[Gpg4win-users-en] Why are my encrypted files AUTOMATICALLY decrypting?

Dessi Sumilo gpg4win at yahoo.cotse.net
Mon Jul 27 23:32:17 CEST 2015


Juan,

Things just got a little more interesting...

You have been awesome with your help...but, regardless of what I do,
Kleopatra just want to automatically decrypt without asking me for a
passphrase.

The key does have a passphrase...and it even gets worse...

I created a dummy key for the purposes of testing and encrypted to my
account.  I encypted and signed an email with the dummy key and sent
the email.  The email was received, encrypted.  When I copied the
encrypted text to the clipboard and used Kleopatra to decrypt, IT
DECRYPTED WITHOUT ANY PASSPHRASE!

HOLY COW...something is definitely not right!

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
>> I have checked, everything and gone step by step.  It
>> automatically encrypts and decrypts the file.
>>
>> 1)  Create a .txt document 2)  Right-click and Encrypt & sign 3)
>> requests the key (I just use my key to encrypt) 4)  It encrypts and
>> the text is scrambled/encrypted 5)  IT DOES NOT ASK ME FOR A
>> PASSWORD TO ENCRYPT...IT JUST DOES IT
>>
>
> That's normal, why would you need GnuPG for ask you for a password to
> asymmetrically encrypt? Remember, what you are going to use for
> encrypting is the public key of the recipient. How would you encrypt a
> message to me if you don't know the password I'm using?
>
> I'm going to assume what you wanted to mean is password to sign the
> message, which if it doesn't then there's something wrong.
>
>> NOW TO DECRYPT
>>
>> 1)  Right click on the encrypted file select Decrypt/Verify 2)  a
>> window comes up to choose operation with a Decrypt/Verify button 3)
>> selecting Decrypt/Verify decrypts the file without any request for
>> password.
>>
>
> Using `echo "RELOADAGENT" | gpg-connect-agent` should clear the
> passphrases in the cache, if any. If that doesn't work, then the only
> thing I can think of is that key doesn't have a passphrase.
>
> - --
> Juan Miguel Navarro Martínez
>
> GPG Keyfingerprint:
> 5A91 90D4 CF27 9D52 D62A
> BC58 88E2 947F 9BC6 B3CF
> -----BEGIN PGP SIGNATURE-----
>
> iQEcBAEBCgAGBQJVtl4mAAoJEELfPuRPJIB7Q30H/0fnidhuEqAtl+2qMAXH5ieR
> WgPXbHOp49EFK6DVQ4649/ux0TwXG29wKPufjy0+ErRuYftmBMr4Z61vYgd8KQxA
> HobXk+TydJNHNdtOrkieuSzVBHebk8nU92g0hvvOV48xbuP4vptr5clR20RQNc5A
> UkK86oGt/Qk0d1eXVkwtk7nUVVVAGpgtAsfRoYiqDkm24BinTNgwCco5wJ9AAFOn
> 9riSJAC6XeQ77dimKjA7PPFtsQMKWRM/VbUtOp35cpBaPldVbnxtvPaHK2xs7Hvo
> RGuuNprxID+gdFkJpdn33k0zVZ9EizfHkdC7KvWRVgAGfqWS4+iOykdDRV8D3Ik=
> =hEsz
> -----END PGP SIGNATURE-----
>
>
>





More information about the Gpg4win-users-en mailing list