A set of bash scripts to simplify the encryption, decryption, signing and verification of any content you have copied to the clipboard. Automatically searches the pgp.mit.edu keyserver for unknown recipients during encryption.
Download and install GnuPG modern for OS X or using Homebrew:
$ brew install homebrew/versions/gnupg21
And ensure we have gpg symlinked to gpg2:
$ ln -s /usr/local/bin/gpg2 /usr/local/bin/gpg
Note that GnuPG stable doesn't work with the latest version of MacOS -- it returns the following error:
$ gpg --card-status
scdaemon[48405]: pcsc_control failed: invalid parameter (0x80100004)
scdaemon[48405]: pcsc_vendor_specific_init: GET_FEATURE_REQUEST failed: 65538
$ git clone https://github.com/kasparsd/pgp-quick.git
Simply copy the text you want to encrypt and double click the encrypt-clipboard file or run it from the terminal:
$ ./encrypt-clipboard
and it will prompt you to enter the recipient email address:
$ ./encrypt-clipboard
Enter recipient email address:
hi@kaspars.net
In case the public key of the recipient is not found in your local keyring, it will search the pgp.mit.edu keyserver and offer you to select from the keys found:
gpg: D31A263C: There is no assurance this key belongs to the named user
pub 2048R/D31A263C 2015-11-12 Kaspars Dambis <hi@kaspars.net>
Primary key fingerprint: DE94 A9B4 8BE3 6B82 F438 EE72 3352 BC04 645D 5E28
Subkey fingerprint: 8C82 56D3 6165 7DF7 A18E 2DCF E3D9 7C52 D31A 263C
It is NOT certain that the key belongs to the person named
in the user ID. If you *really* know what you are doing,
you may answer the next question with yes.
Use this key anyway? (y/N)
Please take extra care when selecting the key by ensuring the correct fingerprint. For example, the about page on kaspars.net lists A134 BA02 60D4 3F8E ACC8 89D9 94F1 3532 A319 EA5D as the fingerprint of my public key which indeed matches the one found by the script above.
For example, here is a message that I would like to sign:
PGP Quick can be found at https://github.com/kasparsd/pgp-quick
so I select and copy that string and run (or click)
$ ./clearsign-clipboard
which signs the message and stores it into clipboard:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
PGP Quick can be found at https://github.com/kasparsd/pgp-quick
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEEoTS6AmDUP46syInZlPE1MqMZ6l0FAljFKJQACgkQlPE1MqMZ
6l0TBAf/SOCCcCzJe1py3oQBErNkdZ+4RaHcsKibIhSlyC0+wSzNCoYA6TPhlqDw
+ggiYX8zdN0JbLDmKa31HlWB0BPWkzmLfKnXuT+xvfkOTMbdqhM76jsmkgNQ8icG
/inhMd8BZFaqLqD9aCuJPhxko2ZUMXuyQbSZrBRyT2n+g4iz+Fj+6TrUpjQy+8XA
ah3z4EXmR1VrQSUf77m85ctZI0rlQMCYo/ci+xqaDQ/tSehAfamJnLoHn9JwzVse
GUOKFwAZBVCpeIPzqFyJLYJ6ak042PZWF21Q8wGhVWY+AOdJht3bVR15uD2xMcQk
95WgMzwHfWezpeuHwGxFbXKk11uidw==
=Xl/W
-----END PGP SIGNATURE-----
Now everyone can verify that it was written by me:
$ ./verify-clipboard
gpg: Signature made Sun Nov 22 01:52:44 2015 EET using RSA key ID 645D5E28
gpg: Good signature from "Kaspars Dambis <kaspars@damb.is>"
Also https://keybase.io/verify confirms that it was signed by me:
Created by Kaspars Dambis.
I use these scripts with Yubikey NEO.