1 # Configuration file for GnuPG.
3 # Thanks to [1] for some hints to generate more secure keys (read on
6 # [1]: https://we.riseup.net/riseuplabs+paow/openpgp-best-practices
8 # Copyright (C) 2009-2012 Simon Ruderich
10 # This file is free software: you can redistribute it and/or modify
11 # it under the terms of the GNU General Public License as published by
12 # the Free Software Foundation, either version 3 of the License, or
13 # (at your option) any later version.
15 # This file is distributed in the hope that it will be useful,
16 # but WITHOUT ANY WARRANTY; without even the implied warranty of
17 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 # GNU General Public License for more details.
20 # You should have received a copy of the GNU General Public License
21 # along with this file. If not, see <http://www.gnu.org/licenses/>.
26 # Don't display the copyright notice.
32 # Use more secure preferences. These are not enforced, but tried in the given
33 # order and the first supported by all recipients is used.
35 # Ciphers for encryption.
36 personal-cipher-preferences AES256 AES192 AES CAST5
37 # Don't use insecure hashes like SHA1 or MD5 and prefer stronger hashes.
38 personal-digest-preferences SHA512 SHA384 SHA256 SHA224
39 # Prefer better compression methods.
40 personal-compress-preferences BZIP2 ZLIB ZIP Uncompressed
42 # Default preferences when generating a new key. Use the three settings above
43 # combined to create more secure keys.
44 default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 BZIP2 ZLIB ZIP Uncompressed
46 # Don't use SHA1 when signing keys, this includes self-certificates. This
47 # setting is separate from the settings above and needs to be explicitly set
48 # or SHA1 will be used! Thanks to [1].
49 cert-digest-algo SHA512
54 # Use the given keyserver.
55 keyserver hkp://pool.sks-keyservers.net
60 # Use my newest key as default key.
61 default-key 0xE44C32F9