If I have password protected (you need password to import it in gnupg keyring) armored secret key is it possible to derive its public key from it?

To be more clear, password to import secret key is not known

Show thread

@mister_monster
I could import public key even if I didn't know password, I'll show you how when I get home

@mister_monster You can import public key from password protected secret key just by "gpg --import secretkey" and canceling prompts for password input, public key would still be imported. I don't think its great flaw, it would be nice if public key couldn't be derived from secret without knowing password, for example if attacker gets backups of secret keys he couldn't do lookup on keyservers to see whose those secret keys are.

Sign in to participate in the conversation
Mastodon 🔐 privacytools.io

Fast, secure and up-to-date instance. PrivacyTools provides knowledge and tools to protect your privacy against global mass surveillance.

Website: privacytools.io
Matrix Chat: chat.privacytools.io
Support us on OpenCollective, many contributions are tax deductible!