Hack Security Pro.pdf - Index of

PGP
Once you have installed PGP, launch PGPTray. PGPTray will keep PGP in permanent application,
until you need to use it.
Right-click on PGPtray (the grey keylock at the bottom right of the tool bar) and launch
PGPtools.
Step 1 : Creating keys (PGP)
The first icon is the one that manages and generates keys. Creating a key is very simple,
and the assistant only makes the process easier. If you haven't created one already, you can always
create new ones:
1. In the fields “Full Name” and “Electronic Address”, enter a user name (avoid entering true
information), in “Electronic Address”, you can however put your own one.
2. Then choose the type of key you wish to create. In our example we will choose RSA.
3. Then choose the size of the key. We will choose 2048 bits. The larger the size (in bits) of the key,
the greater its strength is. A small-sized key offers little security guarantee when faced with
decrypting methods: it is an eggshell.
4. Then choose the expiration date of the pair of keys. Allowing a key to expire has both an advantage
and an inconvenient. The advantage is that if your private key is one day found or your encrypting
broken, renewing your keys will allow you to communicate once more without worrying about this,
because the encrypting you will use, based on new keys, will not have been broken. The
inconvenient is that you will have to send your public key to all your correspondents, update all your
diffusion zones, etc. It is possible that one day a correspondent of yours will send you an encrypted
message with an old public key that you will be unable to decrypt. So in this example we will not
take an expiration date.
5. Then enter a secret sentence, to be used as a password. By “sentence”, we mean that the user
should enter a whole sentence (so a long succession of characters) rather than a simple word. A
sentence has a greater security value than a word. PGP actually includes a sentence quality
indicator that can guide you on the choice of the sentence's length. This sentence will be asked
when you use your private key (when decrypting). What is the advantage here? Simply that if
someone manages to copy your private key, he will not be able to use it without the proper
password.
6. Once generating a key is finished, you can send your public key to a key server. This will for
example enable someone who only knows your email address to see if you have put a key online.
This is in no way compulsory.
7. The process is over, you are now in possession of your own new pair of keys.
The Hackademy DMP -188/209- SYSDREAM