GPG
GNU Privacy Guard: the tool that encrypts and signs files with public keys or a passphrase, and checks package signatures.
In more detail
gpg --encrypt -r name encrypts to someone's public key and gpg -c to a passphrase. Package managers use GPG signatures to prove packages came from the vendor.
Related terms
- HMAC — A way of combining a secret key with a hash function to produce a tag that shows a message came from someone holding the key and was not changed.
Taught in
- Friday At Five To Five: DevOps And DevSecOps — Certified GitOps Associate (CGOA) Exam Prep