1.加密
使用其他人的公鑰加密方式，首先需要先匯入對方的key
gpg –import key.asc
接著查看現在public key，key store的狀態
========================================================
查看本機金鑰狀態
gpg –list-keys #列出public key的狀態
pub 2048R/B3399DFB 2014-04-08
uid twnic (twnic) <twnic@twnic.net.tw> //我自己的key
sub 2048R/6C1C9FD9 2014-04-08
pub 2048R/81A4B423 2014-04-08
uid twnic2 (twnic2) <twnic2@twnic.net.tw> //其他人的key
sub 2048R/D2295BA2 2014-04-08
列出自己的private key
gpg –list-secret-keys #列出private key的狀態
————————
sec 1024R/CE627B2B 2014-04-03 [expires: 2014-04-17]
uid tszheng (twnic) <tszheng@twnic.net.tw>
ssb 1024R/D5685EE9 2014-04-03
sec 2048R/B3399DFB 2014-04-08
uid twnic (twnic) <twnic@twnic.net.tw>
ssb 2048R/6C1C9FD9 2014-04-08
========================================================
匯出金鑰
匯出自己的private key
gpg -o filename –export-secret-keys TWNIC #匯出binary檔
gpg -a -o filename –export-secret-keys TWNIC #匯出文字檔
匯出自己private key簽署出來的public key
gpg –export –armor twnic > public_twnic.asc
========================================================
匯入金鑰
gpg –import pub_twnic.asc
========================================================
加密
用別人的key進行加密
gpg –trust-mode always -o sample.gpg –encrypt –recipient twnic2 sample.txt
再將加密後的檔案sample.gpg使用自己的key加密成gpg2
gpg –trust-mode always -o sample.gpg2 –encrypt –recipient twnic sample.gpg
========================================================
產生簽章
gpg –output sample.sig -u ‘key’ –detach-sig sample.gpg2
同時用對方的public key加密與用自己的private key簽章
gpg –local-user ‘private key’ –trust-mode always -o sample.gpg –encrypt –recipient ‘public key’ sample.txt
========================================================
驗證簽章
gpg –verify sample.sig sample.gpg
如果簽章與加密檔是同一個檔案，則需要先分離簽章
gpg –detach-sign sample.gpg
這時候應該會產生一個sample.gpg.sig檔，再用這個簽章檔做驗證
gpg –verify sample.gpg.sig sample.gpg
========================================================
解密
2.解密
首先一樣須匯入對方的key
接著連續解密兩次(key store需要有對方的public key)
gpg -o sample.gpg –decrypt sample.gpg2
gpg -o sample.txt –decrypt sample.gpg
即可得到原始檔案sample.txt
更詳細可參考http://vnimos.blog.51cto.com/2014866/1175889