Creating a PGP Key Pair

Complete Encryption. Total Protection.

Overview

Pretty Good Privacy (PGP) provides data encryption and decryption for communication data such as texts, emails, directories, and files. It uses a algorithmic combination of hashing, data compression, symmetric-key cryptography, and public-key cryptography to sign, encrypt, and decrypt messages using a combination of private and public cryptographic keys.

This tutorial provides step-by-step instructions on how to generate private and public PGP keys using the key generator tool GPG4Win. You can use any key generator tool to create, decrypt, and encrypt messages; however, the GPG4Win application is free and easy to install.

Install the Key Generator Tool

1. Navigate to the GPG4Win download site and download the full version of the application. As of this writing, the full version is Gpg4win v2.3.0.

2. Save the download package and open it. If you have User Account Control enabled, click when the warning message displays. The Installer displays a Language Preference dialog box.

3. Use the dropdown the select your language preference and click . The GPG4Win Setup window displays.

4. Click . The License Agreement screen displays.

5. Click . The Choose Components screen displays.

6. Ensure the Kleopatra, GpgEX, and Gpg4win Compendium components are checked and then click . The Choose Install Location screen displays.

7. Choose the default install location or click to look for an alternative destination folder. After selecting the appropriate folder click . The Install Options screen displays.

8. Select if and where you'd like to install a shortcut to the GPG4Win application and then click . The application begins to install.

9. When the installation completes, click and then .

Generate Your Key Pair

1. Open the Kleopatra component. The following screen displays.

2. Click File > New Certificate. The Certificate Creation Wizard screen displays.

3. Click the Create a personal OpenPGP key pair option. The following Enter Details screen displays:

4. Enter pertinent values in the Name, Email, and Comment fields and then click . The Advanced Settings screen displays.

5. Ensure that the RSA radio button is selected under the Key Material section. Use the dropdown in the field next to it to select the 4,096 bits option.

6. Click and then click on the Enter Details screen. A Review Certificate Parameters screen displays.

7. To change a parameter, click ; otherwise, click . An Enter Passphrase dialog box displays.

8. Enter a value in the Passphrase field and click . A Passphrase Confirmation dialog box displays asking you to re-enter your passphrase. Do so in the Passphrase field. The application creates the key and displays it in the Key Pair Successfully Created screen.

9. Click . The new key displays in the Kleopatra certificate list.

Obtain Your Public Key

1. Open the Kleopatra component. Right-click on your key and select Export Certificates.

2. Browse where you want to save the certificate, give the file a name, and click .

3. Open the file in your preferred text editor. NOTE: To see the file properly displayed in the Save location, you may need to select the All Files option in the File Types dropdown next to the File Name field in your File Explorer window. Your public key displays.

Obtain your Private Key

1. Open the Kleopatra component. Right-click on your key and select Export Secret Keys.

2. An Export Secret Certificate dialog box displays. Click the to select where you want to save the key and then click the ASCII armor check box.

3. Click . A "Secret key successfully exported" confirmation message displays.

4. Click . Be sure to keep this key in a safe place and never share it.

Import a Public Key

1. Obtain the public key of the vendor to whom you will be sending encrypted messages. Forte's public key is as follows:

2. Copy the entire key block including ---BEGIN PGP PUBLIC KEY BLOCK--- to ---END PGP PUBLIC KEY BLOCK---.

3. Open the Kleopatra component. Click Clipboard > Certificate Import. A Certificate Import Result dialog box displays.

4. Click . The imported public key now displays under the Other Certificates tab.

Importing Your Private Key

1. Open the Kleopatra component. Click File > Import Certificates.

2. Use the File Explorer tool to browse to where you've saved your private key. Select the key file and click . The Certificate Import Result dialog box displays.

3. Click . The imported private key now displays under the My Certificates tab.

Decrypting a Message

Only your private key can decrypt encrypted messages from Forte. This ensures that only the intended recipient of a message can view its contents. To decrypt a message using GPG4Win, complete the following steps:

1. Copy the entire contents of the message.

2. Open the Kleopatra component. Click Clipboard > Decrypt/Verify. A Pinentry window displays asking for the passphrase you created when you generated your key pair.

3. Enter the passphrase and click . A window displays indicating that the file was decrypted and has been copied to your clipboard. Click .

4. Open the text editor of your choice and paste the decrypted message.