[Gpg4win-users-en] Why are my encrypted files AUTOMATICALLY decrypting?

[Dessi Sumilo]

I am at a total loss...

I just installed GPGShell to try and find an alternative to Kleopatra.
 It did the same exact thing...it just decrypted without asking me for
a passphrase...WTF?

I was using GNUPG for years without issue.  I thought I would install
GPG4WIN to move to the newer versions and it's gone
awry...RRRGGGHHH...

Frustrating.

> Woops, delete the "", they are not needed for echo in Windows.
>
> So `echo RELOADAGENT | gpg-connect-agent`.
>
> If it says command not recognized or similar.
>
> For 32-bit: echo RELOADAGENT | "C:\Program
> Files\GNU\GnuPG\gpg-connect-agent.exe"
> For 64-bit:  echo RELOADAGENT | "C:\Program Files
> (x86)\GNU\GnuPG\gpg-connect-agent.exe"
>
> On 2015/07/27 at 16:14, Dessi Sumilo wrote:
>> I have checked, everything and gone step by step.  It automatically
>> encrypts and decrypts the file.
>>
>> 1)  Create a .txt document
>> 2)  Right-click and Encrypt & sign
>> 3)  requests the key (I just use my key to encrypt)
>> 4)  It encrypts and the text is scrambled/encrypted
>> 5)  IT DOES NOT ASK ME FOR A PASSWORD TO ENCRYPT...IT JUST DOES IT
>>
>> NOW TO DECRYPT
>>
>> 1)  Right click on the encrypted file select Decrypt/Verify
>> 2)  a window comes up to choose operation with a Decrypt/Verify
>> button
>> 3)  selecting Decrypt/Verify decrypts the file without any request
>> for
>> password.
>>
>> I am at a total loss right now.
>>
>> GPG4Win 2.2.5, Windows 7.
>>
>> Kleopatra Settings > GnuPG System > GPG Agent
>> * Expire cached PINs after N seconds: 1
>> * Do not use the PIN cache when signing: Checked
>> * Disalow the use of an external password cache: Checked
>>
>> Which in turn made my gpg-agent.conf get these options:
>>
>> max-cache-ttl 6000
>> default-cache-ttl 1
>> ignore-cache-for-signing
>> no-allow-external-cache
>>
>> Created a text file called example.txt with the message "This is an
>> example.", encrypted it using CLI, then decrypted it using cli,
>> inputing my passphrase. After 1 second I repeated the command and I
>> have to reinput the passphrase.
>>
>> GnuPG CLI works correctly on my end.
>>
>> With the same file, I opened Kleopatra and used the Decrypt/Verify
>> utility, default options. I input my passphrase and it decrypted it
>> into "example" file. After one second, fast enough to even go to the
>> decrypting part, I do the same steps and I had to input my
>> passphrase
>> again.
>>
>> Kleopatra works correctly on my end.
>>
>> Try looking at the options and check the same options I have.
>>
>> On 2015/07/27 at 0:23, Dessi Sumilo wrote:
>>>>> I have searched everywhere.  I am using GPG4WIN 2.2.5 on Windows
>>>>> 7.
>>>>> I created a key and then just created a .txt file with Notepad.
>>>>> I
>>>>> encrypted the file with the key I created.  It did everything
>>>>> fine
>>>>> and created the .gpg encrypted file.
>>>>>
>>>>> But when I now right-click the file and decrypt, it does it
>>>>> automatically.  This is no security at all if anyone can just
>>>>> right click and decrypt the file.
>>>>>
>>>>> I changed the gpg-agent to nocache and set the Kleopatra to 30
>>>>> seconds.  I've rebooted and tried everything I could find.
>>>>>
>>>>> Why does it not ask me for the password?  Why is it automatically
>>>>> decrypting?
>>>>>
>>>>> Thanks....
>>>>>
>>>>>
>>
>>>
>>> _______________________________________________
>>> Gpg4win-users-en mailing list
>>> Gpg4win-users-en at wald.intevation.org
>>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/gpg4win-users-en
>>>
>>>
>>>
>>
>>
>
> --
> Juan Miguel Navarro Martínez
>
> GPG Keyfingerprint:
> 5A91 90D4 CF27 9D52 D62A
> BC58 88E2 947F 9BC6 B3CF
>
>