2020.9.6 安全加密作业（一）

1、在 CentOS7 中使用 gpg 创建 RSA非对称密钥对

[root@centos7 ~]#gpg --gen-key
gpg (GnuPG) 2.0.22; Copyright (C) 2013 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
​
Please select what kind of key you want:
   (1) RSA and RSA (default)
   (2) DSA and Elgamal
   (3) DSA (sign only)
   (4) RSA (sign only)
Your selection? 1
RSA keys may be between 1024 and 4096 bits long.
What keysize do you want? (2048) 
Requested keysize is 2048 bits
Please specify how long the key should be valid.
         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0) 
Key does not expire at all
Is this correct? (y/N) 
Key is valid for? (0) 
Key does not expire at all
Is this correct? (y/N) y
​
GnuPG needs to construct a user ID to identify your key.
​
Real name: lllll
Email address: 
Comment: 
You selected this USER-ID:
    "lllll"
​
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? o
You need a Passphrase to protect your secret key.
​
We need to generate a lot of random bytes. It is a good idea to perform
     some other action (type on the keyboard, move the mouse, utilize the
       disks) during the prime generation; this gives the random number
     generator a better chance to gain enough entropy.
                                                      We need to generate a lot of random bytes. It is a good idea to perform
                                                           some other action (type on the keyboard, move the mouse, utilize the
                                                             disks) during the prime generation; this gives the random number
                                                           generator a better chance to gain enough entropy.
                                          gpg: key C620FD99 marked as ultimately trusted
                      public and secret key created and signed.
                      
[root@centos7 ~]#gpg --list-key
/root/.gnupg/pubring.gpg
------------------------
pub   2048R/C620FD99 2020-09-06
uid                  lllll[root@centos7 ~]#gpg --list-key
/root/.gnupg/pubring.gpg
------------------------
pub   2048R/C620FD99 2020-09-06
uid                  lllll
sub   2048R/5266C343 2020-09-06
sub   2048R/5266C343 2020-09-06

2、将 CentOS7 导出的公钥，拷贝到 CentOS8 中，在 CentOS8 中使用 CentOS7 的公钥加密一个文件

[root@localhost ~]#gpg