Week 3 · Part 1 of 4: GPG Introduction & Key Generation

Goal Understand the public-key cryptography revolution and generate your first GPG keypair. This is the foundation for everything else in the course. Prerequisites: Week 2 (Cryptography Fundamentals) This is Part 1 of 4 - Covers history, concepts, and key generation. Introduction: The Public Key Revolution Week 2 taught you symmetric encryption - Alice and Bob share the same secret key. But how do they exchange that key securely? The problem: ...

Week 3 · Part 2 of 4: Encryption, Decryption & Digital Signatures

Goal Master practical GPG operations: understanding your keyring, encrypting files for yourself and others, and creating digital signatures that prove authorship and integrity. Prerequisites: Week 3a (GPG Introduction & Key Generation) This is Part 2 of 4 - Covers keyring management, encryption operations, and signatures. 1. Understanding Your GPG Keyring List All Keys # List public keys gpg --list-keys # Output: pub rsa4096 2025-10-14 [SC] [expires: 2027-10-14] ABCD1234ABCD1234ABCD1234ABCD1234ABCD1234 uid [ultimate] Alice Cypherpunk <[email protected]> sub rsa4096 2025-10-14 [E] [expires: 2027-10-14] Key anatomy: ...

Week 3 · Part 3 of 4: Key Distribution & Web of Trust

Goal Master public key distribution methods: exporting and importing keys, using keyservers safely, and understanding the Web of Trust model for decentralized identity verification. Prerequisites: Week 3b (Encryption & Signatures) This is Part 3 of 4 - Covers key distribution, keyservers, and web of trust. 1. Public Key Distribution and Import Export Your Public Key # Export in ASCII armor (shareable format) gpg --armor --export [email protected] > alice-public-key.asc # View the exported key cat alice-public-key.asc Output: ...

Week 3 · Part 4 of 4: Key Management & Modern Alternatives

Goal Complete your GPG mastery with key lifecycle management (rotation, revocation, backup), practical email encryption, and understanding when to use modern alternatives like age for simpler use cases. Prerequisites: Week 3c (Key Distribution & Web of Trust) This is Part 4 of 4 - Covers key management, email encryption, and modern alternatives. 🌱 New to this? If managing keys from the command line feels like a lot, Privacy 101 introduces password managers (KeePassXC, Bitwarden) with a graphical, beginner-friendly approach first: Privacy 101 Week 4: Password Managers → ...

Week 6: Private Messaging, Encrypted Email, and Metadata Hygiene

🎯 Goal Learn how to communicate securely using end-to-end encrypted messaging, GPG-encrypted email, and metadata minimization. Explore Signal, Matrix, OTR, and email tools. Understand operational privacy trade-offs. 🌱 New to this? If the command line feels like a lot, Privacy 101 walks through secure messaging with Signal in a graphical, beginner-friendly way first: Privacy 101 Week 6: Secure Messaging → 1. Secure Messaging Protocols Overview Protocol E2EE Decentralized Metadata Safe CLI Available Signal ✅ ❌ (centralized) ❌ (requires phone number) ✅ (via signal-cli) Matrix (Olm) ✅ ✅ ⚠️ (servers can log) ✅ (nheko, gomuks, etc) XMPP + OTR ✅ ✅ ✅ (self-hosted possible) ✅ (profanity, mcabber) Tox ✅ ✅ (P2P) ✅ ✅ (toxic) 2. Signal CLI Setup Install signal-cli For Debian-based distros: ...

Week 10 · Part 1 of 2: Bash Scripting for Security & GPG Automation

Goal Learn bash scripting fundamentals tailored for security workflows and master automating GPG encryption operations in scripts. Prerequisites: Weeks 1-9 (encryption, GPG, system administration) This is Part 1 of 2 - Covers scripting fundamentals and GPG automation. 1. Why Automate Security Workflows? The Problem: Manual Tasks Get Skipped Security fatigue is real: Manual backups → forgotten until disaster strikes Key rotation → procrastinated indefinitely Log reviews → “I’ll do it tomorrow” (never happens) Security updates → Delayed due to inconvenience Result: Security degrades over time ...