gpg_key_생성

GPG KEY 생성
1. rng-tools 난수 발생 도구
2. 대화형 GPG 키 생성
3. GPG 생성 배치 모드

1 rng-tools 난수 발생 도구
난수 발생 설치.
$ sudo apt install -y rng-tools
$ sudo rngd -r /dev/urandom

2 대화형 GPG 키 생성.
$ gpg --gen-key
비밀키 생성 ${HOME}/.gnupg/secring.gpg
공개키 생성 ${HOME}/.gnupg/pubring.gpg

gpg: keyring `/home/hiroom2/.gnupg/secring.gpg' created
gpg: keyring `/home/hiroom2/.gnupg/pubring.gpg' created
Use default "(1) RSA and RSA".
Please select what kind of key you want:
   (1) RSA and RSA (default)
   (2) DSA and Elgamal
   (3) DSA (sign only)
   (4) RSA (sign only)
기본값 1
기본사용값 "2048".

         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0)
만료되지 않는 키가 기본 값
Is this correct? (y/N) y

이메일 입력
user ID
from the Real Name, Comment and Email Address in this form:
    "Heinrich Heine (Der Dichter) <heinrichh@duesseldorf.de>"

Real name: hiroom2
Email address: hiroom2@example.com
Comment: hiroom2 gpg key
Press O key.


Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O

비밀번호 입력해도 되며,
입력하지 않을 경우도 허용된다.

Enter passphrase:
Repeat passphrase:

GPG key 생성

generator a better chance to gain enough entropy.
..+++++
.............+++++
gpg: /home/hiroom2/.gnupg/trustdb.gpg: trustdb created
gpg: key 65F355D9 marked as ultimately trusted
public and secret key created and signed.

gpg: checking the trustdb
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
pub   2048R/65F355D9 2016-08-14
      Key fingerprint = 95CF BBE0 C638 93EB 7E77  C427 A093 6A22 65F3
55D9
uid                  hiroom2 (hiroom2 gpg key) <hiroom2@example.com>
sub   2048R/FEC8326F 2016-08-14

3 GPG 생성 배치 모드
Create configuration file for gpg command.
$ cat <<EOF > gpg.txt
%pubring ${HOME}/.gnupg/pubring.gpg
%secring ${HOME}/.gnupg/secring.gpg
Key-Type: RSA
Subkey-Type: RSA
Key-Length: 2048
Subkey-Length: 2048
Expire-Date: 0
Name-Real: hiroom2
Name-Email: hiroom2@example.com
Name-Comment: hiroom2 gpg key
Passphrase: mypassphrase
%commit
EOF

Create GPG key with gpg –gen-key –batch.
$ gpg --gen-key --batch gpg.txt
......+++++
.....+++++
+++++
.........+++++