Assignment 5 – Encryption with GPG We had password auditing, network traffic ana

Assignment 5 – Encryption with GPG

We had password auditing, network traffic analysis, and two rounds of rule writing so let’s end the semester with something a much less time consuming and hopefully a little fun by looking at two forms of encryption: symmetric and asymmetric.

There are two parts to this assignment: A discussion component and the actual encryption

Encryption

In this assignment, you’re going to use GNU Privacy Guard (GPG) in Linux. For the setup, you’ll need to decrypt a file which was encrypted symmetrically with a passkey (below) by me, create your own public/private keypair, and import my public key.

There are further instructions awaiting you inside once you’ve decrypted file. I want your response to the instructions encrypted to my public key – meaning I’m the only recipient which should be able to decrypt – and signed with your private key; That’s the asymmetric part!

Note: Your browser may initially flag the file as suspicious which will require an extra step to allow the download when prompted. The browser just doesn’t like that the file is encrypted which makes the content entirely unknown.

Direct Link to Assignment 5 File
MD5 Hash for verification: 0d8ebb0ee2bbb7738bee506d243f5004

Password to decrypt: 12345

To decrypt: gpg –output cis4360.a5.zip –decrypt cis4360.a5.gpg

This will decrypt, extract the file, and name the file cis4360.a5.zip. This compressed file contains a text file with instructions and my public key.

Instruction Manual or: Pfffft! Who Reads Those!

You! You should! You should absolutely read or otherwise reference this manual!

GPG Handbook

Very useful in addition to the man pages. This covers generating new keys, exporting and importing, concepts, etc. Everything you need and more!