Full Disclosure mailing list archives

Re: OT: help generating gpg key with prescribed key ID


From: Valdis.Kletnieks () vt edu
Date: Wed, 21 Sep 2011 13:08:59 -0400

On Wed, 21 Sep 2011 16:21:24 +0300, Georgi Guninski said:
for a fishing expedition i need to generate a gpg key with prescribed key ID.

is there a relatively easy way to do this?

It's intentionally difficult.  It *is* possible to generate a key to match a given key ID,
or even match a given key fingerprint - however, the resulting key will have odd values
for key length (for instance, it may be a 25-bit DSA key or 1,343,342 bit RSA or other
wild stuff).  

http://www.pgp.net/pgpnet/pgp-faq/pgp-faq-keys.html#key-public-key-forgery

The tricky part will be getting the person to accept that the key is from who it
purports to be - this will probably involve some social engineering, especially if
the target already *has* a trusted key from the person you're trying to forge.

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: