Application Data Storage

Besides your keys, GpgFrontend saves a few things of its own: key server entries, key generation profiles, window positions, and so on. The sensitive parts are encrypted with the program’s own key.

All of this happens automatically. There is nothing to set up and nothing to maintain. This page is here for people who want to know what is going on.

For the key that does the protecting, and the choices you have about it, see Application Secure Key.

How It Works

Each saved item is encrypted on its own, with its own key made from the program’s key and the item’s name. Nothing is encrypted with one shared key, so breaking into one item tells an attacker nothing about the others.

The encryption also detects tampering. If someone changes a file, GpgFrontend notices and refuses to use it.

Files are written in a way that cannot leave a half-finished result behind. If the program or the computer stops in the middle of a write, the old version survives intact.

Where the Files Are

The files live inside your profile, in a folder called data_objs. Each file is named after a scrambled version of what it holds, so the file names give nothing away.

Each Secure Level keeps its data apart from the others. That is why lowering the level makes data saved at a higher one unavailable.

Key Changes

At the Maximum Secure Level, the program’s key is replaced every week. Old files stay readable because each one records which key it was written with, so GpgFrontend can still open them and re-encrypt them with the new key.

You never see this happen.