Scribd
Upload
3 views6 pages

CNS Lab Assignment12

The document outlines an assignment demonstrating email security using GPG, an implementation of the OpenPGP standard. It explains the principles of asymmetric cryptography for confidentiality and digital signatures for authenticity, along with detailed steps for key generation, encryption, and decryption. The conclusion highlights GPG's effectiveness in ensuring secure digital communication.

Uploaded by

vedant.patilpsn001
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
3 views6 pages

CNS Lab Assignment12

The document outlines an assignment demonstrating email security using GPG, an implementation of the OpenPGP standard. It explains the principles of asymmetric cryptography for confidentiality and digital signatures for authenticity, along with detailed steps for key generation, encryption, and decryption. The conclusion highlights GPG's effectiveness in ensuring secure digital communication.

Uploaded by

vedant.patilpsn001
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

T21_96_Vedant Patil

Assignment :12
Aim :
Show the email security PGP using the GPG tool between the sender and
receiver.
Theory:
Gnu Privacy Guard (GPG) is an implementation of the OpenPGP standard used to
provide digital encryption and signing services.

It operates on the principle of asymmetric cryptography, where each user generates a


unique public and private key pair. Confidentiality is achieved when a sender encrypts a
message using the recipient's public key, ensuring that only the recipient can decrypt it
with their corresponding private key.

Authenticity and integrity are provided through digital signatures, where a sender signs a
message with their own private key, allowing anyone with their public key to verify the
origin and ensure the message has not been altered.

The entire process relies on key management, which involves users exchanging public
keys and building a "web of trust" by signing keys they have verified, vouching for the
owner's identity.

Steps:
• On the sender's machine, run gpg --gen-key and follow the prompts.
• On the receiver's machine, run gpg --gen-key and follow the prompts.
• On the receiver's machine, run gpg --output [Link] --armor --
export 'Receiver Email' to export the public key.
• On the sender's machine, run gpg --import [Link] to import the
receiver's key.
• On the sender's machine, run gpg --list-keys to verify the key was imported.
• On the sender's machine, run gpg --sign-key 'Receiver Email' to mark the key as
trusted.
• On the sender's machine, run echo "secret lab message" > [Link] to create
a file.
• On the sender's machine, run gpg --encrypt --sign --armor -r 'Receiver Email'
[Link] to encrypt and sign the file.
• On the receiver's machine, run gpg -o [Link] -d [Link] to
decrypt the file.
• On the receiver's machine, run cat [Link] to view the secret message.
T21_96_Vedant Patil
T21_96_Vedant Patil
T21_96_Vedant Patil
T21_96_Vedant Patil
T21_96_Vedant Patil

Conclusion:
In conclusion, this lab successfully demonstrates how GPG implements email security
using the OpenPGP standard1. The process of generating key pairs, encrypting a file for a
specific recipient, and digitally signing it confirms GPG's ability to ensure both
confidentiality and sender authenticity222222222. This provides a robust and practical
method for securing digital correspondence against unauthorized access and
tampering.

You might also like