Contents
How to add GPG subkeys to master keypair?
Use gpg to add an additional signing subkey to your keypair. This new subkey is linked to the first signing key. So we have three subkeys. Store your master keypair in a safe place, for its loss will be catastrophic. Use gpg to remove the original signing subkey, leaving on the new signing subkey & the encryption subkey.
Why are subkeys used instead of primary keys?
This is why subkeys were invented. A subkey is still a public/private key pair and is secure as long as only you have the private key. It is, cryptographically, just as secure as your primary key.
How can I change the expiration date on my master key?
changing the expiration date on a master key or any of its subkeys The procedure for creating GPG subkey is as simple as follows: Create a regular GPG keypair. By default GPG creates one signing subkey(your identity) and one encryption subkey. Use gpg to add an additional signing subkey to your keypair.
Why do I have a subkey on my laptop?
This makes keeping your subkey on your laptop computer a more acceptable risk than keeping your primary key on it. TL;DR Subkeys make key management much easier by separating the cryptographic functions of public keys from the trust and identity functions of (primary) public keys.
How is a subkey calculated in a PGP signature?
This signature is calculated directly on the primary key and subkey, and not on any User ID or other packets. A signature that binds a signing subkey MUST have an Embedded Signature subpacket in this binding signature that contains a 0x19 signature made by the signing subkey on the primary key and subkey.
How to create an encryption key in GnuPG?
If there is no additional sub-key to be created, the process can be ended by the command “save” to store the modifications to the key. An encryption key can now be created in the same way as the signing key just by selecting the “RSA (encrypt only)” key type.
What makes a signing subkey a subkey?
A signature that binds a signing subkey MUST have an Embedded Signature subpacket in this binding signature that contains a 0x19 signature made by the signing subkey on the primary key and subkey. This signature is a statement by a signing subkey, indicating that it is owned by the primary key and subkey.