PGP Settings & Verification

[INTRO]

Kerberos / Kerberos PGP Integration

This manual explains how PGP encryption integrates with Kerberos Market’s Kerberos layer. PGP ensures messages and updates are signed, verifiable and immune to tampering.

[STEP 1]

Install GPG Toolkit

sudo apt install gnupg

Run gpg --version to confirm installation.

[STEP 2]

Generate Your Key Pair

gpg --full-generate-key

Select RSA 4096, set expiry 12 months, use unique passphrase. Export public key to share on Kerberos Market profile.

[STEP 3]

Import Kerberos PGP Key

gpg --import kerberos.asc
9A3C 1F58 889D 2C9E 7F92 AB12 7E9A 5AA4 8D3F 9E77
[STEP 4]

Verify Signatures

gpg --verify message.asc

If output displays “Good signature from Kerberos Online”, the message is authentic and mirror verified.

[STEP 5]

Best Practices

  • Rotate keys annually and re‑sign market profile.
  • Use detached signatures for uploads.
  • Never import PGP keys from clearnet sources.