PGP - How to verify a file with CMD or Kleopatra in Windows 10 / How to download and verify Tails OS

In this video, I will show you (and explain a little bit) two ways of veryfing PGP files by checking whether the signature is valid or not.
2 methods:
- veryfing PGP using Command line
- veryfing PGP using Kleopatra

NOTE:
When I was saying that "you can't check whether this is a valid file or not" or talking about this: "recipient can make sure that sender is valid", I meant that recepient can be sure that the e-mail message HASN'T BEEN CHANGED by some hacker etc. So any time I use a word "valid" I meant HASN'T BEEN CHANGED :)
_____________________________________

Pretty Good Privacy (PGP)

- what is it used for?
signing, encrypting and decrypting texts, e-mails and files
_______________________________

Program:
Gpg4win is an email and file encryption package Microsoft Windows,
which uses GnuPG public-key cryptography for data encryption and digital signatures.
_______________________________

The structure for our downloaded ISO:
_______________________________

Example, downloading Tails 4.3 on Windows
2. download Public Key
3. download signature
_______________________________

VERIFY THAT THE .ISO FILE IS VALID!!! using Gpg4win:
1. Import the downloaded key to your keyring :

2. Verify the file:
_______________________________

PGP has 3 acronyms:
PGP, OpenPGP, and GPG.
#1. PGP
The first acronym, PGP, is your basic Pretty Good Privacy standard. PGP was released in 1991 by Phil Zimmermann & Associates.

#2. OpenPGP
OpenPGP stands for Open-source PGP. It was created by one of the original PGP developers, Phil Zimmermann, as a way to employ encryption algorithms without the accompanying patent issues PGP had. In 1997, Zimmermann submitted an Open-source PGP standards proposal to the IETF.

#3. GPG (GNU Privacy Guard)
GnuPGP, which stands for GNU Privacy Guard, was developed in 1999 as an alternative to PGP encryption. Based on the OpenPGP standard established by the IETF, it is free to download, use, modify, and distribute, and it allows users to decrypt any PGP or OpenPGP file.
GPG uses a graphic user interface that can be installed on Linux, Android, and Windows systems.

#damiankuziak #it

____________________________
Do you have some Bitcoin? No ?
Many people achieved financial freedom💲💲💲
You can buy bitcoin here:
🔥 Get a 5% commission discount for a lifetime on Binance (pm me)

[byronpangburn]

Thank you very much! Because of your video, I finally figured out how to verify Tails.

[tomk]

LOL this is exactly what I was looking for. Verifying the Tails disk image. Thank you sir.

[PalashBansal]

both iso binary and .key/.sig are on same website. what if someone changes all 3 files .iso, .key and .sig ?

[PalashBansal]

How are you able to open .sig in text mode, when I open it in my notepad, it's a binary file for me. I am trying for another software(not tails)

[TecraTube]

Yes, we get it. You download the signature for the IMG file when you have the ISO downloaded. Need the ISO signature file to decrypt with the KEY against the ISO file

[paulredding]

Thank you. I understood you just fine, and that is the most important thing

[neilhorne]

Very helpful video. Your pronunciation of GUI is good, except the G is as in Gdansk. (so not "Djoo-ey").
I also like how you avoided the unnecessary detail in in your explanations, but focused on the things that matter. And it was helpful to not edit out the mistakes (like forgetting that you're dealing with an image file). This shows us mortals that even the pros get stuck, and that it's easy to get unstuck.