vanitasvitae/openpgp-notes
1
0
Fork 0
mirror of https://codeberg.org/openpgp/notes.git synced 2024-11-30 11:32:07 +01:00
Code Issues Projects Releases Packages Wiki Activity

edit certificates and keys concept section

Browse source
This commit is contained in:
Tammi L. Coles 2023-10-06 14:53:38 +02:00 committed by Heiko Schaefer
parent 5077358a99
commit 3c75ccc3c5
No known key found for this signature in database
GPG key ID: 4A849A1904CCBD7D
1 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
book/source/02-highlevel.md
View file

@ -92,17 +92,17 @@ There is [ongoing work](https://datatracker.ietf.org/doc/draft-wussler-openpgp-p
## Concepts ## Concepts
### Certificates/Keys ### Certificates and keys in OpenPGP
Use of OpenPGP is centered around cryptographic keys. OpenPGP revolves fundamentally around the concept of cryptographic keys.
In OpenPGP, bare cryptographic keys are combined with additional metadata into "OpenPGP certificates," which are a relatively complex data structure (OpenPGP certificates are also often called "OpenPGP keys"). In this framework, bare cryptographic keys are combined with additional metadata to form what are known as "OpenPGP certificates." These certificates are relatively complex data structures, also commonly referred to as "OpenPGP keys".
An OpenPGP certificate can evolve over time, with components being added, expiring, or being marked as invalid. An OpenPGP certificate is dynamic, evolving over time as components are added, expire, or are marked as invalid.
See the chapter about [OpenPGP certificates](certificates_chapter) for details, and internal structure, and the chapter about [private keys](private_key_chapter) for handling of private key material in OpenPGP. For detailed information on structure and handling, read our chapters on OpenPGP [certificates"](certificates_chapter) and [private keys](private_key_chapter).
Other important topics around certificates are their management, authentication, and trust models. We will only touch on those, in this document. Beyond the basics, managing certificates, as well as understanding their authentication and trust models, are crucial topics. Though this document will only briefly touch on these aspects, they constitute an integral part of working with OpenPGP.
### High-Level operations ### High-Level operations