Gpg4win - encryption tools

Post details of freeware that are found to be not portable here. Posts in the submissions forum relating to freeware found to be not portable should also be moved here.
Post Reply
Message
Author
User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Gpg4win - encryption tools

#1 Post by webfork »

Note: I haven't tested this yet. I'm mainly posting this because I'm thrilled one of the primary Windows GPG project is finally addressing portability.
synopsis wrote:Gpg4win enables users to securely transport emails and files with the help of encryption and digital signatures. Encryption protects the contents against an unwanted party reading it. Digital signatures make sure that it was not modified and comes from a specific sender.

Gpg4win supports both relevant cryptography standards, OpenPGP and S/MIME (X.509), and is the official GnuPG distribution for Windows. It is maintained by the developers of GnuPG. Gpg4win and the software included with Gpg4win are Free Software (Open Source; among other things free of charge for all commercial and non-commercial purposes).
(source: http://gpg4win.org/about.html)

Making it portable:
To create a portable Gpg4win version use the included tool mkportable.exe.
HOWTO: Install Gpg4win with all components and then run from the command line (cmd) in install directory: mkportable.exe [OPTIONS] TARGETDIR. Use mkportable.exe --help to get all options. The portable version does not include GpgOL (Outlook plugin) and GpgEX (Shell Extensions)! Your certificates and settings are saved in the directory 'home' of portable version.
Please note: Does not use portable applications - especially crypto applications - on potentially infected systems
(http://www.gpg4win.org/download.html)

System Requirements: Windows XP, Vista, 7 and 8. Both 32 and 64bit systems are supported.

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: Gpg4win - encryption tools

#2 Post by webfork »

There are some good security tools in here, especially if you need to use certificates, but the setup process is overly tedious and program needs some usability work.
  1. Download and run setup program (gpg4win-[version number].exe)
  2. Install options you want (ignore GpgOL and GpgEX since these won't go into the portable version anyway)
  3. When prompted to make Claws-Mail your default client, select "No"
  4. Create an empty folder c:\gpg4win
  5. Open a command prompt window and navigate to C:\Program Files\GNU\GnuPG
  6. Enter mkportable.exe --full c:\gpg4win
  7. Uninstall gpg4win
  8. Launch one of the following programs:
    • gpa.exe - GNU Privacy Assistant - includes text (clipboard) and file encryption options
    • kelopatra.exe Kleopatra - Certificate manager
    • claws-mail.exeClaws-mail - basic email client with included GPG tools
Pros
  • Lots and lots of functionality, tools, and tweaks for power users
Cons

In short, I suspect that no one outside of those very concerned with security are ever going to use this.
  • Not nearly as smooth and easy as gpg4usb nor Thunderbird+Enigmail
  • By default is set to 1024 bit keys and doesn't support generation of 4096 keysizes (gpg4usb supports VERY high keysizes). For reference, security expert Shneier uses 2048.
  • Claws-mail is some distance behind Thunderbird (feels very 1998)

User avatar
Midas
Posts: 6710
Joined: Mon Dec 07, 2009 7:09 am
Location: Sol3

Re: Gpg4win - encryption tools

#3 Post by Midas »

Thanks for posting portabilizing instructions, I'll be looking into it soon, I hope.
webfork wrote:
  • Claws-mail is some distance behind Thunderbird (feels very 1998)

FYI, while I don't much care for lumbering Thunderbird, I really like Claws-mail (which is highly configurable and can be easily themed for a more updated look -- viewtopic.php?t=21324); I just wish it got portable separate from Gpg4win integration, I'd adopt it in a flash... :)

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: Gpg4win - encryption tools

#4 Post by webfork »

Update: So Clawsmail saves to User\AppData\Roaming - so it's not portable. Whoops.

Moving this thread to the Not Portable section and, unless the portable version install process is radically simplified, I likely won't update this thread.

User avatar
Midas
Posts: 6710
Joined: Mon Dec 07, 2009 7:09 am
Location: Sol3

Re: Gpg4win - encryption tools

#5 Post by Midas »

Gpg4win v2.2.4 released (changelog at http://www.gpg4win.org/change-history.html).

User avatar
smaragdus
Posts: 2120
Joined: Sat Jun 22, 2013 3:24 am
Location: Aeaea

Re: Gpg4win - encryption tools

#6 Post by smaragdus »

Gpg4win 2.2.5 has been released.

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: Gpg4win - encryption tools

#7 Post by webfork »

I might retry the GPG4Win portability process in the near future ... I noticed this in the GPG4Win changelog from back in November:
The mkportable process can be used again to create a portable Gpg4win variant.
http://www.softpedia.com/progChangelog/ ... 35240.html

User avatar
JohnTHaller
Posts: 715
Joined: Wed Feb 10, 2010 4:44 pm
Location: New York, NY
Contact:

Re: Gpg4win - encryption tools

#8 Post by JohnTHaller »

webfork wrote: Sat Jan 13, 2018 7:43 am I might retry the GPG4Win portability process in the near future ... I noticed this in the GPG4Win changelog from back in November:
The mkportable process can be used again to create a portable Gpg4win variant.
http://www.softpedia.com/progChangelog/ ... 35240.html
This appears to just copy the C:\Program Files\GnuPG directory to the location you specify, create an empty HOME directory, and create a text file called gpgconf.ctl within the bin directory containing some comments about the file's presence trigger portable mode for GPG. I'm not sure if this prevents the GPG agent process from running indefinitely and preventing ejects when used. This doesn't appear to include any gpg4win tools in the 'portable' copy, just GPG.
PortableApps.com - The open standard for portable software | Support Net Neutrality

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: Gpg4win - encryption tools

#9 Post by webfork »

JohnTHaller wrote: Sat Jan 13, 2018 1:51 pmThis doesn't appear to include any gpg4win tools in the 'portable' copy, just GPG.
That's frustrating. Of *all* the programs out there you'd want to be portable, GPG has one of the strongest use cases. As a security professional, I need my security software to fit on a small device I can keep on my person at all times and easily discard.

Thanks for the heads-up.

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: Gpg4win - encryption tools

#10 Post by webfork »

Old thread update: this saw a lot of updates since it was last posted: https://www.gpg4win.org/change-history.html ... I didn't see anything to address portability, so I likely won't retest, but it's still a good free, open source security program.

User avatar
Midas
Posts: 6710
Joined: Mon Dec 07, 2009 7:09 am
Location: Sol3

Re: Gpg4win - encryption tools

#11 Post by Midas »

GpgWin v3.1.15 released 2021-01-12 (changelog at https://www.gpg4win.org/change-history.html).

User avatar
Midas
Posts: 6710
Joined: Mon Dec 07, 2009 7:09 am
Location: Sol3

Re: Gpg4win - encryption tools

#12 Post by Midas »

GPG4Win v4.0 released 2021-12-21 (changelog at https://www.gpg4win.org/change-history.html).

Release note also at https://www.gpg4win.org/version4.html.

Post Reply