[分享]Evolution中的加密问题

OOo,TeX,KO,ABI,GIMP,Picasa,ProE,QCAD,Inkscape,Kicad,Eagle
回复
头像
firehare
帖子: 2625
注册时间: 2005-04-10 16:54
来自: 温州大学
联系:

[分享]Evolution中的加密问题

#1

帖子 firehare » 2005-05-06 16:03

前不久在邮件列表中看到了关于Evolution使用GPG加密的问题,就把Evolution的帮助拿来看了一遍,顺便翻了一下,给大家分享。

Encryption
加密

* 2.6.1.Making a GPG Encryption Key
* 2.6.1.创建GPG密钥
* 2.6.2.Getting and Using GPG Public Keys
* 2.6.2.获取和使用GPG公钥
* 2.6.3.Setting up GPG Encryption
* 2.6.3.设置GPG加密
* 2.6.4.Encrypting Messages
* 2.6.4.加密信息
* 2.6.5.Unencrypting a Received Message
* 2.6.5.解密收到的信息
* 2.6.6.S/MIME Encryption
* 2.6.6.S/MIME加密

To protect and encode your e-mail transmissions, Evolution offers two encryption methods:
保护和加密你的E-Mail传输,Evolution提供了两种加密手段:

* GPG Encryption
* GPG加密
* S/MIME Encryption
* S/MIME加密

Evolution helps you protect your privacy by using GNU Privacy Guard (GPG), an implementation of strong Public Key Encryption.
Evolution使用GNU Privacy Guard(GPG)来帮助你保护隐私,能实现强健的公共密钥。

GPG uses two keys: public and private. You can give your public key to anyone you want to receive encrypted messages, or put it on a public key server so that people can look it up before contacting you. Your private key lets you decrypt any message encrypted with your public key. Never give your private key to anyone.
GPG使用两种密钥:公钥和私钥。你可以把你的公钥给任何你想接收加密信息的人,或将它放在一个公钥服务器上以便人们可以在联系你之间找到它。你的私钥可以解开任何用你的公钥加密过的信息。不要把你的私钥给任何人。

Using encryption takes a bit of forethought. When you send a message that is encrypted, you must encrypt it using your intended recipient's public key. To receive an encrypted message, you must make sure that the sender has your public key in advance. For signing messages, you encrypt the signature with your private key, so only your public key can unlock it. When you send the message, the recipient gets your public key and unlocks the signature, verifying your identity.
使用加密功能就必须要事先做些准备工作。当你发送一个加密信息时,你必须用收件人的公钥加密该信息。而当你接收一个加密信息时,你也必须事先确定发送人有你的公钥。对签名信息,你用你的私钥加密签名,那只有你的公钥才能解开它。当你发送信息时,收件人得到你的公钥并解密签名,从而确定你的身份。

Evolution does not support older versions of PGP, such as OpenPGP and Inline PGP.
Evolution不支持老版的PGP,如OpenPGP和Inline PGP。

You can use encryption in two different ways:
你可能通过两种不同的方式来加密:
* You can encrypt the entire message, so that nobody but the recipient can read it.
* 你可以加密整个信息,以便除了收件人外没有人可以阅读它。
* You can attach an encrypted signature to a plain text message, so that the recipient can read the message without decrypting it, and needs decrypting only to verify the sender’s identity.
* 你也可以附加一份加密的签名到简单的文本信息中,以便收件人不用解密就可以阅读信息,并仅仅只在要确认发送人身份时才进行解密。

For example, suppose that Kevin wants to send an encrypted message to his friend Rachel. He looks up her public key on a general key server, and then tells Evolution to encrypt the message. The message now reads “@#$23ui7yr87#@!48970fsd.” When the information gets to Rachel, she decrypts it using her private key, and it appears as plain text for her to read.
举个例子,假设Kevin想要发送一份需要加密的信息给他的朋友Rachel,他在通用密钥服务器上找到了她的公钥,并告诉Evolution加密该信息。该信息现在读起来是这样:“@#$23ui7yr87#@!48970fsd.”。当Rachel收到信息之后,她用她的私钥对该信息进行解密,该信息就做为简单的文本出现以供她阅读。
(本篇主要是讲原理,给大家理个概念。未完待续)
头像
firehare
帖子: 2625
注册时间: 2005-04-10 16:54
来自: 温州大学
联系:

#2

帖子 firehare » 2005-05-07 0:28

* 2.6.1.Making a GPG Encryption Key
* 2.6.1.创建GPG密钥

Before you can get or send encrypted mail, you need to generate your public and private keys with GPG. This procedure covers version 1.2.4 of GPG. If your version is different, these steps might vary slightly. You can find out your version number by entering gpg --version.
在你可以接收和发送加密邮件之前,你需要用GPG生成你的公钥和私钥。下列步骤是基于GPG 1.2.4的版本的。如果你是不同版本,这些步骤可能稍有不同,你可以通过键入gpg --version来得你的版本号的。

1.Open a terminal and enter gpg --gen-key.
1.打开终端并键入gpg --gen-key
2.Select an algorithm, then press Enter.
or
To accept the default algorithm of DSA and ElGamal, press Enter (recommended).
2.选择一种算法,然后回车。

接受缺省的DSA和ElGamal算法,接回车(推荐)
3.Select a key length, then press Enter. To accept the default, 1024 bits, press Enter.
3.选择密钥长度,然后回车。接受缺省的是1024比特,按回车。
4.Enter how long your key should be valid for.
or
To accept the default of no expiration, press Enter, then press Y when you are prompted to verify the selection.
4.输入密钥有效期

接收缺省值不过期,按回车,然后在提示确认选择时按Y。
5.Type your real name, then press Enter.
5.输入你的真实姓名,然后回车。
6.Type your e-mail address, then press Enter.
6.输入你的E-Mail地址,然后回车。
7.(Optional) Type a comment, then press Enter.
7.(可选)输入注释,然后回车。
8.Review your selected user ID. If it is correct, press O.
8.查看你的用户ID,如果正确的话,按0.
9.Type a passphrase, then press Enter.
9.输入你的密码,然后回车
10.Move your mouse randomly to generate the keys.
10.移动你的鼠标以便随机生成密钥。

After the keys are generated, you can view your key information by entering gpg --list-keys. You should see something similar to this: /home/you/.gnupg/pubring.gpg ---------------------------- pub 1024D/32j38dk2 2001-06-20 you <you@example.com> sub 1024g/289sklj3 2001-06-20 [expires: 2002-11-14]
在密钥生成之后,你可以通过键入gpg --list-keys来查看你的密钥信息。你将看到类似这样的信息:/home/you/.gnupg/pubring.gpg ---------------------------- pub 1024D/32j38dk2 2001-06-20 you <you@example.com> sub 1024g/289sklj3 2001-06-20 [expires: 2002-11-14]

GPG creates one list, or keyring, for your public keys and one for your private keys. All the public keys you know are stored in the file ~/.gnupg/pubring.gpg. If you want to give other people your key, send them that file.
GPG为你的公钥创建一个列表或密钥串,为你的私钥也创建一个。你所知的全部公钥都被存放在文件~/.gnupg/pubring.gpg中,如果你想给其他人你的密钥,请将该文件发送给他。

If you want, you can upload your keys to a key server.
如果你想,你也可以上传你的密钥到一个密钥服务器中。

1. Check your public key ID with gpg--list-keys. It will be the string after 1024D on the line beginning with pub. In the example above, it is 32j38dk2.
1. 通过gpg --list-keys来检查你的公钥ID。它是一行中的1024D之后的字符串。在上面的例子中,它是32j28dk2。

2. Enter the command gpg --send-keys --keyserver wwwkeys.pgp.net 32j38dk2. Substitute your key ID for 32j38dk2. You need your password to do this.
2. 输入命令gpg --send-keys --keyserver wwwkeys.gpg.net 32j38dk2。以便用32j38dk2来代替你的密钥ID。在这过程中需要你的密码

Key servers store your public keys for you so that your friends can decrypt your messages. If you choose not to use a key server, you can manually send your public key, include it in your signature file, or put it on your own Web page. However, it's easier to publish a key once, and then let people download it from a central place when they want.
密钥服务器为你保存你的公钥,以便你的朋友可以解开你的信息。如果你不选择使用密钥服务器,你也可以手动发送你的公钥,将它包括在你的签名文件中,或将它放入你的个人主页。然而,马上发布一个密钥并让人们当他需要时从中心下载它会更加容易。

If you don't have a key to unlock or encrypt a message, you can set your encryption tool to look it up automatically. If it can't find the key, an error message appears.
如果你没有密钥加密或解密信息,你可以设置你的加密工具以便自动搜索它。如果它不能找到的话,将会出现出错信息。
上次由 firehare 在 2005-05-08 12:35,总共编辑 1 次。
头像
firehare
帖子: 2625
注册时间: 2005-04-10 16:54
来自: 温州大学
联系:

#3

帖子 firehare » 2005-05-07 0:49

* 2.6.2.Getting and Using GPG Public Keys
* 2.6.2.获取和使用GPG公钥

To send an encrypted message, you need to use the recipient's public key in combination with your private key. Evolution handles the encryption, but you need to get the public key and add it to your keyring.
为了发送加密信息,你需要使用收件人的公钥和你的私钥组合。Evolution能处理加密过程,但你需要得到公钥并将其加入你的密钥串中。

To get public keys from a public key server, enter the command gpg --recv-keys --keyserver wwwkeys.pgp.net keyid, substituting keyid for your recipient's ID. You need to enter your password, and the ID is automatically added to your keyring.
为了从公共密钥服务器中得到公钥,键入命令gpg --recv-keys --keyserver wwwkeys.pgp.net keyid,其中keyid就是收件人的ID。你需要输入你的密码,然后该ID就会自动添加到你的密钥串中。

If someone sends you a public key directly, save it as a plain text file and enter the command gpg filename to add it to your keyring.
如果有人直接给你发送公钥,将它作为简单文本文件保存,并键入命令gpg 文件名,以便将其添加到你的密钥串中。
头像
firehare
帖子: 2625
注册时间: 2005-04-10 16:54
来自: 温州大学
联系:

#4

帖子 firehare » 2005-05-07 0:56

* 2.6.3.Setting up GPG Encryption
* 2.6.3.设置GPG加密

1. Click Edit > Preferences, then click Mail Accounts.
1. 点击编辑>首选项,然后点击邮件帐号。
2. Select the account you want to use securely, then click Edit.
2. 选择你想安全使用的帐号,然后点击编辑。
3. Click the Security tab.
3. 点击安全标签。
4. Specify your key ID in the PGP/GPG Key ID field.
4. 在PGP/GPG密钥ID文本框中填入你的密钥ID。
5. Click OK.
5. 点击确定。
6. Click Close.
6. 点击关闭。

Evolution requires that you know your key ID. If you don't remember it, you can find it by typing gpg --list-keys in a console window. Your key ID is an eight-character string with random numbers and letters.
Evolution要求你知道你自己的密钥ID。如果你记不住的话,你可以在控制台中键入gpg --list-keys来找到它。你的密钥ID是由8个随机数或字母组成的字符串。
头像
firehare
帖子: 2625
注册时间: 2005-04-10 16:54
来自: 温州大学
联系:

#5

帖子 firehare » 2005-05-07 1:03

* 2.6.4.Encrypting Messages
* 2.6.4.加密信息

To encrypt a single message:
加密单条信息:

1. Open a Compose a Message window.
1. 打开撰写新件窗口。
2. Click Security > PGP Encrypt.
2. 单击安全 > PGP 加密。
3. Compose your message, then click Send.
3. 撰写信息,然后发送。

You can set Evolution to always sign your e-mail messages:
你也可以将Evolution设成总是对信件进行签名:

1. Click Edit > Preferences, then select Mail Accounts.
1. 点击编辑>首选项,然后点击邮件帐号。
2. Select the account you want to use securely, then click Edit.
2. 选择你想安全使用的帐号,然后点击编辑。
3. Click the Security tab.
3. 点击安全标签。
4. Select Always Sign Outgoing Messages When Using This Account.
4. 选择总是当使用该帐户时总是发送签名信件。
5. Click OK.
5. 单击OK。
6. Click Close.
6. 单击关闭。
头像
firehare
帖子: 2625
注册时间: 2005-04-10 16:54
来自: 温州大学
联系:

#6

帖子 firehare » 2005-05-07 1:50

* 2.6.5.Unencrypting a Received Message
* 2.6.5.解密收到的信息

If you receive an encrypted message, you need to decrypt it before you read it. Remember, the sender must have your public key before they can send you an encrypted message.
如果你接收到了加密的信息,你在阅读它之前对其进行解密。记住,发送人在对你发送加密信息之前必须有你的公钥。

When you view the message, Evolution prompts you for your PGP password. Enter it, and the unencrypted message is displayed.
当你观看该信息时,Evolution将提示你输入你的PGP密码,输入后,将会显示解密后的信息。
头像
firehare
帖子: 2625
注册时间: 2005-04-10 16:54
来自: 温州大学
联系:

#7

帖子 firehare » 2005-05-07 1:50

* 2.6.6.S/MIME Encryption
* 2.6.6.S/MIME加密

S/MIME encryption also uses a key-based approach, but it has some significant advantages in convenience and security. S/MIME uses certificates, which are similar to keys. The public portion of each certificate is held by the sender of a message and by one of several certificate authorities, who are paid to guarantee the identity of the sender and the security of the message. Evolution already recognizes a large number of certificate authorities, so when you get a message with an S/MIME certificate, your system automatically receives the public portion of the certificate and decrypts or verifies the message.
S/MIME加密也使用基于密钥的方式,但它在便利和安全上有着一些优势。S/MIME使用证书,这是同密钥相类似的东西。每个证书的公开部分被信息的发送人和几个证书授予机构(受雇来担保发送人身份和信息安全)之一保留。Evolution已经可以识别相当多的证书授予机构,因此当你收到带S/MIME证书的信息时,你的系统会自动接收证书的公开部分并对解密或认证信息。

S/MIME is used most often in corporate settings. In these cases, administrators supply certificates that they have purchased from a certificate authority. In some cases, an organization can act as its own certificate authority, with or without a guarantee from a dedicated authority such as Verisign or Thawte*. In either case, the system administrator provides you with a certificate file.
S/MIME通常被用于公司。在公司里,管理员提供从一个证书授予机构购买的证书。在一些情况下,无论有无专业授权机构担保,有些组织也能作为它自己的证书授予机构,如Verisign和Thawte。在其他情况下,系统管理员将为你提供一个证书文件。

If you want to use S/MIME independently, you can extract an identification certificate from your Mozilla or Netscape Web browser. See the Mozilla help for more information on security certificates.
如果你想独立使用S/MIME,你可以从你的Mozilla或Netscape网页浏览器中提取出一个认证证书。更多有关安全证书的信息请参见Mozilla帮助。

The certificate file is a password-protected file on your computer. To use it in Evolution:
认证文件在你计算机上是用密码保护的。在Evolution使用它:
2.6.6.1.Adding a Signing Certificate
2.6.6.1.添加单个证书

1. Click Edit > Preferences, then click Certificate Tool.
1. 点击编辑>首选项,然后点击证书。
2. Click Import.
2. 点击导入。
3. Select the file to import, then click OK.
3. 选择导入的文件,然后点击确定。
4. Click Close.
4. 点击关闭

Similarly, you can add certificates that are sent to you independently of any authority by clicking the Contact Certificates tab and using the same Import tool. You can also add new certificate authorities, which have their own certificate files, in the same way.
相类似地,通过点击联系人标签并使用相同的导入功能,你可以添加一些授予机构发给你的独立证书。你也可以通过相同的方式添加新的拥有自己证书文件的证书授予机构。

2.6.6.2.Signing or Encrypting Every Message
2.6.6.2.签名或加密每一条信息

After you have added your certificate, you can sign or encrypt a message by clicking Security > S/MIME Sign or S/MIMe Encrypt in the message composer.
在你添加了你的证书之后,你就可以通过在撰写新件窗口中点击安全 > S/MIME签名或S/MIME加密来对信息进行加密或签名了。

To have every message signed or encrypted:
为了能对每条信息都能签名或加密:

1.Click Tools > Options, then select the account to encrypt the messages in.
1.点击工具 > 选项,然后选择要加密信息的账号。
2.Click Edit, then click Security.
2.点击编辑,然后点击安全。
3.Click Select next to Signing Certificate and specify the path to your signing certificate.
or
Click Select next to Encryption Certificate and specify the path to your encryption certificate.
3.点击选择下一个签名证书并指定签名证书所在目录

点击选择下一个加密证书并指定加密证书所在目录
4.Select the appropriate options.
4.选择合适的选项。
5.Click OK.
5.点击确定。
6.Click Close.
6.点击关闭
头像
firehare
帖子: 2625
注册时间: 2005-04-10 16:54
来自: 温州大学
联系:

#8

帖子 firehare » 2005-05-07 1:55

加密这部分就翻完了

我觉得比较有意思
第一:对加密这部分,尤其是GPG和S/MIME加密或签名的概念清晰了
第二:对如何使用GPG,如何具体操作也有了一定的了解
第三:对Evolution作为邮件工具也有了一定的了解

注意:在使用GPG时,有一步是要选择加密算法,大家是否可以自由选择,自由选择是否会带来不必要的麻烦,我倒没有尝试过,有哪些高手用过的,倒可以指点我们一二。
头像
firehare
帖子: 2625
注册时间: 2005-04-10 16:54
来自: 温州大学
联系:

#9

帖子 firehare » 2005-05-08 13:00

今天重读了一遍
发现有个问题
我如何得知收件人的公钥呢?
文中给出方法是用
gpg --recv-keys --keyserver wwwkeys.pgp.net keyid
但收件人的KeyID我要如何得知呢?
肯定是可以通过Name或Email来搜索的
具体如何做文中并未给出具体操作!
不知哪位高手知道?
回复