Public Keys

OpenPGP #

OpenPGP can be used for encryption and digtal signing of mail messages, files and code commits.

Modern email client software, like Thunderbird, will retrieve the public key automatically, based on my email address. Otherwise:

gpg --locate-keys alain@alainwolf.ch

Or on your Android Smartphone using OpenKeychain.

Verification #

To verify that you are using the right key, you can compare the last 16 characters of the fingerprint:

gpg --list-keys alain@alainwolf.ch | grep '7223 89E4 2736 2DC5'

Key fingerprint = 5143 E0D3 C00C 9DB4 55BD  FD76 7223 89E4 2736 2DC5

The safest way would be to compare the fingerprint in a personal meeting.

SSH Public Key #

I use my OpenPGP key to authenticate against SSH servers too.

To allow me to access your systems trough SSH, you can export my OpenPGP key as SSH key:

# My user ID on your system (change as needed)
$ _SSH_USER=wolf

# Search and install my OpenPGP key
$ gpg --search-keys 0x722389E427362DC5

# Export and install my SSH key
$ gpg --export-ssh-key 0x722389E427362DC5 \
    | sudo -u $_SSH_USER tee -a /home/${_SSH_USER}/.ssh/authorized_keys

WireGuard VPN #

For VPN connections with WireGuard, you can use this WireGuard public key of my personal computer:

VM37YPASrxm1x2BuAAx5ep+IiIKdlil2Y3q9jX8tQBM=