On Nov 20, 2013, at 1:21 PM, Josef G. Bauer <josef.ba...@web.de> wrote:

> Hi,
> 
> I wonder how easily my private key(s) ('secgring.gpg') can be cracked
> once somebody get access to it.

Not at all easily, *if* you have a good passphrase on your private key(s).

> Q: Is the password stored as an hash and can it be cracked using Rainbow
> Tables? Is it maybe salted?

In OpenPGP, a S2K (string-to-key) algorithm is used, where the passphrase 
entered by the user is hashed multiple times (with added salt) to transform it 
into the key used to decrypt the secret key.

David


_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to