 7690 0900 62D4 378B 6C1A
uid Testowy klucz ireta 
sub 2048g/B9C83713 2005-11-05

W taki sposób wygenerowaliśmy klucze potrzebne do podpisów i szyfrowania.

Comments

Post new comment

Image CAPTCHA