41.6. Assignments Security Theory - Encryption

In all the following assignments, we assume that your public keys are obtainable via the email address use for handing in the assignment.

Submission
You must submit assignments using git
Create Repo
  • Create an empty repo on bitbucket.org, gitlab.com, or github.com,
  • git push your local repo to the above remote repo.
  • For node assignments the line node_modules/must be in your .gitignore file.
Submit
By email to with:
  • The word 'submission <subjectname>' in the subject line
  • The url(s) of your repo(s) in the body

41.6.1. Assignment Security E.0

Download and install GnuPG from https://www.gnupg.org/download/, find the appropriate version in the section: GnuPG binary releases.

Generate a keypair for yourself, and export your public key to an asc, ASCII Armored, file. Use your regular email address when generating your keypair.

Then publish your exported public key to either:

If you get a verification email, don't ignore it.

41.6.2. Assignment Security E.1

Create a text file, and encrypt it with your own public key, use your email as recipient. Give the encrypted file the name SecE1.enc.txt. Then open the encrypted file in your favorite editor. What happens?

Then decrypt the file into a file differently name than the original file. Verify that the content has become itself again.

Finally, encrypt the original file with nmla@iba.dk as the recipient. You may get the public key from: https://keyserver.pgp.com. Name the output SecE1a.enc.txt.

Both encrypted files go into the repo.

41.6.3. Assignment Security E.2

Take the text of this assignment, and put it into a txt document. Then sign it with a regular digital signature, name the output SecE2.sign.txt, and put it into the repo.

41.6.4. Assignment Security E.3

Create a short document, and clearsign it into SecE3.sig.txt. The document should give a possible use case for clearsign.

41.6.5. Assignment Security E.4

Create a short document, and detached sign it into SecE4.det.sig.txt. The document should give a possible use case for detached signatures.