0
I've recently been playing around with GnuPG using a yubikey, and its very nice but I have some concerns I like to ask about.
PGP seems geard toward emails and short lived messages. Is the OpenPGP standard stable enough such that if i encrypt a file using GnuPG i will still be able to decrypt it 5 to 10 years from now?
I'm not asking about the long term strength of whatever crypto algorithm i choose to use with PGP but the stability of the standard and backward compatability.
In short, is PGP suitable for long term encrypted file storage? or is this bad practice?
Second, PGP seems bloated and alot of metadata is added into the files. Is there a way to use the raw ciphers such as say AES/RSA like you would if you did the encryption/signing in say PyCrypto
Since someone will mention it, I know and use VeraCrypt which would also be an option. But i like the simplicity of PGP for my particuler usecase.
If you think it's a bloated format don't use it? Currently you haven't included any information about how you do your thing so nobody is going to be able to tell you if you do something that adds extra metadata that could be avoided. As it has been around for a while its probably stable. If you include details about your particular usecase maybe someone could present an even easier alternative. – Seth – 2018-02-01T11:00:39.970
What is the metadata that you say is added to an encrypted pgp/gpg file? Looks like just the public salt, and the secret key (ID only?) needed to decrypt and that can be avoided by not using one (with
-c
). – Xen2050 – 2018-03-10T04:58:34.537