All apps/GnuPG

GnuPG

gnupg

A free implementation of the OpenPGP standard: signing, encryption and key management.

Runs as gpg, gpg2, gpgconf|macOS, Linux|gnupg.org

Autocomplete

Fig spec, with what the manifest adds · 39 subcommands · 92 options
Published once and never changed; check the digest before caching
sha256
e2ffa3bdf10488ccccbeb7f271a7a1c607de7babe43b9623ea293bd320411bd5
Size
27652 bytes
Subcommands39 subcommands
gpg -s
Make a signature
gpg --clearsign
Make a clear text signature
gpg -b
Make a detached signature
gpg -e
Encrypt data
gpg -c
Encrypt with symmetric cipher only
gpg --store
Store only (make a simple RFC1991 packet)
gpg --decrypt
Decrypt file (or stdin if no file is specified) and write it to stdout
gpg --verify
Assume that sigfile is a signature and verify it without generating any output
gpg --verify-files
Special version of --verify which does not work with detached signatures
gpg --list-keys
List all keys from public keyrings, or just the ones given on the command line
gpg --list-secret-keys
List all keys from secret keyrings, or just the ones given on the command line
gpg --list-sigs
Same as --list-keys, but the signatures are listed too
gpg --check-sigs
Same as --list-sigs, but the signatures are verified
gpg --fingerprint
List all keys with their fingerprints
gpg --list-packets
List only the sequence of packets
gpg --gen-key
Generate a new key pair
gpg --edit-key
Present a menu which enables you to do all key related tasks
gpg --sign-key
Sign a public key with you secret key
gpg --lsign-key
Sign a public key with you secret key but mark it as non-exportable
gpg --trusted-key
Assume that the specified key is as trustworthy as one of your own secret keys
gpg --delete-key
Remove key from the public keyring
gpg --delete-secret-key
Remove key from the secret and public keyring
gpg --gen-revoke
Generate a revocation certificate for the complete key
gpg --export
Either export all keys from all keyrings or those of the given names
gpg --send-keys
Same as --export but sends the keys to a keyserver
gpg --export-all
Same as --export, but also exports keys which are not compatible to OpenPGP
gpg --export-secret-keys
Same as --export, but exports the secret keys
gpg --export-secret-subkeys
Same as --export, but exports the secret subkeys
gpg --import
Import/merge keys. This adds the given keys to the keyring
gpg --fast-import
--import but does not build the trustdb
gpg --recv-keys
Import the keys with the given key IDs from a HKP keyserver
gpg --export-ownertrust
List the ownertrust values in ASCII format
gpg --import-ownertrust
Update the trustdb with the ownertrust values stored in files
gpg --print-md
Print message digest of algorithm ALGO for all given files of stdin
gpg --gen-random
Emit COUNT random bytes of the given quality level
gpg --gen-prime
Generate prime numbers
gpg --version
Print version information
gpg --warranty
Print warranty information
gpg -h
Print usage information
OptionsOn gpg itself
--homedir
Set the name of the home directory <directory>
--options
Read options from file <file>
-a--armour
Create ASCII armored output
-o--output
Write output to file <file>
-u--local-user
Use name as the user ID to sign <name>
--default-key
Use name as default user ID for signatures <name>
-r--recipient
Encrypt for user id name <name>
--default-recipient
Use name as default recipient <name>
--default-recipient-self
Use the default key as default recipient
--no-default-recipient
Reset --default-recipient and --default-recipient-self
--encrypt-to
Same as --recipient but this one is intended for in the options file <name>
--no-encrypt-to
Disable the use of all --encrypt-to keys
-v--verbose
Give more information during processing
-q--quiet
Try to be as quiet as possible
-Z
Set compression level to n <n>
-t--textmode
Use canonical text mode
-n--dry-run
Don't make any changes
-i--interactive
Prompt before overwriting any files
--batch
Use batch mode
--no-tty
Make sure that the TTY is never used for any output
--no-batch
Disable batch mode
--yes
Assume "yes" on most questions
--no
Assume "no" on most questions
--always-trust
Skip key validation
--keyserver
Use name to lookup keys which are not yet in your keyring <name>
--no-auto-key-retrieve
Disables the automatic retrieving of keys
--honor-http-proxy
Try to access the keyserver over the proxy
--keyring
Add file to the list of keyrings <file>
--secret-keyring
Same as --keyring but for the secret keyrings <file>
--charset
Set the name of the native character set <name>
--utf8-strings
Assume that the arguments are already given as UTF8
--no-utf8-strings
--no-options
Shortcut for "--options /dev/null"
--load-extension
Load an extension module <name>
--debug
Set debugging flags <flags>
--debug-all
Set all useful debugging flags
--status-fd
Write special status strings to the file descriptor n <n>
--logger-fd
Write log output to file descriptor n and not to stderr <n>
--no-comment
Do not write comment packets
--comment
Use string as comment string in clear text signatures <string>
--default-comment
Force to write the standard comment string
--no-version
Omit the version string in clear text signatures
--emit-version
Force to write the version string
-N--notation-data
Put the name value pair into the signature as notation data <name=value>
--set-policy-url
Use string as Policy URL for signatures (rfc2440:5.2.3.19) <string>
--set-filename
Use string as the name of file which is stored in messages <string>
--use-embedded-filename
Try to create a file with a name as embedded in the data
--completes-needed
Number of completely trusted users to introduce a new key signer <n>
--marginals-needed
Number of marginally trusted users to introduce a new key signer <n>
--max-cert-depth
Maximum depth of a certification chain <n>
--cipher-algo
Use name as cipher algorithm <name>
--digest-algo
Use name as message digest algorithm <name>
--s2k-cipher-algo
Use name as the cipher algorithm used to protect secret keys <name>
--s2k-digest-algo
Use name as the digest algorithm used to mangle the passphrases <name>
--s2k-mode
Selects how passphrases are mangled <n>
--compress-algo
Use compress algorithm n <n>
--disable-cipher-algo
Never allow the use of name as cipher algorithm <name>
--disable-pubkey-algo
Never allow the use of name as public key algorithm <name>
--throw-keyid
Do not put the keyid into encrypted packets
--not-dash-escaped
Makes signatures usable for patch files
--escape-from-lines
Handle "<From" in emails
--passphrase-fd
Read the passphrase from file descriptor n <n>
--command-fd
This is a replacement for the depreciated shared-memory IPC mode <n>
--rfc1991
Try to be more RFC1991 (PGP 2.x) compliant
--openpgp
Reset all packet, cipher and digest options to OpenPGP
--force-v3-sigs
Forces v3 signatures for signatures on data
--force-mdc
Force encryption with appended manipulation code
--allow-non-selfsigned-uid
Allow non self-signed user IDs
--allow-freeform-uid
Disable all checks on the form of the user ID
--ignore-time-conflict
Makes time checks just a warning
--lock-once
Do not release the lock until the process terminates
--lock-multiple
Release the locks every time one is no longer needed
--lock-never
Disable locking entirely
--no-random-seed-file
Disable random pool cache
--no-verbose
Reset verbose level to 0
--no-greeting
Suppress the initial copyright message
--no-secmem-warning
Suppress the "using insecure memory" warning
--no-armor
Assume the input data is not in ASCII armored format
--no-default-keyring
Do not add the keyrings to the list of keyrings
--skip-verify
Skip the signature verification step
--with-colons
Print key listings delimited by colons
--with-key-data
--with-colons with the public key data
--with-fingerprint
--fingerprint with a different format
--fast-list-mode
Changes the list commands to work faster
--list-only
Skip the decryption pass
--no-literal
This is not for normal use
--set-filesize
This is not for normal use
--emulate-md-encode-bug
Enables workaround to check faulty signatures
--show-session-key
Display the session key used for one message
--override-session-key
Don't use the public key but the session key string <string>
--merge-only
Don't insert new keys into the keyrings
--try-all-secrets
Try all secret keys in turn to find the right one