DataTerminology.comNEW
An open standard for encrypting and signing data and communications, based on the Pretty Good Privacy format.
DESCRIPTION
OpenPGP specifies message formats and operations for encryption, decryption, signing, and verification using public key cryptography. It originated from PGP and is formalized in RFC 4880. OpenPGP supports email security, file encryption, and identity verification through a web of trust or key servers. Implementations include GnuPG and various libraries. Organizations use OpenPGP to protect sensitive data and meet compliance requirements.
ALTERNATIVE DEFINITIONS
IETF RFC 4880
This document describes the OpenPGP message format for cryptographic protection of messages and files.
Focuses on formal specification of message format.
GnuPG
OpenPGP is the most widely used email encryption standard in the world.
Highlights widespread adoption in email encryption.
RELATED TERMS
Pretty Good Privacy GnuPG RSA Asymmetric Encryption Digital Signature Key Management RFC 4880 Email Encryption Keyring PGP Web of Trust
COMPETING TERMS
RELATIONS
- Implemented by: Pretty Good Privacy
KNOWLEDGE AREAS
Data Security Data Privacy & Compliance Infrastructure
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Chief Information Security Officer Data Privacy Officer Software Developer IT Manager
EXTERNAL SOURCES
TOP QUESTIONS
Why use OpenPGP for securing communications?
It provides robust encryption and signatures with widely supported implementations and tooling.
Category: Relevancy
How does OpenPGP compare with S/MIME?
OpenPGP uses a web of trust model, while S/MIME relies on X.509 PKI; each has different deployment trade-offs.
Category: Distinction
What are common mistakes with OpenPGP key management?
Weak passphrases, poor key backup, and neglecting key revocation are frequent errors.
Category: Mistakes
What risks exist if OpenPGP is misconfigured?
Users may trust compromised keys or expose sensitive data due to incorrect encryption settings.
Category: Risks
Which RFC defines OpenPGP message format?
RFC 4880 specifies the message format and operations.
Category: Definition
What is a hot topic around OpenPGP today?
Modernizing key discovery and improving UX while maintaining strong cryptographic practices.
Category: Topic
How should organizations manage OpenPGP in practice?
Standardize key policies, automate key distribution, and monitor revocations and expirations.
Category: Management
What alternatives compete with OpenPGP?
S/MIME and secure messaging protocols offer different trust and usability models.
Category: Alternatives
Where can developers start with OpenPGP?
Use GnuPG, follow RFC-4880, and integrate libraries with clear key management workflows.
Category: Guidance