Oversimplified WinPT mini-guide

	Version française:	http://sebsauvage.net/winpt_fr.html
	English version:	http://sebsauvage.net/winpt_en.html

• Create your keypair (and publish your public key)
• Import a public key (then check and sign it)
• Sign and Encrypt a message
• Sign a message (without encrypting)
• Decrypt a message and/or check its signature
  

Create your keypair

• Key type: choose "DSA and ELG (default)"
• Subkey size in bits: enter 1024 or 2048.
• Real name: enter your real name and surname
• Comment: enter a comment, or you pseudo
• Email address: enter your email address
• Key expiration: leave empty.
  
• Passphrase: enter a word (or phrase) which will protect your secret key.
• Repeat passphrase: enter the word/phrase again.
• Click "OK".
  

Publish your public key

1. Open the "Key Manager", right-clic on your key, "Copy key to clipboard". This will copy your public key in the clipboard.
2. Go to http://pgp.mit.edu (or any other key server (search for "pgp key server" on Google)) and paste your key in the "Submit a key" form.
   
3. Click the "Submit this key to the keyserver !" button.

I will send you the document tomorrow.

--
John Schmoe
john.shmoe@foo.bar
KeyID: 0x7C638FCD

Import a public key

1. Go to http://pgp.mit.edu and enter the name, email or KeyID of the person in the "Extract a key" form.
2. Click "Do the search !". The corresponding key list should appear.
   
3. Choose the key your are interested in. It will show up on screen ("-----BEGIN PGP PUBLIC KEY BLOCK-----" followed by a gibberish).
4. Right-click on the WinPT tray icon > "Current Window" > "Decrypt/Verify".
5. A "Key Import" windows appears, showing the key about to be imported. Click the key to select it and click "Import".
   
6. A summary of imported key appears ("Key Import Statistics"), click "OK".
   

Check the key

1. Open the "Key Manager", right-click the key you just imported > "Properties".
2. You will see the "Fingerprint", a long string like "F379 08E9 CBA0 41F1 B205 5C1D 58C2 36EE B1F5 D937".
3. Contact the key owner to ensure your fingerprint matches his (ideally by metting the person face to face, otherwise by phone or other indirect means.).

Sign the key

1. Open the "Key Manager", right-click the key you just imported > "Sign".
2. Passphrase: Enter the passphrase used to protect your secret key. Click "OK".
3. A window appears ("Choose Signature Class"):
1. Choose (1) if you could not check the key.
2. Choose (2) if you checked the key by phone, internet or other indirect means.
3. Choose (3) if you checked the key by meeting the person face to face (and checked his/her ID if possible).
4. Click "OK".
5. The message "Key successfully signed" will show up. Click "OK".
   

Sign and encrypt a message

1. Right-click on WinPT tray icon > "Current Window" > "Sign & Encrypt"
2. A window appear: Choose one or more recipients (Only those recipients will be able to decrypt the message).
3. Click "OK".
4. Enter the passphrase which protects your secret key.
5. Click "OK".
   

Sign a message

1. Right-click on WinPT tray icon > "Current Window" > "Sign"
4. Enter the passphrase which protects your secret key.
5. Click "OK".
   

-----BEGIN PGP SIGNED MESSAGE-----
your message
-----BEGIN PGP SIGNATURE-----
 a small block of gibberish
-----END PGP SIGNATURE-----

Decrypt a message and/or check its signature

1. Right-click on WinPT tray icon > "Current Window" > "Decrypt/Verify"
2. If the encrypted message is addressed to you, you will have to enter the passphrase which protects your secret key. Click "OK".
   
3. A window opens showing who signed this message and if the signature is good.
   If you see "The signature is good", it means the message really comes from that person.
4. Otherwise, nothing proves the message is authentic. The message may have been be forged or tampered.
5. If the message was encrypted, it should appear decrypted on screen.
   

Conclusion