Contents
What is SSB in gpg?
ssb — secret sub-key.
Should you have multiple gpg keys?
In general, one key per identity should be fine. One key can include: Several UIDs (for separate mail addresses.) Several subkeys (for different devices, so you can put some subkey on your mobile; if it gets lost, revoke only this)
What are PGP subkeys?
Whenever you create a new public encryption key, a keypair is generated instead of a single key. This keypair consists of a main key, also called the master key and a subkey. A master key can be used to create additional subkeys that are then bound to it.
What is a Regkey?
In the Windows 98, CE, NT, and 2000 operating systems, a registry key is an organizational unit in the Windows registry, an internal database the computer uses to store configuration information. This allows the system and its applications to load global and individual configurations upon startup and login.
What does Reg_sz mean?
REG_SZ. A text string in a format which is convenient for human perception. Usually this data type is assigned to values that represent descriptions of components.
Can a master key be used for a subkey?
The master key is used for other keys, creating subkeys and subkeys. Your master key must be kept very safe. Signatures of trust are also collected on your master key. If the master key is compromised, you have no choice but to revoke it and all the subkeys attached to it.
Is there such a thing as a subkey?
The answer here is no, because all keypairs on a key are subkeys. Even if there’s only one of them. Subkey packets are defined in RFC 4880, OpenPGP, 5.5 Key Material Packet. They’re only distinguished by another packet ID, and require a binding signature to be actually useful (see below).
Why is the primary secret key on removable media?
Keeping the primary secret key on removable media makes signing other GPG keys problematic, since the primary secret key must be loaded in order to do the signing.
Can a subkey be signed by the same person?
They all associate to their primary key, so anything signed by any subkey can be associated with the main key and can hence be considered to be signed by the same person. There are a number of advantages to employing the approach documented here to managing your GPG key.