lnx-arch/docs/gpg.md

GENERATION OF LATEST KEYS

src: https://cets.seas.upenn.edu/answers/pgp_keys.html & https://dev.to/adityabhuyan/how-to-generate-your-own-public-and-secret-keys-for-pgp-encryption-1joh ➔

gpg --gen-key
  Real name: Frode Klevstul
  Email address: frode@klevstul.com

  gpg: revocation certificate stored as '/home/poq/.gnupg/openpgp-revocs.d/2C6781ED21DF77ADA325BB8F7B048108A509A75D.rev'
  public and secret key created and signed.

  pub   ed25519 2025-11-10 [SC] [expires: 2028-11-09]
        2C6781ED21DF77ADA325BB8F7B048108A509A75D
  uid                      Frode Klevstul <frode@klevstul.com>
  sub   cv25519 2025-11-10 [E] [expires: 2028-11-09]

EXPORTING KEYS TO CRYPTLOCAL

cp -r /home/poq/.gnupg/openpgp-revocs.d/2C6781ED21DF77ADA325BB8F7B048108A509A75D.rev /home/poq/.local/share/Cryptomator/mnt/cryptLocal/content/keys/openPgp/.gnupg
cd /home/poq/.gnupg/
gpg --armor --export frode@klevstul.com > /home/poq/.local/share/Cryptomator/mnt/cryptLocal/content/keys/openPgp/.gnupg/251110_frodeKlevstul_publicKey.asc
gpg --armor --export-secret-keys frode@klevstul.com > /home/poq/.local/share/Cryptomator/mnt/cryptLocal/content/keys/openPgp/.gnupg/251110_frodeKlevstul_privateKey.asc

EXPORTING KEYS TO SECRETS

• open/mount cryptLocal
• exportGpgKeysToSecrets.sh

APPENDIX

old way to backup keys

gpg --export --export-options backup --output public.gpg frode@thisworld.is
gpg --export-secret-keys --export-options backup --output private.gpg frode@thisworld.is

ref: https://www.howtogeek.com/816878/how-to-back-up-and-restore-gpg-keys-on-linux/