Are files encrypted with gpg compatible with pgp?

21

5

Are files encrypted with gpg compatible with pgp? What about the other way? I recently learned the very basics of the procedures of using gpg to encrypt and decrypt files. But I don't have a lot of knowledge or good understanding of cryptology theory. I also hear about pgp. Besides the obvious and confusing -- at least to me -- resemblance of the name of one to the other, are the two system compatible with each other?

qazwsx

Posted 2012-01-16T05:42:52.060

Reputation: 6 739

2I don't have a definitive answer, but they should be compatible; they both use the OpenPGP standard. – Keith Thompson – 2012-01-16T06:24:38.777

Answers

18

Yes, both GnuPG and the commercial PGP.com are implementations of the same OpenPGP standard; in fact, GnuPG was specifically designed to be PGP-compatible.

The only differences you might encounter are:

  • Different supported algorithms. For example, GnuPG supports the Camellia encryption algorithm, while PGP.com does not.

    This is almost never a problem, though, as every PGP certificate ("PGP key") lists all algorithms that the owner's software supports (or more precisely those which the owner prefers to be used), so a message's sender can always pick a supported one.

  • Various quirks and differences in really old versions of PGP (especially the original releases from before OpenPGP was standartized). However, both GnuPG and PGP.com can easily read (if not always write) messages in the old formats.

tl;dr: Yes, they are compatible.

user1686

Posted 2012-01-16T05:42:52.060

Reputation: 283 655

1

GPG doesn't support the IDEA algorithm and PGP has it enabled by default. This makes the two appear incompatible. One solution is to disable the use of IDEA in PGP or to enable it in GPG by loading it as a module. Instructions here: http://www.spywarewarrior.com/uiuc/gpg-idea/gpg-idea.htm

– user34445 – 2018-11-09T14:53:25.203

1Is there any good practical reason one would choose the non-free PGP software at all? – qazwsx – 2012-01-16T22:07:11.277

3@Problemaniac: Paid technical support, for a start, which is important in corporate use; an easy-to-use graphical interface (GnuPG has 4-6 GUIs but all of them are lacking, especially on Windows) including integration with Explorer and Micros~1 Outlook; various centralization features, including company-wide automatic mail encryption and a key directory service. Finally, the basic "PGP Desktop Email" used to be free (at least beerfree) from the beginning up to PGP.com v9 or so. – user1686 – 2012-01-16T22:11:26.057