3 ### Key type for GNU Privacy Guard
5 ### (c) 2011 Mark Wooding
8 ###----- Licensing notice ---------------------------------------------------
10 ### This file is part of the distorted.org.uk key management suite.
12 ### distorted-keys is free software; you can redistribute it and/or modify
13 ### it under the terms of the GNU General Public License as published by
14 ### the Free Software Foundation; either version 2 of the License, or
15 ### (at your option) any later version.
17 ### distorted-keys is distributed in the hope that it will be useful,
18 ### but WITHOUT ANY WARRANTY; without even the implied warranty of
19 ### MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 ### GNU General Public License for more details.
22 ### You should have received a copy of the GNU General Public License
23 ### along with distorted-keys; if not, write to the Free Software Foundation,
24 ### Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
28 ## Run GnuPG with some standard options.
30 gpg --homedir="$base" --no-permission-warning -q --batch \
35 defprops k_props <<EOF
37 main_length t $R_NUMERIC
39 sub_length t $R_NUMERIC
42 cipher_prefs t $R_WORDSEQ
43 digest_prefs t $R_WORDSEQ
44 compress_prefs t $R_WORDSEQ
50 : ${kprop_main_type=RSA} ${kprop_main_length=3072}
51 : ${kprop_sub_type=ELG-E} ${kprop_sub_length=3072}
52 : ${kprop_cipher_prefs=AES256 AES TWOFISH 3DES BLOWFISH CAST5}
53 : ${kprop_digest_prefs=SHA256 SHA1 RIPEMD160}
54 : ${kprop_compress_prefs=ZLIB ZIP}
56 : ${kprop_realname=%{realname\}} ${kprop_email=%{email\}}
57 : ${kprop_comment=%{comment-nil\}}
62 prefs="$kprop_cipher_prefs $kprop_digest_prefs $kprop_compress_prefs"
64 case ${kprop_s2k_cipher+t} in
66 *) set -- $kprop_cipher_prefs; kprop_s2k_cipher=$1 ;;
68 case ${kprop_s2k_digest+t} in
70 *) set -- $kprop_digest_prefs; kprop_s2k_digest=$1 ;;
73 cat >"$base/gpg.conf" <<EOF
74 ### GnuPG configuration
76 ## Annoying copyright notice and other tedious warnings.
81 ## Algorithm selection
82 s2k-cipher-algo $kprop_s2k_cipher
83 s2k-digest-algo $kprop_s2k_digest
84 personal-cipher-preferences $kprop_cipher_prefs
85 personal-digest-preferences $kprop_digest_prefs
86 personal-compress-preferences $kprop_compress_prefs
87 default-preference-list $prefs
97 Key-Type: $kprop_main_type
98 Key-Length: $kprop_main_length
99 Passphrase: $(cat "$nub")
101 case ${kprop_sub_type-nil} in
104 Subkey-Type: $kprop_sub_type
105 Subkey-Length: $kprop_sub_length
108 real=$(subst "\`realname' value" "$kprop_realname" kopt_ "$R_LINE")
109 email=$(subst "\`email' value" "$kprop_email" kopt_ "$R_LINE")
114 comment=$(subst "\`comment' value" "$kprop_comment" kopt_ "$R_LINE")
117 Name-Comment: $comment
121 } | run_gnupg "$base" --gen-key
123 ## Commit the new key.
124 run_gnupg "$base" --fingerprint --with-colons | \
125 grep '^fpr:' | cut -d: -f10 >"$base/fpr"
126 run_gnupg "$base" --export --armor --output="$base/pub"
133 run_gnupg "$base" --import "$base/pub"
134 run_gnupg "$base" --fingerprint --with-colons | \
135 grep '^fpr:' | cut -d: -f10 >"$base/fpr"
140 run_gnupg "$base" --encrypt --armor --recipient=$(cat "$base/fpr")
145 run_gnupg "$base" --passphrase-file "$nub" --decrypt
150 run_gnupg "$base" --passphrase-file "$nub" --detach-sign --armor
155 echo "$sig" >$tmp/sig
156 if run_gnupg "$base" --verify $tmp/sig - >/dev/null 2>$tmp/err
164 ###----- That's all, folks --------------------------------------------------