Editing Basale infrastructuur (section)

== gpg openpgp ==
Een gpg key pair is bruikbaar voor:
* Signing van berichten, met de private key
De ontvanger van het bericht weet dat het bericht van de eigenaar van het key pair afkomstig is.
* Encryptie van berichten door een verzender met de public key
De public key is publiek beschikbaar. Iedereen heeft zo de mogelijkheid om aan de eigenaar van het key pair een encrypted bericht te zenden. Alleen de eigenaar van het key pair heeft de mogelijkheid om het bericht te decrypten.<br/>
Het genereren gaat zo:
<pre>
gpg: Invalid option "--export-keys"
martin@host:~$ gpg --gen-key
gpg (GnuPG) 1.4.12; Copyright (C) 2012 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Please select what kind of key you want:
   (1) RSA and RSA (default)
   (2) DSA and Elgamal
   (3) DSA (sign only)
   (4) RSA (sign only)
Your selection? 
RSA keys may be between 1024 and 4096 bits long.
What keysize do you want? (2048) 4096
Requested keysize is 4096 bits
Please specify how long the key should be valid.
         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0) 
Key does not expire at all
Is this correct? (y/N) y
You need a user ID to identify your key; the software constructs the user ID
from the Real Name, Comment and Email Address in this form:
    "Heinrich Heine (Der Dichter) <heinrichh@duesseldorf.de>"

Real name: Martin Simons
Email address: martin@webhuis.nl
Comment: Webhuis Uw Internet Liaison
You selected this USER-ID:
    "Martin Simons (Webhuis Uw Internet Liaison) <martin@webhuis.nl>"

Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? o
You need a Passphrase to protect your secret key.

......................+++++
gpg: key A135178F marked as ultimately trusted
public and secret key created and signed.

gpg: checking the trustdb
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   2  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 2u
gpg: next trustdb check due at 2017-04-06
pub   4096R/A135178F 2013-09-16
      Key fingerprint = 02BA 2D3A 82C1 CB47 05F9  23BD 0310 B54E A135 178F
uid                  Martin Simons (Webhuis Uw Internet Liaison) <martin@webhuis.nl>
sub   4096R/8B09F269 2013-09-16
martin@host:~$ gpg --send-keys --keyserver keys.gnupg.net 8B09F269
gpg: sending key A135178F to hkp server keys.gnupg.net
martin@host:~$
</pre>
=== links ===
* https://wiki.debian.org/subkeys
* http://en.wikipedia.org/wiki/Public_key_infrastructure
* http://en.wikipedia.org/wiki/Public-key_cryptography