OpenPGP Class

Properties   Methods   Events   Config Settings   Errors  

The OpenPGP class is used to encrypt/decrypt and sign/verify PGP messages.

Syntax

class ipworksopenpgp.OpenPGP

Remarks

The OpenPGP class supports encrypting/decrypting and signing/verifying OpenPGP messages. Supported message formats are specified by RFC 4880, in addition to RFC 9580, which introduces support for OpenPGP Version 6.

The encrypt, sign, and sign_and_encrypt methods are used to create a message to be sent to your partner. You can additionally create messages bound for multiple recipients with different keys, simultaneously encrypt and compress with the most popular compression algorithms, and control other aspects such as the encrypting algorithm to use.

When a message is received, the decrypt, verify_signature, and decrypt_and_verify_signature methods are used to process the incoming message.

The keys property holds the key (with private key) used to sign and decrypt.

The signer_keys property holds the key used to verify a signature.

The recipient_keys property holds the key used to encrypt.

Input and Output Properties

The class will determine the source and destination of the input and output based on which properties are set.

The order in which the input properties are checked is as follows:

• input_file
• input_message

When a valid source is found the search stops. The order in which the output properties are checked is as follows:

• output_file
• output_message: The output data is written to this property if no other destination is specified.

Property List

The following is the full list of the properties of the class with short descriptions. Click on the links for further details.

Method List

The following is the full list of the methods of the class with short descriptions. Click on the links for further details.

Event List

The following is the full list of the events fired by the class with short descriptions. Click on the links for further details.

Config Settings

The following is a list of config settings for the class with short descriptions. Click on the links for further details.

ascii_armor Property

Specifies whether to use ASCII armor to encode the output message.

Syntax

def get_ascii_armor() -> bool: ...
def set_ascii_armor(value: bool) -> None: ...

ascii_armor = property(get_ascii_armor, set_ascii_armor)

Default Value

FALSE

Remarks

This property controls whether or not ASCII armoring is used on the output message. The default value is False.

auto_select_algorithms Property

Whether to automatically select algorithms when encrypting or signing.

Syntax

def get_auto_select_algorithms() -> int: ...
def set_auto_select_algorithms(value: int) -> None: ...

auto_select_algorithms = property(get_auto_select_algorithms, set_auto_select_algorithms)

Default Value

0

Remarks

This property is set to the binary 'OR' of one or more options indicating which algorithms to automatically select.

When enabled automatic selection is performed by examining the preferred algorithms specified by the key.

When encrypt is called the class will read the preferred encryption algorithm and compression method from the key specified in the RecipientKey* properties.

If multiple keys are specified the preferred encryption algorithm and compression method from the last key is used. The encrypting_algorithm and compression_method properties are ignored.

When sign is called the class will read the preferred MAC algorithm and compression method from the private key specified in the Key* properties. If multiple keys are specified the preferred MAC algorithm and compression method from the last key is used. The signing_algorithm and compression_method properties are ignored.

The list below defines available options.

The default value is 0 which means algorithms are not automatically selected.

clear_signature Property

Specifies whether or not to create a cleartext signature.

Syntax

def get_clear_signature() -> bool: ...
def set_clear_signature(value: bool) -> None: ...

clear_signature = property(get_clear_signature, set_clear_signature)

Default Value

FALSE

Remarks

This property controls whether or not a cleartext signature is created during signing. The default value is False. When set to true a clear text signature will be created when sign is called.

compression_method Property

The compression algorithm used.

Syntax

def get_compression_method() -> str: ...
def set_compression_method(value: str) -> None: ...

compression_method = property(get_compression_method, set_compression_method)

Default Value

"zip"

Remarks

This property specifies which compression method is used when generating output. Possible values are:

• zip (default)
• zlib
• bzip2
• none or uncompressed

detached_signature Property

Specifies whether or not to generate a detached signature when signing a message.

Syntax

def get_detached_signature() -> bool: ...
def set_detached_signature(value: bool) -> None: ...

detached_signature = property(get_detached_signature, set_detached_signature)

Default Value

FALSE

Remarks

This property specifies whether or not a detached signature is created when signing a message. The default value is False.

If set to true the output will only be the signature. The data being signed will not be included in the output. If set to true clear_signature will be ignored.

When this property is false (default) the signature is not detached. The output will contain both the signed data and the signature.

encrypting_algorithm Property

The encryption algorithm used when encrypting.

Syntax

def get_encrypting_algorithm() -> str: ...
def set_encrypting_algorithm(value: str) -> None: ...

encrypting_algorithm = property(get_encrypting_algorithm, set_encrypting_algorithm)

Default Value

"AES128"

Remarks

This property specifies the encryption algorithm used when encrypting. Possible values are:

• CAST5
• 3DES or TripleDES
• AES256
• AES192
• AES128 (default)
• BLOWFISH
• TWOFISH
• IDEA
• AES256-OCB (AEAD)
• AES192-OCB (AEAD)
• AES128-OCB (AEAD)
• AES256-GCM (AEAD)
• AES192-GCM (AEAD)
• AES128-GCM (AEAD)

Note that if UseArgon2 is enabled, and SymmetricPassphrase is specified, an AEAD encryption algorithm (AES*-OCB and AES*-GCM) must be specified for symmetric encryption. If UseArgon2 is disabled, and an AEAD encryption algorithm is specified, the AEAD mode (OCB or GCM) will be ignored when performing symmetric encryption.

An AEAD encryption algorithm may optionally be utilized when encrypting messages (when calling encrypt). In this case, the AEADChunkSizeExp configuration will specify the chunk size for splitting plaintext for encryption. Please see AEADChunkSizeExp for additional details.

input_file Property

The file to process.

Syntax

def get_input_file() -> str: ...
def set_input_file(value: str) -> None: ...

input_file = property(get_input_file, set_input_file)

Default Value

""

Remarks

This property specifies the file to be processed. Set this property to the full or relative path to the file which will be processed.

Input and Output Properties

The class will determine the source and destination of the input and output based on which properties are set.

The order in which the input properties are checked is as follows:

• input_file
• input_message

When a valid source is found the search stops. The order in which the output properties are checked is as follows:

• output_file
• output_message: The output data is written to this property if no other destination is specified.

input_message Property

The message to process.

Syntax

def get_input_message() -> bytes: ...
def set_input_message(value: bytes) -> None: ...

input_message = property(get_input_message, set_input_message)

Default Value

""

Remarks

This property specifies the message to be processed. Set this property to the OpenPGP message content.

Input and Output Properties

The class will determine the source and destination of the input and output based on which properties are set.

The order in which the input properties are checked is as follows:

• input_file
• input_message

When a valid source is found the search stops. The order in which the output properties are checked is as follows:

• output_file
• output_message: The output data is written to this property if no other destination is specified.

key_count Property

The number of records in the Key arrays.

Syntax

def get_key_count() -> int: ...
def set_key_count(value: int) -> None: ...

key_count = property(get_key_count, set_key_count)

Default Value

0

Remarks

This property controls the size of the following arrays:

• key_encoded
• key_keyring
• key_passphrase
• key_user_id

The array indices start at 0 and end at key_count - 1.

key_encoded Property

The key.

Syntax

def get_key_encoded(key_index: int) -> bytes: ...
def set_key_encoded(key_index: int, value: bytes) -> None: ...

Default Value

""

Remarks

The key. This property can be used to assign a specific key. The key_fingerprint, key_id, and key_user_id properties may also be used to specify a key.

The key_index parameter specifies the index of the item in the array. The size of the array is controlled by the key_count property.

key_keyring Property

The location of the keyring.

Syntax

def get_key_keyring(key_index: int) -> str: ...
def set_key_keyring(key_index: int, value: str) -> None: ...

Default Value

""

Remarks

The location of the keyring.

If the keyring is stored in a directory, set this property to the directory. The directory must contain the files "secring.gpg" and "pubring.gpg". A keyring may also be stored in a single file. If the keyring is a file this property should be set to the path of the file.

When This property is set the class will read the keyring and populate the key property with the first key found in the keyring. Set key_user_id to select a different key in the current keyring.

The key_index parameter specifies the index of the item in the array. The size of the array is controlled by the key_count property.

key_passphrase Property

The passphrase for the key's secret key (if any).

Syntax

def get_key_passphrase(key_index: int) -> str: ...
def set_key_passphrase(key_index: int, value: str) -> None: ...

Default Value

""

Remarks

The passphrase for the key's secret key (if any). This must be specified before operations requiring the secret key are attempted. The passphrase may be supplied in this property or through the on_key_passphrase event, which will fire when a passphrase is required.

The passphrase is required when using the following methods in KeyMgr:

• add_user_id
• sign_user_id
• change_expiration_date
• change_passphrase

When using the OpenPGP class, or an email-based class, the following methods require a passphrase for the key:

• decrypt
• sign
• sign_and_encrypt

The key_index parameter specifies the index of the item in the array. The size of the array is controlled by the key_count property.

key_user_id Property

The user Id of the key.

Syntax

def get_key_user_id(key_index: int) -> str: ...
def set_key_user_id(key_index: int, value: str) -> None: ...

Default Value

""

Remarks

The user Id of the key. When a key is loaded this property is populated with the user Id associated with the key. This property may be set to load a key from the keyring. When this property is set the class will search the keyring for a key associated with the UserId specified.

When loading a key with multiple user Ids, this property will be populated with the UserId that was most recently added to the key. To discover all of the UserIds associated with a key query this property and key_other_user_ids after loading the key.

The UserId format is:

FirstName LastName (Comment) <Email>

Note that for OpenPGP v6, a key may be created with or without a UserId, as the field is optional. If a key was created without a UserId, the key's Fingerprint can be used as it's identifier instead.

When using this property to select a key you may also specify the key's Id, or any of its subkeys' Ids, instead of a user Id. The class will then search for a key with a matching Id. This is helpful in situations where you do not have the UserId but still need to load the key, such as within the OpenPGP class's on_recipient_info event.

The key_index parameter specifies the index of the item in the array. The size of the array is controlled by the key_count property.

message_header_count Property

The number of records in the MessageHeader arrays.

Syntax

def get_message_header_count() -> int: ...
def set_message_header_count(value: int) -> None: ...

message_header_count = property(get_message_header_count, set_message_header_count)

Default Value

0

Remarks

This property controls the size of the following arrays:

• message_header_field
• message_header_value

The array indices start at 0 and end at message_header_count - 1.

message_header_field Property

This property contains the name of the HTTP header (this is the same case as it is delivered).

Syntax

def get_message_header_field(message_header_index: int) -> str: ...
def set_message_header_field(message_header_index: int, value: str) -> None: ...

Default Value

""

Remarks

This property contains the name of the HTTP Header (this is the same case as it is delivered).

The message_header_index parameter specifies the index of the item in the array. The size of the array is controlled by the message_header_count property.

message_header_value Property

This property contains the header contents.

Syntax

def get_message_header_value(message_header_index: int) -> str: ...
def set_message_header_value(message_header_index: int, value: str) -> None: ...

Default Value

""

Remarks

This property contains the Header contents.

The message_header_index parameter specifies the index of the item in the array. The size of the array is controlled by the message_header_count property.

output_file Property

The output file.

Syntax

def get_output_file() -> str: ...
def set_output_file(value: str) -> None: ...

output_file = property(get_output_file, set_output_file)

Default Value

""

Remarks

This property specifies the file to which the output will be written. This may be set to an absolute or relative path.

Input and Output Properties

The class will determine the source and destination of the input and output based on which properties are set.

The order in which the input properties are checked is as follows:

• input_file
• input_message

When a valid source is found the search stops. The order in which the output properties are checked is as follows:

• output_file
• output_message: The output data is written to this property if no other destination is specified.

output_message Property

The output message after processing.

Syntax

def get_output_message() -> bytes: ...
def set_output_message(value: bytes) -> None: ...

output_message = property(get_output_message, set_output_message)

Default Value

""

Remarks

This property will be populated with the output from the operation if output_file is not set.

Input and Output Properties

The class will determine the source and destination of the input and output based on which properties are set.

The order in which the input properties are checked is as follows:

• input_file
• input_message

When a valid source is found the search stops. The order in which the output properties are checked is as follows:

• output_file
• output_message: The output data is written to this property if no other destination is specified.

overwrite Property

Indicates whether or not the class should overwrite files.

Syntax

def get_overwrite() -> bool: ...
def set_overwrite(value: bool) -> None: ...

overwrite = property(get_overwrite, set_overwrite)

Default Value

FALSE

Remarks

This property indicates whether or not the class will overwrite output_file. If overwrite is False, an error will be thrown whenever output_file exists before an operation. The default value is False.

recipient_key_count Property

The number of records in the RecipientKey arrays.

Syntax

def get_recipient_key_count() -> int: ...
def set_recipient_key_count(value: int) -> None: ...

recipient_key_count = property(get_recipient_key_count, set_recipient_key_count)

Default Value

0

Remarks

This property controls the size of the following arrays:

• recipient_key_encoded
• recipient_key_keyring
• recipient_key_user_id

The array indices start at 0 and end at recipient_key_count - 1.

recipient_key_encoded Property

The key.

Syntax

def get_recipient_key_encoded(recipient_key_index: int) -> bytes: ...
def set_recipient_key_encoded(recipient_key_index: int, value: bytes) -> None: ...

Default Value

""

Remarks

The key. This property can be used to assign a specific key. The recipient_key_fingerprint, recipient_key_id, and recipient_key_user_id properties may also be used to specify a key.

The recipient_key_index parameter specifies the index of the item in the array. The size of the array is controlled by the recipient_key_count property.

recipient_key_keyring Property

The location of the keyring.

Syntax

def get_recipient_key_keyring(recipient_key_index: int) -> str: ...
def set_recipient_key_keyring(recipient_key_index: int, value: str) -> None: ...

Default Value

""

Remarks

The location of the keyring.

If the keyring is stored in a directory, set this property to the directory. The directory must contain the files "secring.gpg" and "pubring.gpg". A keyring may also be stored in a single file. If the keyring is a file this property should be set to the path of the file.

When This property is set the class will read the keyring and populate the key property with the first key found in the keyring. Set key_user_id to select a different key in the current keyring.

The recipient_key_index parameter specifies the index of the item in the array. The size of the array is controlled by the recipient_key_count property.

recipient_key_user_id Property

The user Id of the key.

Syntax

def get_recipient_key_user_id(recipient_key_index: int) -> str: ...
def set_recipient_key_user_id(recipient_key_index: int, value: str) -> None: ...

Default Value

""

Remarks

The user Id of the key. When a key is loaded this property is populated with the user Id associated with the key. This property may be set to load a key from the keyring. When this property is set the class will search the keyring for a key associated with the UserId specified.

When loading a key with multiple user Ids, this property will be populated with the UserId that was most recently added to the key. To discover all of the UserIds associated with a key query this property and key_other_user_ids after loading the key.

The UserId format is:

FirstName LastName (Comment) <Email>

Note that for OpenPGP v6, a key may be created with or without a UserId, as the field is optional. If a key was created without a UserId, the key's Fingerprint can be used as it's identifier instead.

When using this property to select a key you may also specify the key's Id, or any of its subkeys' Ids, instead of a user Id. The class will then search for a key with a matching Id. This is helpful in situations where you do not have the UserId but still need to load the key, such as within the OpenPGP class's on_recipient_info event.

The recipient_key_index parameter specifies the index of the item in the array. The size of the array is controlled by the recipient_key_count property.

signer_key_count Property

The number of records in the SignerKey arrays.

Syntax

def get_signer_key_count() -> int: ...
def set_signer_key_count(value: int) -> None: ...

signer_key_count = property(get_signer_key_count, set_signer_key_count)

Default Value

0

Remarks

This property controls the size of the following arrays:

• signer_key_encoded
• signer_key_keyring
• signer_key_user_id

The array indices start at 0 and end at signer_key_count - 1.

signer_key_encoded Property

The key.

Syntax

def get_signer_key_encoded(signer_key_index: int) -> bytes: ...
def set_signer_key_encoded(signer_key_index: int, value: bytes) -> None: ...

Default Value

""

Remarks

The key. This property can be used to assign a specific key. The signer_key_fingerprint, signer_key_id, and signer_key_user_id properties may also be used to specify a key.

The signer_key_index parameter specifies the index of the item in the array. The size of the array is controlled by the signer_key_count property.

signer_key_keyring Property

The location of the keyring.

Syntax

def get_signer_key_keyring(signer_key_index: int) -> str: ...
def set_signer_key_keyring(signer_key_index: int, value: str) -> None: ...

Default Value

""

Remarks

The location of the keyring.

If the keyring is stored in a directory, set this property to the directory. The directory must contain the files "secring.gpg" and "pubring.gpg". A keyring may also be stored in a single file. If the keyring is a file this property should be set to the path of the file.

When This property is set the class will read the keyring and populate the key property with the first key found in the keyring. Set key_user_id to select a different key in the current keyring.

The signer_key_index parameter specifies the index of the item in the array. The size of the array is controlled by the signer_key_count property.

signer_key_user_id Property

The user Id of the key.

Syntax

def get_signer_key_user_id(signer_key_index: int) -> str: ...
def set_signer_key_user_id(signer_key_index: int, value: str) -> None: ...

Default Value

""

Remarks

The user Id of the key. When a key is loaded this property is populated with the user Id associated with the key. This property may be set to load a key from the keyring. When this property is set the class will search the keyring for a key associated with the UserId specified.

When loading a key with multiple user Ids, this property will be populated with the UserId that was most recently added to the key. To discover all of the UserIds associated with a key query this property and key_other_user_ids after loading the key.

The UserId format is:

FirstName LastName (Comment) <Email>

Note that for OpenPGP v6, a key may be created with or without a UserId, as the field is optional. If a key was created without a UserId, the key's Fingerprint can be used as it's identifier instead.

When using this property to select a key you may also specify the key's Id, or any of its subkeys' Ids, instead of a user Id. The class will then search for a key with a matching Id. This is helpful in situations where you do not have the UserId but still need to load the key, such as within the OpenPGP class's on_recipient_info event.

The signer_key_index parameter specifies the index of the item in the array. The size of the array is controlled by the signer_key_count property.

signing_algorithm Property

The signature hash algorithm used when signing.

Syntax

def get_signing_algorithm() -> str: ...
def set_signing_algorithm(value: str) -> None: ...

signing_algorithm = property(get_signing_algorithm, set_signing_algorithm)

Default Value

"SHA256"

Remarks

This property specifies the signature hash algorithm used when signing. Possible values are:

• SHA1
• MD5
• SHA256 (default)
• SHA384
• SHA512
• SHA224
• RIPEMD160
• SHA3-256
• SHA3-512

config Method

Sets or retrieves a configuration setting.

Syntax

def config(configuration_string: str) -> str: ...

Remarks

config is a generic method available in every class. It is used to set and retrieve configuration settings for the class.

These settings are similar in functionality to properties, but they are rarely used. In order to avoid "polluting" the property namespace of the class, access to these internal properties is provided through the config method.

To set a configuration setting named PROPERTY, you must call Config("PROPERTY=VALUE"), where VALUE is the value of the setting expressed as a string. For boolean values, use the strings "True", "False", "0", "1", "Yes", or "No" (case does not matter).

To read (query) the value of a configuration setting, you must call Config("PROPERTY"). The value will be returned as a string.

decrypt Method

Decrypts the message.

Syntax

def decrypt() -> None: ...

Remarks

This method decrypts the specified message.

The message will be decrypted using the keys specified in keys. Before decryption begins the class will fire the on_recipient_info event with information about the encrypted message, including the key used to encrypt the message. Within this event you may use the available information to load the correct key into keys.

decrypt_and_verify_signature Method

Decrypts and verifies the signature of the message.

Syntax

def decrypt_and_verify_signature() -> None: ...

Remarks

This method attempts to both decrypt and verify the signature of the message. All of the properties affected by calling the decrypt and verify_signature methods are affected in the same manner.

This method may be used when the data is signed, encrypted, or signed and encrypted. For instance, if the data is encrypted but not signed you may still use this method and the class will perform the decryption without error.

The message will be decrypted using the keys specified in keys. Before decryption begins the class will fire the on_recipient_info event with information about the encrypted message, including the key used to encrypt the message. Within this event you may use the available information to load the correct key into keys.

The message will be verified using the keys specified in signer_keys. Before verification begins the class will fire the on_signature_info event with information about the signature including the key used to sign the message. Within this event you may use the information available to load the correct key into signer_keys.

By default, if the signature is not valid the class fails with an error. The configuration setting RequireValidSignature may be set to False to disable this requirement. When RequireValidSignature is set to False, the Status parameter of the on_verification_status event should be checked to determine the result of the operation.

NOTE: This method does not attempt to check the validity of the signing key itself.

encrypt Method

Encrypts the message.

Syntax

def encrypt() -> None: ...

Remarks

This method encrypts the specified message.

The message is encrypted with the public keys specified in recipient_keys.

When encrypting, the following properties may be used to further configure the class:

• ascii_armor
• compression_method
• encrypting_algorithm

get_recipient_info Method

Gets recipient information for an encrypted message.

Syntax

def get_recipient_info() -> None: ...

Remarks

This method will fire a on_recipient_info event for every recipient key for which the message has been encrypted. The event will provide the KeyId and Fingerprint, which can be used to identify the correct key to be used for decryption.

interrupt Method

Interrupt the current method.

Syntax

def interrupt() -> None: ...

Remarks

If there is no method in progress, interrupt simply returns, doing nothing.

reset Method

Resets the class properties.

Syntax

def reset() -> None: ...

Remarks

This method resets all message and key properties to their default values.

sign Method

Signs the message.

Syntax

def sign() -> None: ...

Remarks

This method signs the specified message.

The message is signed with the private key specified in the Key* properties.

When signing, the following properties may be used to further configure the class:

• ascii_armor
• clear_signature
• detached_signature
• signing_algorithm

sign_and_encrypt Method

Signs and encrypts the current message.

Syntax

def sign_and_encrypt() -> None: ...

Remarks

This method signs and encrypts the specified message.

The message is encrypted with the public keys specified in recipient_keys and signed with the private key specified in keys.

When encrypting, the following properties may be used to further configure the class:

• ascii_armor
• compression_method
• encrypting_algorithm

When signing, the following properties may be used to further configure the class:

• ascii_armor
• clear_signature
• detached_signature
• signing_algorithm

verify_signature Method

Verifies the signature of the current message.

Syntax

def verify_signature() -> None: ...

Remarks

This method verifies the signature of the message.

The message will be verified using the keys specified in signer_keys. Before verification begins the class will fire the on_signature_info event with information about the signature including the key used to sign the message. Within this event you may use the information available to load the correct key into signer_keys.

By default, if the signature is not valid the class fails with an error. The configuration setting RequireValidSignature may be set to False to disable this requirement. When RequireValidSignature is set to False, the Status parameter of the on_verification_status event should be checked to determine the result of the operation.

on_error Event

Fired when information is available about errors during data delivery.

Syntax

class OpenPGPErrorEventParams(object):
  @property
  def error_code() -> int: ...

  @property
  def description() -> str: ...

# In class OpenPGP:
@property
def on_error() -> Callable[[OpenPGPErrorEventParams], None]: ...
@on_error.setter
def on_error(event_hook: Callable[[OpenPGPErrorEventParams], None]) -> None: ...

Remarks

The on_error event is fired in case of exceptional conditions during message processing. Normally the class fails with an error.

The ErrorCode parameter contains an error code, and the Description parameter contains a textual description of the error. For a list of valid error codes and their descriptions, please refer to the Error Codes section.

on_key_passphrase Event

Fired if the passphrase of current key is incorrect or empty.

Syntax

class OpenPGPKeyPassphraseEventParams(object):
  @property
  def user_id() -> str: ...

  @property
  def key_id() -> str: ...

  @property
  def fingerprint() -> str: ...

  @property
  def passphrase() -> str: ...
  @passphrase.setter
  def passphrase(value) -> None: ...

# In class OpenPGP:
@property
def on_key_passphrase() -> Callable[[OpenPGPKeyPassphraseEventParams], None]: ...
@on_key_passphrase.setter
def on_key_passphrase(event_hook: Callable[[OpenPGPKeyPassphraseEventParams], None]) -> None: ...

Remarks

This event fires when the passphrase for the key is required. The passphrase must be specified before operations requiring the secret key are attempted. The passphrase may be supplied by setting the Passphrase parameter in this event, or by specifying the key_passphrase property before attempting the operation.

The passphrase is required when using the following methods in KeyMgr:

• add_user_id
• sign_user_id
• change_expiration_date
• change_passphrase

When using the OpenPGP class, or an email-based class, the following methods require a passphrase for the key:

• decrypt
• sign
• sign_and_encrypt

UserId holds the user Id of the key the passphrase is required for.

The UserId format is:

FirstName LastName (Comment) <Email>

Note that for OpenPGP v6, a key may be created with or without a UserId, as the field is optional. If a key was created without a UserId, the key's Fingerprint can be used as it's identifier instead.

KeyId is the hex-encoded, 4-byte or 8-byte Id of the key the passphrase is required for. For OpenPGP v4 keys and earlier, the key Id corresponds to the last 4 or 8 bytes of the key's Fingerprint. For OpenPGP v6 keys, the key Id corresponds to the first 8 bytes of the key's Fingerprint instead. For instance:

5E70662EA810E768

Fingerprint holds the hex-encoded, 20-byte fingerprint of the key the passphrase is required for. This is in the form:

5E70662EA810E768391A2FE8F7B7D49C89C9D7B1

on_progress Event

Fired as progress is made.

Syntax

class OpenPGPProgressEventParams(object):
  @property
  def bytes_processed() -> int: ...

  @property
  def percent_processed() -> int: ...

  @property
  def operation() -> int: ...

  @property
  def is_eof() -> bool: ...
  @is_eof.setter
  def is_eof(value) -> None: ...

# In class OpenPGP:
@property
def on_progress() -> Callable[[OpenPGPProgressEventParams], None]: ...
@on_progress.setter
def on_progress(event_hook: Callable[[OpenPGPProgressEventParams], None]) -> None: ...

Remarks

This event is fired automatically as data is processed by the class.

The PercentProcessed parameter indicates the current status of the operation.

The BytesProcessed parameter holds the total number of bytes processed so far.

The Operation parameter is only applicable when either ReadFromProgressEvent or WriteToProgressEvent is set to True. This parameter defines whether a Read or Write operation is required. If the configuration settings are not set this parameter will always return 0. Possible values are:

The IsEOF parameter is only applicable when either ReadFromProgressEvent or WriteToProgressEvent is set to True. This parameter defines whether the Read or Write operation is complete. When the Operation is Read (1) this parameter must be set to indicate that all data has been supplied to the class. When the Operation is Write (2) this value may be queried to determine when all data has been processed.

on_recipient_info Event

Fired for each recipient key of the encrypted message.

Syntax

class OpenPGPRecipientInfoEventParams(object):
  @property
  def key_id() -> str: ...

  @property
  def fingerprint() -> str: ...

  @property
  def public_key_algorithm() -> str: ...

# In class OpenPGP:
@property
def on_recipient_info() -> Callable[[OpenPGPRecipientInfoEventParams], None]: ...
@on_recipient_info.setter
def on_recipient_info(event_hook: Callable[[OpenPGPRecipientInfoEventParams], None]) -> None: ...

Remarks

This event fires when the decrypt or decrypt_and_verify_signature method is called.

KeyId is the hex-encoded 4- or 8-byte Id of the key used to encrypt the message. If a subkey was used to encrypt the message this will be the Id of that subkey. For OpenPGP v4 keys and earlier, the key Id corresponds to the last 4 or 8 bytes of the key's Fingerprint. For OpenPGP v6 keys, the key Id corresponds to the first 8 bytes of the key's Fingerprint instead. For instance:

5E70662EA810E768

Fingerprint holds the hex-encoded, 20-byte fingerprint of the key. This is in the form:

5E70662EA810E768391A2FE8F7B7D49C89C9D7B1

The KeyId and Fingerprint parameters can be used to identify the correct key to specify in the Key* properties. The Key* properties can be set from within this event as this event fires directly before the decryption process begins.

It is recommended to use the Fingerprint to identify the correct key, as it is possible for different keys to have the same KeyId.

PublicKeyAlgorithm is the algorithm of the public key used to encrypt the message. Possible values are:

• RSA
• DSA
• ECDSA
• EdDSA
• Ed25519
• Ed448
• RSA-Legacy
• ECDH (Subkeys only)
• X25519 (Subkeys only)
• X448 (Subkeys only)

on_signature_info Event

Fired during verification of the signed message.

Syntax

class OpenPGPSignatureInfoEventParams(object):
  @property
  def key_id() -> str: ...

  @property
  def fingerprint() -> str: ...

  @property
  def signing_algorithm() -> str: ...

  @property
  def public_key_algorithm() -> str: ...

# In class OpenPGP:
@property
def on_signature_info() -> Callable[[OpenPGPSignatureInfoEventParams], None]: ...
@on_signature_info.setter
def on_signature_info(event_hook: Callable[[OpenPGPSignatureInfoEventParams], None]) -> None: ...

Remarks

This event fires when the verify_signature or decrypt_and_verify_signature method is called. It provides information about the signature of the message.

KeyId is the hex-encoded 4- or 8-byte Id of the key used to sign the message. If a subkey was used to sign the message this will be the Id of that subkey. For OpenPGP v4 keys and earlier, the key Id corresponds to the last 4 or 8 bytes of the key's Fingerprint. For OpenPGP v6 keys, the key Id corresponds to the first 8 bytes of the key's Fingerprint instead. For instance:

5E70662EA810E768

Fingerprint holds the hex-encoded, 20-byte fingerprint of the key. This is in the form:

5E70662EA810E768391A2FE8F7B7D49C89C9D7B1

The KeyId and Fingerprint parameters can be used to identify the correct key to specify in the SignerKey* properties. The SignerKey* properties can be set from within this event as this event fires directly before the verification process begins.

It is recommended to use the Fingerprint to identify the correct key, as it is possible for different keys to have the same KeyId.

SigningAlgorithm describes the hash algorithm used when the message was originally signed. This value is applicable only to the message signature, not the key used to sign the message. Possible values are:

• SHA1
• MD5
• SHA256
• SHA384
• SHA512
• SHA224
• RIPEMD160
• SHA3-256
• SHA3-512

PublicKeyAlgorithm is the algorithm of the public key used to sign the message. Possible values are:

• RSA
• DSA
• ECDSA
• EdDSA
• Ed25519
• Ed448
• RSA-Legacy
• ECDH (Subkeys only)
• X25519 (Subkeys only)
• X448 (Subkeys only)

on_status Event

Shows the progress of the operation.

Syntax

class OpenPGPStatusEventParams(object):
  @property
  def message() -> str: ...

# In class OpenPGP:
@property
def on_status() -> Callable[[OpenPGPStatusEventParams], None]: ...
@on_status.setter
def on_status(event_hook: Callable[[OpenPGPStatusEventParams], None]) -> None: ...

Remarks

The event is fired for informational and logging purposes only. It may be used to track the progress of an operation.

The level of detail is controlled by the LogLevel setting.

on_verification_status Event

Fired after verification of the signed message.

Syntax

class OpenPGPVerificationStatusEventParams(object):
  @property
  def key_id() -> str: ...

  @property
  def fingerprint() -> str: ...

  @property
  def status() -> int: ...

# In class OpenPGP:
@property
def on_verification_status() -> Callable[[OpenPGPVerificationStatusEventParams], None]: ...
@on_verification_status.setter
def on_verification_status(event_hook: Callable[[OpenPGPVerificationStatusEventParams], None]) -> None: ...

Remarks

This event fires when verify_signature or decrypt_and_verify_signature is called. It provides information about the result.

KeyId is the hex-encoded 4- or 8-byte Id of the key used to sign the message. For OpenPGP v4 keys and earlier, the key Id corresponds to the last 4 or 8 bytes of the key's Fingerprint. For OpenPGP v6 keys, the key Id corresponds to the first 8 bytes of the key's Fingerprint instead. For instance:

5E70662EA810E768

Fingerprint holds the hex-encoded, 20-byte fingerprint of the key. This is in the form:

5E70662EA810E768391A2FE8F7B7D49C89C9D7B1

Status holds the result of the operation. Possible values are:

OpenPGP Config Settings

OpenPGP Config Settings

89011C04000102000605025100459B000A0910E2...

5E70662EA810E768

Base Config Settings

OpenPGP Errors

OpenPGP Errors