Jump to content
Main menu
Main menu
move to sidebar
hide
Navigation
Home
Quick Start
Recent changes
Contributors
Start Contributing
Modify Existing Pages
Add New Pages
Page Elements Explained
Display elements markup
More Markup Help
Translators
Get a Translator Account
Languages represented
Working with Languages
Start Translating
Request Release
Search
Search
English
Log in
Personal tools
Log in
Export translations
Translate
English
Language statistics
Message group statistics
Export
Tools
Tools
move to sidebar
hide
Actions
Language statistics
Message group statistics
Export
General
Special pages
Printable version
Settings
Group
Accessibility
Accessibility/Application Overview
Accessibility/Plasma
Adding an entry to the Create New menu
Akonadi
Akonadi and AddressBook
Akonadi/Postgres update
Akregator
Akregator/Tutorials/How to get RSS from a Wordpress blog?
Amarok
Amarok Manual
Amarok/Manual
Amarok/Manual/AmarokWindow
Amarok/Manual/AmarokWindow/ContextPane
Amarok/Manual/AmarokWindow/MediaSources
Amarok/Manual/AmarokWindow/PlaylistPane
Amarok/Manual/AmarokWindow/Toolbar
Amarok/Manual/ConfiguringAmarok
Amarok/Manual/ConfiguringAmarok/ChangingLayout
Amarok/Manual/Introduction
Amarok/Manual/Organization
Amarok/Manual/Organization/Applets
Amarok/Manual/Organization/Collection
Amarok/Manual/Organization/Collection/ExternalDatabase
Amarok/Manual/Organization/Collection/OrganizeCollection
Amarok/Manual/Organization/Collection/RemoteCollections
Amarok/Manual/Organization/Collection/RemoteCollections/Ampache
Amarok/Manual/Organization/Collection/RemoteCollections/DAAP
Amarok/Manual/Organization/Collection/RemoteCollections/Samba
Amarok/Manual/Organization/Collection/RemoteCollections/UPnP
Amarok/Manual/Organization/Collection/SearchInCollection
Amarok/Manual/Organization/Collection/StatisticsSynchronization
Amarok/Manual/Organization/Collection/WorkingWithMediaDevices
Amarok/Manual/Organization/CollectionScanning
Amarok/Manual/Organization/CoverManager
Amarok/Manual/Organization/ScriptManager
Amarok/Manual/Organization/TagEditor
Amarok/Manual/Organization/Transcoding
Amarok/Manual/Playlist
Amarok/Manual/Playlist/AutomaticPlaylistGenerator
Amarok/Manual/Playlist/DynamicPlaylists
Amarok/Manual/Playlist/PlaylistFiltering
Amarok/Manual/Playlist/QueueManager
Amarok/Manual/Playlist/SavedPlaylists
Amarok/Manual/References
Amarok/Manual/References/Credits and License
Amarok/Manual/References/KeybindingReference
Amarok/Manual/References/KeybindingReference/AmarokShortcuts
Amarok/Manual/References/KeybindingReference/GlobalShortcuts
Amarok/Manual/References/MenuAndCommandReference
Amarok/Manual/References/MenuAndCommandReference/AmarokMenu
Amarok/Manual/References/MenuAndCommandReference/Help
Amarok/Manual/References/MenuAndCommandReference/Playlist
Amarok/Manual/References/MenuAndCommandReference/Settings
Amarok/Manual/References/MenuAndCommandReference/Tools
Amarok/Manual/References/MenuAndCommandReference/ViewMenu
Amarok/Manual/Various
Amarok/Manual/Various/AmarokOnOtherPlatforms
Amarok/Manual/Various/AmarokOnOtherPlatforms/NonKDE Desktops
Amarok/Manual/Various/AmarokOnOtherPlatforms/OSX
Amarok/Manual/Various/AmarokOnOtherPlatforms/Windows
Amarok/Manual/Various/FAQ
Amarok/Manual/Various/Moodbar
Amarok/Manual/Various/ReplayGain
Amarok/Manual/Various/TroubleshootingAndCommonProblems
Amarok/QuickStartGuide
Amarok/QuickStartGuide/GettingStarted
Amarok/QuickStartGuide/Glossary
Amarok/QuickStartGuide/HowToDealWithProblems
Amarok/QuickStartGuide/Playlists
Amarok/QuickStartGuide/TheAmarokWindow
Amarok/QuickStartGuide/TheContextView
Amarok/QuickStartGuide/TheMusicCollection
An introduction to KDE
Apper
Applications
Applications/Accessibility
Applications/Desktop
Applications/Development
Applications/Education
Applications/Games
Applications/Graphics
Applications/Internet
Applications/Multimedia
Applications/Office
Applications/Science
Applications/System
Applications/Utilities
Archive:Artikulate
Archive:Browser Configuration/Firefox Dialog Integration
Archive:Build your first KDE application on Kubuntu
Archive:ChoqoK
Archive:Kde-pim
Archive:Kdenlive/Manual/Capturing
Archive:Kdenlive/Manual/CapturingAudio
Archive:Kdenlive/Manual/Clip Menu
Archive:Kdenlive/Manual/Credits and License
Archive:Kdenlive/Manual/Edit Menu
Archive:Kdenlive/Manual/Edit Menu/Copy
Archive:Kdenlive/Manual/Edit Menu/Paste
Archive:Kdenlive/Manual/Edit Menu/Paste Effects
Archive:Kdenlive/Manual/Edit Menu/Redo
Archive:Kdenlive/Manual/Edit Menu/Undo
Archive:Kdenlive/Manual/Effects/Alpha manipulation
Archive:Kdenlive/Manual/Effects/Alpha manipulation/Alpha operations
Archive:Kdenlive/Manual/Effects/Alpha manipulation/Alpha shapes
Archive:Kdenlive/Manual/Effects/Alpha manipulation/Blue Screen
Archive:Kdenlive/Manual/Effects/Alpha manipulation/Color Selection
Archive:Kdenlive/Manual/Effects/Alpha manipulation/Rotoscoping
Archive:Kdenlive/Manual/Effects/Analysis and Data
Archive:Kdenlive/Manual/Effects/Artistic
Archive:Kdenlive/Manual/Effects/Audio channels
Archive:Kdenlive/Manual/Effects/Audio Correction
Archive:Kdenlive/Manual/Effects/Blur and hide
Archive:Kdenlive/Manual/Effects/Blur and hide/Auto Mask
Archive:Kdenlive/Manual/Effects/Colour Correction
Archive:Kdenlive/Manual/Effects/Colour Correction/RGB adjustment
Archive:Kdenlive/Manual/Effects/Crop and transform
Archive:Kdenlive/Manual/Effects/Crop and transform/Pan and Zoom
Archive:Kdenlive/Manual/Effects/Custom
Archive:Kdenlive/Manual/Effects/Distort
Archive:Kdenlive/Manual/Effects/Enhancement
Archive:Kdenlive/Manual/Effects/Fade
Archive:Kdenlive/Manual/Effects/Fun
Archive:Kdenlive/Manual/Effects/Misc
Archive:Kdenlive/Manual/Effects/Motion
Archive:Kdenlive/Manual/File Menu
Archive:Kdenlive/Manual/File Menu/DVD Wizard
Archive:Kdenlive/Manual/File Menu/New
Archive:Kdenlive/Manual/File Menu/Open
Archive:Kdenlive/Manual/File Menu/Open Recent
Archive:Kdenlive/Manual/File Menu/Quit
Archive:Kdenlive/Manual/File Menu/Revert
Archive:Kdenlive/Manual/File Menu/Save
Archive:Kdenlive/Manual/File Menu/Save As
Archive:Kdenlive/Manual/File Menu/Transcode Clips
Archive:Kdenlive/Manual/Introduction
Archive:Kdenlive/Manual/KdenliveOnOtherPlatforms
Archive:Kdenlive/Manual/KdenliveOnOtherPlatforms/Non-KDE Desktops
Archive:Kdenlive/Manual/KdenliveOnOtherPlatforms/OSX
Archive:Kdenlive/Manual/Menu
Archive:Kdenlive/Manual/Monitor Menu
Archive:Kdenlive/Manual/Monitors
Archive:Kdenlive/Manual/Project Menu
Archive:Kdenlive/Manual/Project Menu/Render
Archive:Kdenlive/Manual/Project Menu/Render/Render Profile Parameters
Archive:Kdenlive/Manual/Projects and Files
Archive:Kdenlive/Manual/Projects and Files/Archiving
Archive:Kdenlive/Manual/Projects and Files/Backup
Archive:Kdenlive/Manual/Projects and Files/Clips
Archive:Kdenlive/Manual/Projects and Files/Importing
Archive:Kdenlive/Manual/Projects and Files/Management
Archive:Kdenlive/Manual/Projects and Files/Notes
Archive:Kdenlive/Manual/Projects and Files/Project
Archive:Kdenlive/Manual/Projects and Files/Project Settings
Archive:Kdenlive/Manual/Projects and Files/Project Tree
Archive:Kdenlive/Manual/Rendering
Archive:Kdenlive/Manual/Settings Menu
Archive:Kdenlive/Manual/ShootingHints
Archive:Kdenlive/Manual/Timeline
Archive:Kdenlive/Manual/Timeline Menu
Archive:Kdenlive/Manual/Timeline/Grouping
Archive:Kdenlive/Manual/Timeline/Guides
Archive:Kdenlive/Manual/Timeline/Right Click Menu
Archive:Kdenlive/Manual/Titles
Archive:Kdenlive/Manual/Tool Menu
Archive:Kdenlive/Manual/Toolbars
Archive:Kdenlive/Manual/Transitions
Archive:Kdenlive/Manual/Troubleshooting and Common Problems
Archive:Kdenlive/Manual/Tutorials
Archive:Kdenlive/Manual/Tutorials/Split Screen How To
Archive:Kdenlive/Manual/Useful Information
Archive:Kdenlive/Manual/Useful Information/FAQ
Archive:Kdenlive/Manual/Useful Information/Shortcuts
Archive:Kdenlive/Manual/Useful Information/Surround Sound
Archive:Kdenlive/Manual/Useful Information/Tips Tricks
Archive:Kdenlive/Manual/Useful Information/Useful Resources
Archive:Kdenlive/Manual/View Menu
Archive:Kdenlive/Manual/Windows Issues
Archive:Kdessh
Archive:KOffice
Archive:KOrganizer/Download
Archive:Obsolete
Ark
Artwork
Asking Questions
Audex
Bangarang
BasKet
BlinKen
Blogilo
Bluedevil
Braindump
Browser Configuration
Browser Configuration/Mousegestures for all Browsers
Browser Configuration/Opera
Calligra
Calligra/Download
Calligra/Handbooks
Cantor
ChoqoK/Using ChoqoK
Color Management
Common Tasks
Concepts/OpenPGP For Beginners
Concepts/OpenPGP Getting Started
Concepts/OpenPGP Help Spread
Configure your desktop
Create a Page
Desktop Effects Performance
Digikam
digiKam
Digikam/Adding Borders To Your Photos
Digikam/AddTextures
Digikam/AspectRatios
Digikam/Assign Keyboard Shortcuts to Tags in digiKam
Digikam/Basic RAW Processing
Digikam/Batch Process
Digikam/Batch Queue Manager and Script
Digikam/Black and White
Digikam/BleachBypassEffect
Digikam/Bugs
Digikam/Calendars
Digikam/Calibrate and Profile Monitor
Digikam/ChangeFormat
Digikam/Check Database
Digikam/Color Labels and Picks
Digikam/Compress
Digikam/Configure the Main Toolbar in digiKam
Digikam/Duplicates
Digikam/Effects
Digikam/Exif
Digikam/Export via DNLA
Digikam/Exposure Blending
Digikam/Face Detection
Digikam/Face Recognition
Digikam/Facebook
Digikam/Faded Effect
Digikam/Geotag Photos with Android
Digikam/Geotagging
Digikam/Geotagging in digiKam 2.0
Digikam/Import Photos in Digikam
Digikam/Lens Correction Using digiKam
Digikam/Lens Distortion
Digikam/Levels Adjust
Digikam/LightTable
Digikam/Local Contrast
Digikam/Maintenance
Digikam/Manage Photos from Multiple digiKam Installations
Digikam/Metadata
Digikam/MetadataToRaw
Digikam/Negatives
Digikam/Noise Reduction
Digikam/Optimise
Digikam/Panorama
Digikam/Performing Fuzzy Searches In digiKam
Digikam/Photoshop Preset Curves
Digikam/Picasa
Digikam/Process RAW Files
Digikam/Quick Tip:Disable Certain File Types
Digikam/RedEye
Digikam/Renaming Photos
Digikam/Sharpening
Digikam/Simple Toning
Digikam/Soft Proofing
Digikam/Straighten
Digikam/TaggingEfficient
Digikam/Tethered Shooting
Digikam/Thumbnails
Digikam/Tour
Digikam/Tutorials
Digikam/Using digiKam with MySQL
Digikam/Using the Advanced Search Tool In digiKam
Digikam/Using XMP Sidecar support in digiKam 2
Digikam/Versioning
Digikam/Vintage Effect
Digikam/Watermark
Digikam/Wikimedia Commons
Digikam/Windows
Discover
Dolphin
Dolphin/Batch Rename
Dolphin/Customize Folder Icon
Dolphin/File Management
Dragon Player
Edit Markup
File transfers
Filelight
Flow
GCompris
General KDE Software FAQs
Getting Help
Getting started with KAlgebra
Glossary
Gluon
Google Talk support
Gwenview
Gwenview/Hidden Configuration Options
Help:Wiki Structure
History of KDE
Homerun
How to chat with other KDE users
How To Convert a UserBase Manual to Docbook
Image Kimdaba
Installing KDE neon
IRC Channels
Jargon File
Jovie
Juk
K3b
K3b/Burn an Audio Cd with K3b
K9Copy
KAddressBook
KAddressBook/index
KAddressBook/Tutorials/How to add a new contact?
KAddressBook/Tutorials/How to create a new address book?
Kaffeine
Kaffeine-TV
KAlarm
KAlgebra
KAlgebra/Console Tab
KAlgebra/Homework
KAlgebra/Probabilities
Kalzium
Kalzium/Other Chemistry-Applications
Kamoso
Kanagram
KAppTemplate
Karbon
Karbon/Tutorials/Artistic Text Shape
Kate
Kbarcode
KBibTeX
KBibTeX/Development
Kbluetooth
KBruch
KCalc
KCells
KCharSelect
KChart
KColorChooser
KColorEdit
KDbg
KDE Connect/Tutorials/Adding commands
KDE Connect/Tutorials/Useful commands
KDE Partition Manager
KDE preinstalled
KDE SVN
KDE System Administration
KDE UserBase Wiki:About
KDE UserBase Wiki:General disclaimer
KDE UserBase Wiki:Privacy policy
KDE Wallet Manager
KDEConnect
Kdenlive
Kdenlive/Manual
Kdenlive/Manual/alpha operation transitions
Kdenlive/Manual/BugReporting
Kdenlive/Manual/Clip Menu/Delete Clip
Kdenlive/Manual/Clip Menu/Edit Clip
Kdenlive/Manual/Clip Menu/Extract Audio
Kdenlive/Manual/Clip Menu/Locate Clip
Kdenlive/Manual/Clip Menu/Rename Clip
Kdenlive/Manual/Clip Menu/Stabilize
Kdenlive/Manual/Edit Menu/Find
Kdenlive/Manual/Effects
Kdenlive/Manual/Effects And Transitions
Kdenlive/Manual/Effects/Audio
Kdenlive/Manual/Full Luma
Kdenlive/Manual/Installation
Kdenlive/Manual/Project Menu/Create Folder
Kdenlive/Manual/Project Menu/Online Resources
Kdenlive/Manual/QuickStart
Kdenlive/Manual/Timeline Menu/Insert Clip Zone
Kdenlive/Manual/Timeline Menu/Tracks
Kdenlive/Manual/Timeline/Editing
Kdenlive/Manual/Titles/Download New Title Templates
Kdenlive/Manual/Transitions/Affine
Kdenlive/Manual/Transitions/alphaxor
Kdenlive/Manual/Transitions/Composite
Kdenlive/Manual/Transitions/Hue
Kdenlive/Manual/Transitions/screen
Kdenlive/Manual/Transitions/Wipe
Kdenlive/Manual/View Menu/Audio Spectrum
Kdenlive/Manual/View Menu/Clip Monitor
Kdenlive/Manual/View Menu/Effect List
Kdenlive/Manual/View Menu/Load Layout
Kdenlive/Manual/View Menu/Save Layout As
Kdenlive/Manual/View Menu/Screen Grab
Kdenlive/Manual/View Menu/Show Title Bars
Kdenlive/Manual/View Menu/Undo History
Kdesvn
KDevelop
KDevelop/Install4.5
KDevelop4
KDevelop4/FAQ
KDevelop4/Manual
KDevelop4/Manual/Appendix A: Building KDevelop from Sources
KDevelop4/Manual/Building (compiling) projects with custom Makefiles
KDevelop4/Manual/Code generation with templates
KDevelop4/Manual/Customizing KDevelop
KDevelop4/Manual/Debugging programs
Kdevelop4/Manual/Meet KDevelop
KDevelop4/Manual/Running programs
KDevelop4/Manual/Sessions and projects
KDevelop4/Manual/Working with source code
KDevelop4/Manual/Working with version control systems
KDevelop4/TipsAndTricks
KDevelop5 Manual
KDevelop5/Manual
KDevelop5/Manual/Appendix A: Building KDevelop from Sources
KDevelop5/Manual/Building (compiling) projects with custom Makefiles
KDevelop5/Manual/Code generation with templates
KDevelop5/Manual/Customizing KDevelop
KDevelop5/Manual/Debugging programs
Kdevelop5/Manual/Meet KDevelop
KDevelop5/Manual/Running programs
KDevelop5/Manual/Sessions and projects
KDevelop5/Manual/Working with source code
KDevelop5/Manual/Working with version control systems
KDiff3
KDirStat
KDiskFree
KEuroCalc
Kexi
Kexi Handbook
Kexi/Handbook
Kexi/Handbook/Appendix B. Comparing Kexi to other database applications
Kexi/Handbook/Building Simple Databases
Kexi/Handbook/Building Simple Databases/Designing Database Queries
Kexi/Handbook/Building Simple Databases/Designing Database Tables
Kexi/Handbook/Building Simple Databases/Designing Database Tables/The Table Designer window
Kexi/Handbook/Building Simple Databases/Designing Forms
Kexi/Handbook/Building Simple Databases/Designing Forms/Actions
Kexi/Handbook/Building Simple Databases/Designing Forms/Assigning data sources
Kexi/Handbook/Building Simple Databases/Designing Forms/Forms versus tables
Kexi/Handbook/Building Simple Databases/Designing Forms/Inserting text labels
Kexi/Handbook/Building Simple Databases/Designing Forms/Inserting widgets - text fields
Kexi/Handbook/Building Simple Databases/Designing Forms/Most important terms
Kexi/Handbook/Building Simple Databases/Designing Forms/Setting the tab order
Kexi/Handbook/Building Simple Databases/Designing Forms/Setting widgets size and position by hand
Kexi/Handbook/Building Simple Databases/Designing Forms/Using the Widgets tab
Kexi/Handbook/Building Simple Databases/Designing Forms/Widget layouts
Kexi/Handbook/Building Simple Databases/Designing Forms/Working with form design
Kexi/Handbook/Building Simple Databases/Entering Data Into Tables
Kexi/Handbook/Building Simple Databases/Entering Data Using Forms
Kexi/Handbook/Configuring Kexi
Kexi/Handbook/Configuring Kexi/Docking and undocking side panels
Kexi/Handbook/Credits and License
Kexi/Handbook/Introduction
Kexi/Handbook/Introduction to Databases/Database and Spreadsheet
Kexi/Handbook/Introduction to Databases/Database Creation Software
Kexi/Handbook/Introduction to Databases/Database Design
Kexi/Handbook/Introduction to Databases/What Is a Database?
Kexi/Handbook/Introduction to Databases/Who Needs a Database?
Kexi/Handbook/Kexi Basics
Kexi/Handbook/Kexi Basics/Creating a New Database File
Kexi/Handbook/Kexi Basics/Kexi Databases
Kexi/Handbook/Kexi Basics/Opening an existing Kexi database file
Kexi/Handbook/Kexi Basics/Opening an existing Kexi database file/Opening a database file in the Open Existing Project dialog
Kexi/Handbook/Kexi Basics/Opening an existing Kexi database file/Opening an existing Kexi database file by clicking on .kexi file's icon
Kexi/Handbook/Kexi Basics/The Kexi Main Window
Kexi/Handbook/Kexi Basics/Using built-in help
Kexi/Handbook/References/Command-Line Options
Kexi/Handbook/Where to go next
Kexi/Tutorials
Kexi/Tutorials/Drilling Down on Facebook Data
Kexi/Tutorials/Importing SQLite database into Kexi
Kexi/Tutorials/Reports/Kexi Reports for Beginners
KFileReplace
KFind
KFloppy
KFormula
KFTPgrabber
KGeography
KGeography/Making Maps
KGet
KGpg
KGraphviewer
KHangMan
KHelpCenter
KIconEdit
Kid3
Kig
Kig/FAQ
Kig/Screenshots
Kile
KImageMapEditor
KInfoCenter
Kio gopher
Kio-audiocd
KIPI
Kiten
Kivio
KJots
KJots/Import KNowIt Into KJots
KJots/Recover Deleted KJots Books
Kleopatra
KLettres
KLinkStatus
Klipper
Klipper/How to search in phone books using Klipper
Klipper/Pastebins
KMag
KMail
KMail/Account Wizard
KMail/Backup Options
Kmail/Configuring Kmail
Kmail/Configuring Kmail/Identities
KMail/Courses Information Openpgp
KMail/Devs
Kmail/Distributions/Gentoo
Kmail/Distributions/OpenSUSE
KMail/FAQs Hints and Tips
Kmail/Folder Properties
Kmail/Getting Started
KMail/gpg
KMail/Import Options
KMail/PGP MIME
KMail/Screenshots
KMail/Tools
Kmail/Using Folders
Kmail/Using Kmail General
KMediaFactory
KMess
KMid
KMix
KMLDonkey
KMouseTool
KMouth
KMPlayer
KmPlot
KmPlot/Using Sliders
KMyMoney
KNemo
KNetworkManager
KNode
KNode/KNode for mailing lists
KNotes
Koko
KolorManager
KolourPaint
Kompare
Konqueror
Konqueror/Web Shortcuts
Konsole
KonsoleDevelopment
KonsoleKalendar
Kontact
Kontact Touch
Kontact Touch/About
Kontact Touch/Harmattan
Kontact Touch/Maemo5
Kontact Touch/MeeGo
Kontact Touch/Screenshots
Kontact Touch/WinCE
Kontact/Kontact Palm Pre Sync
Kontact/SMS
Konversation
Konversation/Browsers
Konversation/Configuring SASL authentication
Konversation/Distributions
Konversation/Distributions/ArchLinux
Konversation/Distributions/ArkLinux
Konversation/Distributions/Chakra
Konversation/Distributions/Exherbo
Konversation/Distributions/Fedora
Konversation/Distributions/Gentoo
Konversation/Distributions/Kubuntu
Konversation/Distributions/Mageia
Konversation/Distributions/openSUSE
Konversation/Distributions/PCLinuxOS
Konversation/Distributions/Slackware
Konversation/Distributions/Xandros
Konversation/FAQ
Konversation/KDE3 Sources
Konversation/KDE4 Sources
Konversation/Releases
Konversation/Scripts/Ghosttrick
Konversation/Scripts/Import mIRC server list
Konversation/Scripts/Media
Konversation/Scripts/Scripting guide
Konversation/Sources
Konversation/Tips and Tricks
Kooka
Kopete
Kopete/AIM
Kopete/Auto Replace
Kopete/Firewall
Kopete/ICQ
Kopete/ICQ/About ICQ
Kopete/ICQ/add friends
Kopete/ICQ/connect through kopete
Kopete/ICQ/creating an account
Kopete/Jabber
Kopete/Jabber Muc
Kopete/Jabber Transport
Kopete/Jabber/About Jabber XMPP
Kopete/Jabber/Adding friends
Kopete/Jabber/Create your Jabber account
Kopete/Jabber/Fill in your account data in Kopete
Kopete/Jabber/First steps
Kopete/Jabber/Messaging and sending files
Kopete/Jabber/More info on Kopete
Kopete/Jabber/Useful configuration hints
Kopete/MSN
Kopete/OTR
Kopete/Skype Plugin
Kopete/Supported Protocols Overview
Kopete/Webcam Support
Kopete/Winpopup
Kopete/Yahoo
KOrganizer
KOrganizer/Alarms
KOrganizer/Appointments
KOrganizer/Calendar
KOrganizer/Custom
KOrganizer/Future
KOrganizer/ImpData
KOrganizer/Links
KOrganizer/Screenshots
KOrganizer/ToDo
KOrganizer/Web
KPackage
KPackageKit
KPager
KPDF
KPhotoAlbum
KPhotoAlbum FAQ
KPilot
KPlato
KPlayer
KPPP
Kraft
Krdc
Krecipes
KRename
Krfb
Kronometer
KrossWordPuzzle
KrossWordPuzzle/Crossword Types
KrossWordPuzzle/Settings
KrossWordPuzzle/Using KrossWordPuzzle
KRuler
Krusader
Krusader/How To Add Folder Shortcuts on Krusader Toolbar
KsCD
KSnapshot
KSniffer
KStars
KSysGuard
KSystemLog
KTechlab
KtikZ
KTimer
KTimeTracker
KTorrent
KTouch
KTouch/HowTo/DifferentKeyboardLayout
KTurtle
KTurtle/Examples
KTux
Kubuntu
Kubuntu/Advanced
Kubuntu/Advanced/Repositories
Kubuntu/Basic
Kubuntu/Contribute
Kubuntu/Installation
Kubuntu/Software
Kubuntu/Software/Games/Steam
Kubuntu/Support
Kubuntu/Welcome
KuickShow
KUIViewer
KUser
Kwave
KWin
KWin Rules
KWin Rules Application Workarounds
KWin Rules Examples
KWin Rules Window Attributes
KWin Rules Window Matching
KWin/Gallery
Kwlan
KWord
KWord/Manual
KWord/Manual/Introduction
KWord/Manual/IntroGUI
KWord/Tutorials
KWord/Tutorials/BasicLayout
KWord/Tutorials/SecondLayout
KWord/Tutorials/ThirdLayout
KWordQuiz
KWrite
KXStitch
LabPlot
Lancelot
Lancelot/Comparison
Lancelot/Discover Lancelot
Latte Dock
LatteDock
LatteDock/FAQ
LatteDock/How to report multi screen issues
LatteDock/HowToReportCrashes
LatteDock/TipsAndTricks
LemonPOS
List of KDE themes with GTK ports
Live CDs - a way to choose your distro
Lokalize
Mailing Lists
Marble
Marble/Bookmarks
Marble/Maemo/GuidanceMode
Marble/Maemo/Installation
Marble/Maemo/OfflineRouting
Marble/MapThemes
Marble/Search
Marble/Tracking
Minuet
Modify a Page
Neon/Installation/OEM
Neon/LTS/EOL
Nepomuk
Nepomuk/FileIndexer
Nepomuk/kioslaves/tags
NetworkManagement
Off-line Translation
Okteta
Okteta/Tutorials
Okular
PageLayout
Pairs
Parley
Parley/Manual
Parley/Manual/How to study vocabulary in multiple choice mode
Peruse
Phonon
Phonon/Handbook
Plan
Plan/Engineering To Order project tutorial
Plan/Engineering To Order project tutorial/executing
Plan/Engineering To Order project tutorial/planning
Plan/Manual/Definitions
Plan/Manual/Introduction
Plan/Tutorials
Plasma
Plasma application launchers
Plasma-browser-integration
Plasma/Application Dashboard
Plasma/Clocks
Plasma/ColorPicker
Plasma/Create a Global Theme Package
Plasma/DeviceNotifier
Plasma/FAQ/4.4
Plasma/FAQ/4.4/Configuration
Plasma/FAQ/5.10
Plasma/FAQ/5.10/Configuration
Plasma/FAQ/Index
Plasma/GroupingDesktop
Plasma/HowTo/4.5
Plasma/HowTo/Index
Plasma/Installing Plasmoids
Plasma/Kicker
Plasma/Kickoff
Plasma/Krunner
Plasma/Netbooks
Plasma/NetworkMonitor
Plasma/Pager
Plasma/Panels
Plasma/PictureFrame
Plasma/Plasmoids
Plasma/Public Transport
Plasma/Public Transport/CreateServiceProviders
Plasma/Public Transport/NewServiceProviders
Plasma/Public Transport/ServiceProviders
Plasma/SystemTray
Plasma/Tasks
Plasma/TweakingPlasma
Plasmate
PulseAudio
QCA
Quanta
Quanta RefreshDoc
Quanta RefreshDoc script
Quassel
Quick Start
Raptor
Raw to DNG
Rekonq
Rekonq/FAQs
Rekonq/Manual
Rekonq/Manual/Introduction
Rekonq/Manual/UI
RKWard
Rocs
RSIBreak
Semantik
Session Environment Variables
Sheets
Showcase
Showfoto
Showfoto/Brightness
Showfoto/Curves Adjust
Showfoto/Levels Adjust
Showfoto/Perspective
Showfoto/White Balance
Simon/Installation
Simon/Shadow dictionary
Skanlite
Skrooge
Smb4K
SMPlayer
Software from Source
Sound Problems
Sound Problems/External Sound Cards
Spectacle
Spectacle/Tutorials/Invoking Spectacle with custom shortcuts
Stage
Step
Summary
Sweeper
SymbolEditor
System Activity
System Settings
System Settings/Accessibility
System Settings/Account Details
System Settings/Activities
System Settings/Appearance
System Settings/Application Style
System Settings/Applications
System Settings/Autostart
System Settings/Color
System Settings/Connections
System Settings/Date & Time
System Settings/Default Applications
System Settings/Desktop Behavior
System Settings/Desktop Effects
System Settings/Desktop Session
System Settings/Emoticon Theme
System Settings/File Associations
System Settings/File Search
System Settings/Font
System Settings/Font Management
System Settings/Fonts (Category)
System Settings/Formats
System Settings/GNOME Application Style (GTK)
System Settings/Icon Theme
System Settings/Icons
System Settings/Input Devices
System Settings/KDE Wallet
System Settings/Keyboard
System Settings/Language
System Settings/Launch Feedback
System Settings/Locale/How To Install and Apply Interface Translation
System Settings/Locations
System Settings/Login Screen
System Settings/Look And Feel
System Settings/Mouse
System Settings/Mouse Cursor Theme
System Settings/Notifications
System Settings/Online Accounts
System Settings/Plasma Search
System Settings/Plasma Theme
System Settings/Power Management
System Settings/Printers
System Settings/Regional Settings
System Settings/Removable Storage
System Settings/Screen Edges
System Settings/Screen Locking
System Settings/Search
System Settings/Search Desktop
System Settings/Shortcuts
System Settings/Shortcuts and Gestures
System Settings/Spell Check
System Settings/Splash Screen
System Settings/Startup and Shutdown
System Settings/Task Scheduler
System Settings/Task Switcher
System Settings/Touch Screen
System Settings/Touchpad
System Settings/User Manager
System Settings/Virtual Desktops
System Settings/Web Shortcuts
System Settings/Widget Style
System Settings/Window Behavior
System Settings/Window Behaviour
System Settings/Window Rules
System Settings/Windows Decorations
System Settings/Windows Management
System Settings/Workspace
System Settings/Workspace Appearance
System Settings/Workspace Behaviour
System Settings/Workspace Theme
Table of equivalent applications
Taking Screenshots
Tasks and Tools
Telepathy
Tellico
Tellico/Compiling
Tellico/Templates
Toolbox
Toolbox/Tables
Tools
Translate a Page
Translation Workflow
Trojitá
Troubleshooting
Troubleshooting/Peripherals Problems
Troubleshooting/Samsung scx-4500W
Tutorials
Tutorials/Access another computer's display
Tutorials/Change the color of the blue folder icon
Tutorials/Compose Key Old Version
Tutorials/ComposeKey
Tutorials/Flatpak
Tutorials/Force Transparency And Blur
Tutorials/hotkeys
Tutorials/Install KDE software
Tutorials/KDE3 to KDE SC 4
Tutorials/Keyboard
Tutorials/Kimpanel
Tutorials/Kontact/Office365
Tutorials/MIDI on Linux
Tutorials/Modify KDE Software Defaults
Tutorials/Mouse pointer settings for large displays
Tutorials/Open a console
Tutorials/Shared Database
Tutorials/Using Other Window Managers with Plasma
Typographical Guidelines
Umbrello
Umbrello/FAQ
Update an Image
UserBase/Guidelines
Wacomtablet
Websites
Welcome to KDE UserBase
What is a distribution
What is KDE
Words
Working with GMail
Working with Google Calendar
Working with Google Contacts
Working with MyKolab
Workspace Configuration/Desktop Configuration
Writing an Application Manual
Yakuake
Zanshin
Language
aa - Afar
ab - Abkhazian
abs - Ambonese Malay
ace - Achinese
acm - Iraqi Arabic
ady - Adyghe
ady-cyrl - Adyghe (Cyrillic script)
aeb - Tunisian Arabic
aeb-arab - Tunisian Arabic (Arabic script)
aeb-latn - Tunisian Arabic (Latin script)
af - Afrikaans
aln - Gheg Albanian
alt - Southern Altai
am - Amharic
ami - Amis
an - Aragonese
ang - Old English
ann - Obolo
anp - Angika
ar - Arabic
arc - Aramaic
arn - Mapuche
arq - Algerian Arabic
ary - Moroccan Arabic
arz - Egyptian Arabic
as - Assamese
ase - American Sign Language
ast - Asturian
atj - Atikamekw
av - Avaric
avk - Kotava
awa - Awadhi
ay - Aymara
az - Azerbaijani
azb - South Azerbaijani
ba - Bashkir
ban - Balinese
ban-bali - Balinese (Balinese script)
bar - Bavarian
bbc - Batak Toba
bbc-latn - Batak Toba (Latin script)
bcc - Southern Balochi
bci - Baoulé
bcl - Central Bikol
bdr - West Coast Bajau
be - Belarusian
be-tarask - Belarusian (Taraškievica orthography)
bew - Betawi
bg - Bulgarian
bgn - Western Balochi
bh - Bhojpuri
bho - Bhojpuri
bi - Bislama
bjn - Banjar
blk - Pa'O
bm - Bambara
bn - Bangla
bo - Tibetan
bpy - Bishnupriya
bqi - Bakhtiari
br - Breton
brh - Brahui
bs - Bosnian
btm - Batak Mandailing
bto - Iriga Bicolano
bug - Buginese
bxr - Russia Buriat
ca - Catalan
cbk-zam - Chavacano
cdo - Min Dong Chinese
ce - Chechen
ceb - Cebuano
ch - Chamorro
cho - Choctaw
chr - Cherokee
chy - Cheyenne
ckb - Central Kurdish
co - Corsican
cps - Capiznon
cpx - Pu-Xian Min
cpx-hans - Pu-Xian Min (Simplified Han script)
cpx-hant - Pu-Xian Min (Traditional Han script)
cpx-latn - Pu-Xian Min (Latin script)
cr - Cree
crh - Crimean Tatar
crh-cyrl - Crimean Tatar (Cyrillic script)
crh-latn - Crimean Tatar (Latin script)
crh-ro - Crimean Tatar (Romania)
cs - Czech
csb - Kashubian
cu - Church Slavic
cv - Chuvash
cy - Welsh
da - Danish
dag - Dagbani
de - German
de-at - Austrian German
de-ch - Swiss High German
de-formal - German (formal address)
dga - Dagaare
din - Dinka
diq - Zazaki
dsb - Lower Sorbian
dtp - Central Dusun
dty - Doteli
dv - Divehi
dz - Dzongkha
ee - Ewe
egl - Emilian
el - Greek
eml - Emiliano-Romagnolo
en - English
en-ca - Canadian English
en-gb - British English
eo - Esperanto
es - Spanish
es-419 - Latin American Spanish
es-formal - Spanish (formal address)
et - Estonian
eu - Basque
ext - Extremaduran
fa - Persian
fat - Fanti
ff - Fula
fi - Finnish
fit - Tornedalen Finnish
fj - Fijian
fo - Faroese
fon - Fon
fr - French
frc - Cajun French
frp - Arpitan
frr - Northern Frisian
fur - Friulian
fy - Western Frisian
ga - Irish
gaa - Ga
gag - Gagauz
gan - Gan Chinese
gan-hans - Gan (Simplified)
gan-hant - Gan (Traditional)
gcr - Guianan Creole
gd - Scottish Gaelic
gl - Galician
gld - Nanai
glk - Gilaki
gn - Guarani
gom - Goan Konkani
gom-deva - Goan Konkani (Devanagari script)
gom-latn - Goan Konkani (Latin script)
gor - Gorontalo
got - Gothic
gpe - Ghanaian Pidgin
grc - Ancient Greek
gsw - Alemannic
gu - Gujarati
guc - Wayuu
gur - Frafra
guw - Gun
gv - Manx
ha - Hausa
hak - Hakka Chinese
haw - Hawaiian
he - Hebrew
hi - Hindi
hif - Fiji Hindi
hif-latn - Fiji Hindi (Latin script)
hil - Hiligaynon
hno - Northern Hindko
ho - Hiri Motu
hr - Croatian
hrx - Hunsrik
hsb - Upper Sorbian
hsn - Xiang Chinese
ht - Haitian Creole
hu - Hungarian
hu-formal - Hungarian (formal address)
hy - Armenian
hyw - Western Armenian
hz - Herero
ia - Interlingua
id - Indonesian
ie - Interlingue
ig - Igbo
igl - Igala
ii - Sichuan Yi
ik - Inupiaq
ike-cans - Eastern Canadian (Aboriginal syllabics)
ike-latn - Eastern Canadian (Latin script)
ilo - Iloko
inh - Ingush
io - Ido
is - Icelandic
it - Italian
iu - Inuktitut
ja - Japanese
jam - Jamaican Creole English
jbo - Lojban
jut - Jutish
jv - Javanese
ka - Georgian
kaa - Kara-Kalpak
kab - Kabyle
kai - Karekare
kbd - Kabardian
kbd-cyrl - Kabardian (Cyrillic script)
kbp - Kabiye
kcg - Tyap
kea - Kabuverdianu
kg - Kongo
khw - Khowar
ki - Kikuyu
kiu - Kirmanjki
kj - Kuanyama
kjh - Khakas
kjp - Eastern Pwo
kk - Kazakh
kk-arab - Kazakh (Arabic script)
kk-cn - Kazakh (China)
kk-cyrl - Kazakh (Cyrillic script)
kk-kz - Kazakh (Kazakhstan)
kk-latn - Kazakh (Latin script)
kk-tr - Kazakh (Turkey)
kl - Kalaallisut
km - Khmer
kn - Kannada
ko - Korean
ko-kp - Korean (North Korea)
koi - Komi-Permyak
kr - Kanuri
krc - Karachay-Balkar
kri - Krio
krj - Kinaray-a
krl - Karelian
ks - Kashmiri
ks-arab - Kashmiri (Arabic script)
ks-deva - Kashmiri (Devanagari script)
ksh - Colognian
ksw - S'gaw Karen
ku - Kurdish
ku-arab - Kurdish (Arabic script)
ku-latn - Kurdish (Latin script)
kum - Kumyk
kus - Kʋsaal
kv - Komi
kw - Cornish
ky - Kyrgyz
la - Latin
lad - Ladino
lb - Luxembourgish
lbe - Lak
lez - Lezghian
lfn - Lingua Franca Nova
lg - Ganda
li - Limburgish
lij - Ligurian
liv - Livonian
lki - Laki
lld - Ladin
lmo - Lombard
ln - Lingala
lo - Lao
loz - Lozi
lrc - Northern Luri
lt - Lithuanian
ltg - Latgalian
lus - Mizo
luz - Southern Luri
lv - Latvian
lzh - Literary Chinese
lzz - Laz
mad - Madurese
mag - Magahi
mai - Maithili
map-bms - Basa Banyumasan
mdf - Moksha
mg - Malagasy
mh - Marshallese
mhr - Eastern Mari
mi - Māori
min - Minangkabau
mk - Macedonian
ml - Malayalam
mn - Mongolian
mnc - Manchu
mnc-latn - Manchu (Latin script)
mnc-mong - Manchu (Mongolian script)
mni - Manipuri
mnw - Mon
mo - Moldovan
mos - Mossi
mr - Marathi
mrh - Mara
mrj - Western Mari
ms - Malay
ms-arab - Malay (Jawi script)
mt - Maltese
mus - Muscogee
mwl - Mirandese
my - Burmese
myv - Erzya
mzn - Mazanderani
na - Nauru
nah - Nāhuatl
nan - Min Nan Chinese
nap - Neapolitan
nb - Norwegian Bokmål
nds - Low German
nds-nl - Low Saxon
ne - Nepali
new - Newari
ng - Ndonga
nia - Nias
niu - Niuean
nl - Dutch
nl-informal - Dutch (informal address)
nmz - Nawdm
nn - Norwegian Nynorsk
no - Norwegian
nod - Northern Thai
nog - Nogai
nov - Novial
nqo - N’Ko
nrm - Norman
nso - Northern Sotho
nv - Navajo
ny - Nyanja
nyn - Nyankole
nys - Nyungar
oc - Occitan
ojb - Northwestern Ojibwa
olo - Livvi-Karelian
om - Oromo
or - Odia
os - Ossetic
pa - Punjabi
pag - Pangasinan
pam - Pampanga
pap - Papiamento
pcd - Picard
pcm - Nigerian Pidgin
pdc - Pennsylvania German
pdt - Plautdietsch
pfl - Palatine German
pi - Pali
pih - Norfuk / Pitkern
pl - Polish
pms - Piedmontese
pnb - Western Punjabi
pnt - Pontic
prg - Prussian
ps - Pashto
pt - Portuguese
pt-br - Brazilian Portuguese
pwn - Paiwan
qqq - Message documentation
qu - Quechua
qug - Chimborazo Highland Quichua
rgn - Romagnol
rif - Riffian
rki - Arakanese
rm - Romansh
rmc - Carpathian Romani
rmy - Vlax Romani
rn - Rundi
ro - Romanian
roa-tara - Tarantino
rsk - Pannonian Rusyn
ru - Russian
rue - Rusyn
rup - Aromanian
ruq - Megleno-Romanian
ruq-cyrl - Megleno-Romanian (Cyrillic script)
ruq-latn - Megleno-Romanian (Latin script)
rw - Kinyarwanda
ryu - Okinawan
sa - Sanskrit
sah - Yakut
sat - Santali
sc - Sardinian
scn - Sicilian
sco - Scots
sd - Sindhi
sdc - Sassarese Sardinian
sdh - Southern Kurdish
se - Northern Sami
se-fi - Northern Sami (Finland)
se-no - Northern Sami (Norway)
se-se - Northern Sami (Sweden)
sei - Seri
ses - Koyraboro Senni
sg - Sango
sgs - Samogitian
sh - Serbo-Croatian
sh-cyrl - Serbo-Croatian (Cyrillic script)
sh-latn - Serbo-Croatian (Latin script)
shi - Tachelhit
shi-latn - Tachelhit (Latin script)
shi-tfng - Tachelhit (Tifinagh script)
shn - Shan
shy - Shawiya
shy-latn - Shawiya (Latin script)
si - Sinhala
simple - Simple English
sjd - Kildin Sami
sje - Pite Sami
sk - Slovak
skr - Saraiki
skr-arab - Saraiki (Arabic script)
sl - Slovenian
sli - Lower Silesian
sm - Samoan
sma - Southern Sami
smn - Inari Sami
sms - Skolt Sami
sn - Shona
so - Somali
sq - Albanian
sr - Serbian
sr-ec - српски (ћирилица)
sr-el - srpski (latinica)
srn - Sranan Tongo
sro - Campidanese Sardinian
ss - Swati
st - Southern Sotho
stq - Saterland Frisian
sty - Siberian Tatar
su - Sundanese
sv - Swedish
sw - Swahili
syl - Sylheti
szl - Silesian
szy - Sakizaya
ta - Tamil
tay - Tayal
tcy - Tulu
tdd - Tai Nuea
te - Telugu
tet - Tetum
tg - Tajik
tg-cyrl - Tajik (Cyrillic script)
tg-latn - Tajik (Latin script)
th - Thai
ti - Tigrinya
tk - Turkmen
tl - Tagalog
tly - Talysh
tly-cyrl - Talysh (Cyrillic script)
tn - Tswana
to - Tongan
tok - Toki Pona
tpi - Tok Pisin
tr - Turkish
tru - Turoyo
trv - Taroko
ts - Tsonga
tt - Tatar
tt-cyrl - Tatar (Cyrillic script)
tt-latn - Tatar (Latin script)
tum - Tumbuka
tw - Twi
ty - Tahitian
tyv - Tuvinian
tzm - Central Atlas Tamazight
udm - Udmurt
ug - Uyghur
ug-arab - Uyghur (Arabic script)
ug-latn - Uyghur (Latin script)
uk - Ukrainian
ur - Urdu
uz - Uzbek
uz-cyrl - Uzbek (Cyrillic script)
uz-latn - Uzbek (Latin script)
ve - Venda
vec - Venetian
vep - Veps
vi - Vietnamese
vls - West Flemish
vmf - Main-Franconian
vmw - Makhuwa
vo - Volapük
vot - Votic
vro - Võro
wa - Walloon
wal - Wolaytta
war - Waray
wls - Wallisian
wo - Wolof
wuu - Wu Chinese
wuu-hans - Wu Chinese (Simplified)
wuu-hant - Wu Chinese (Traditional)
xal - Kalmyk
xh - Xhosa
xmf - Mingrelian
xsy - Saisiyat
yi - Yiddish
yo - Yoruba
yrl - Nheengatu
yue - Cantonese
yue-hans - Cantonese (Simplified)
yue-hant - Cantonese (Traditional)
za - Zhuang
zea - Zeelandic
zgh - Standard Moroccan Tamazight
zh - Chinese
zh-cn - Chinese (China)
zh-hans - Simplified Chinese
zh-hant - Traditional Chinese
zh-hk - Chinese (Hong Kong)
zh-mo - Chinese (Macau)
zh-my - Chinese (Malaysia)
zh-sg - Chinese (Singapore)
zh-tw - Chinese (Taiwan)
zu - Zulu
Format
Export for off-line translation
Export in native format
Export in CSV format
Fetch
{{DISPLAYTITLE:erste Schritte mit OpenPGP (Vorbereitung)}}<languages /> <span id="Introduction"></span> == Einleitung == Wenn Sie einen OpenPGP-Schlüssel erzeugen, dann treffen Sie (bewusst oder unbewusst) einige technische und organisatorische Entscheidungen, die starken Einfluss auf die Sicherheit und Nutzbarkeit Ihres Schlüssels und damit auf dessen Lebensdauer haben. Manche dieser Entscheidungen sind irreversibel. Aus mehreren Gründen ist es erstrebenswert, dass auch normale Schlüssel – auch weniger sichere – eine lange Lebensdauer haben (jedenfalls der Kern der Schlüssel). Deshalb soll dieser Artikel Sie mit den wichtigen Aspekten der Schlüsselerzeugung vertraut machen und Ihnen dabei helfen, einen guten Schlüssel zu erzeugen, den Sie viele Jahre lang nutzen können. Dieser Artikel behandelt nur die Konzepte, mit denen Sie vertraut sein sollten, er enthält keine Schritt-für-Schritt-Anleitung weil dies unterschiedliche Phasen sein sollten: Verstehen und planen Sie zunächst, was Sie tun werden. Wenn Sie damit fertig sind, schauen Sie sich den [[Special:myLanguage/Concepts/OpenPGP_Key_Generation|Artikel zur Erzeugung von OpenPGP-Schlüsseln]] an. <span id="How_to_get_started"></span> == Wie Sie anfangen sollten == Sie können sich leicht einen Schlüssel zum rumspielen erzeugen. Aber wenn Sie andere diesen Schlüssel verifizieren lassen, dann riskieren Sie, Arbeit zunichte zu machen. Ihr Ziel sollte sein, einen oder mehrere langlebige Schlüssel zu erzeugen. Der beste Rat ist: Versuchen Sie das nicht alleine, wenn es sich vermeiden lässt. [[Special:myLanguage/KMail/Courses_Information_Openpgp|Wenden Sie sich statt dessen an Experten]], wenn Sie können; an Leute, die schon mal einen eigenen Schlüssel ersetzt und daraus gelernt haben. Erzeugen Sie den Schlüssel in einer sicheren Umgebung, verwenden Sie einen Offline-Hauptschlüssel, und geben Sie sowohl dem Hauptschlüssel als auch den Unterschlüsseln ein Ablaufdatum (nicht mehr als ein Jahr). Entscheiden Sie sich für eine Schlüsselrichtlinie (die die Sicherheitsniveaus und Verwendungszwecke des Hauptschlüssels und der Unterschlüssel beschreibt) und halten Sie diese strikt ein. Wenn Sie andere Schlüssel zertifizieren, bevor Sie sich für eine Zertifizierungsrichtlinie entschieden haben, dann zertifizieren Sie sie nicht für die Öffentlichkeit, sondern nur lokal (d.h. nicht exportierbar). Vermeiden Sie es generell, neue Aktionen auszuführen, bevor Sie gut verstanden haben, was sie bedeuten. Merken Sie sich dies: # ''Was komfortabel ist, bedroht (fast immer) Ihre Sicherheit.'' # Mehr Sicherheit ist nicht in jedem Fall besser. Seien Sie sich aber der Konsequenzen bewusst (in beide Richtungen). Willkommen in der Welt der Kryptpgrafie! <span id="Key_security"></span> == Schlüsselsicherheit == <div class="mw-translate-fuzzy"> Wenn Schlüssel involviert sind, ist die wichtigste Frage: Wie sicher / verlässlich sind sie und ihre Verwendung? Die wichtigste Regel der Kryptografie ist nicht "Machen Sie es noch sicherer", sondern "(1) Denken Sie darüber nach, wie viel Sicherheit Sie benötigen. (2) Entscheiden Sie, welcher technische Aufwand sowohl notwendig (untere Grenze) als auch vernünftig (obere Grenze) erscheint, um diesen Anforderungen gerecht zu werden. (3) Halten Sie die Regeln, die Sie festgelegt haben (Schreiben Sie sie auf!), strikt ein. (4) Wenn weitere Personen involviert sind (was fast immer der Fall ist), lassen Sie diese präzise und sicher wissen, was die Grenzen der Nutzung und das Sicherheitsniveau des jeweiligen Schlüssels sind." Die meisten der folgenden Überlegungen beziehen sich entweder auf die Sicherheit oder auf die Transparenz der Sicherheit und der Bedeutung von Schlüsseln. </div> Niemand knackt Schlüssel durch Brute-force-Angriffe. Das ist sogar für eher kurze Schlüssel (etwa 1024 Bit) innerhalb der nächsten Jahrzehnte schlicht und ergreifend unmöglich für alles unterhalb einer Regierungseinrichtung eines reichen Landes. Es würde vor allem keinen Sinn ergeben: Es ist so einfach, die Schlüssel einfach zu klauen. Mit größter Wahrscheinlichkeit ist das System, mit dem Sie diesen Text lesen (falls Sie ihn nicht ausgedruckt haben...) nicht sonderlich sicher. De facto ist überhaupt kein System sicher, das für das Lesen von Webseiten oder E-Mail verwendet wird. Diskutieren Sie darüber nicht, nehmen Sie das so hin. Wenn Sie das nicht tun, kompromittieren Sie sich wahrscheinlich selber. Ein Schlüssel ist nie sicherer als das unsicherste System, auf dem er mal verwendet wurde (das schließt seine Erzeugung ein); und er ist nur um seine Passphrase sicherer als das unsicherste System, auf dem er gespeichert wurde, was kein Schutz vor einem Brute-force-Angriff ist, wenn die Passphrase nicht rein zufällig oder kürzer als 16 Stellen (Klein- und Großbuchstaben (ohne Umlaute) und Ziffern) ist. Es ist völlig in Ordnung, OpenPGP auf unsicheren Systemen zu verwenden. Sie (und Ihre Kommunikationspartner!) müssen sich aber immer des Sicherheitsniveaus bewusst sein. Der nächste Sicherheitslevel sind Smartcards. Man kann Schlüssel von einer Smartcard zwar nicht klauen, sie aber missbrauchen, wenn man das System kontrolliert, an das die Smartcard angeschlossen ist. Der nächste Level nach Smartcards sind sichere Systeme: Trennen Sie die Verbindung zu Ihrer Festplatte, USB-Sticks (usw.) und Netzwerken, dann booten Sie von einem sicheren Medium wie einer Linux-Live-CD (natürlich aus einer vertrauenswürdigen Quelle!). Verwenden Sie Hochsicherheitsschlüssel nur in einer solchen Umgebung (und womöglich auch nur mit ungefährlichen Dokumenten, also etwa reinen Textdateien oder HTML-Dokumenten). <span id="Main_key_and_subkeys"></span> == Hauptschlüssel und Unterschlüssel == Die meisten OpenPGP-Schlüssel haben mindestens einen Unterschlüssel (alle haben genau einen Hauptschlüssel). Sie brauchen sich normalerweise nicht um diesen Unterschied zu kümmern; Ihre Anwendung (oder genauer: die Basisanwendung, typischerweise '''GnuPG''') wählt automatisch die richtige Schlüsselkomponente aus. Der Hauptschlüssel ist derjenige, auf den sich der Fingerprint bezieht, und nur nur er kann zertifizieren: die eigenen Unterschlüssel und User-IDs sowie die User-IDs anderer Schlüssel. Die Unterschlüssel können alles andere (vor allem entschlüsseln und signieren), wenn man sie entsprechend konfiguriert. Der Grund dafür, dass der Unterschied zwischen Haupt- und Unterschlüsseln hier angesprochen wird, ist, dass er für die Schlüsselerzeugung sehr wichtig ist: Man kann den geheimen Hauptschlüssel von den geheimen Unterschlüsseln trennen (mit GnuPG ist das möglich; es ist nicht Teil des OpenPGP-Standards!). Die Unterschlüssel können später ersetzt werden, der Hauptschlüssel nicht (das wäre dann ein neuer Schlüssel, nicht bloß ein modifizierter). Deshalb kann man einen Hauptschlüssel durchaus für "immer" (20 Jahre) verwenden, wenn man ihn bei der Schlüsselerzeugung sowohl mit einer kryptografisch sicheren Passphrase schützt als auch ihn als Offline-Hauptschlüssel abtrennt und anschließend zumindest die Passphrase sicher speichert und den Hauptschlüssel nur in sicheren Umgebungen verwendet. Das ist auch für Alltagsschlüssel wichtig. Hochsicherheitsschlüssel haben weniger Bedarf an dieser Trennung (brauchen üblicherweise gar keine Unterschlüssel). Sie sollten für jede Aktion einen eigenen Unterschlüssel erzeugen: für Signaturen, für Entschlüsselungen und bei Bedarf auch für Authentifizierung (SSH). <span id="Secure_environment"></span> == Sichere Umgebung == Der Schlüssel soll in einer sicheren Umgebung erzeugt werden, und der Hauptschlüssel soll nie in einer unsicheren Umgebung verwendet werden. Aber was ist eine sichere Umgebung? Das hängt vom Sicherheitsniveau des Schlüssels ab. Wenn man die Abschusscodes für Nuklearwaffen sichern will, stellt man daran höhere Anforderungen als wenn man nur seine Affäre geheimhalten möchte. Auf keinen Fall sollten Sie von Ihrer normalen Festplatte booten (sie idealerweise vom System abtrennen), sondern von einem vertrauenswürdigen Medium. Das ist typischerweise eine Linux CD/DVD. Sie sollten darauf achten, dass dieses Medium aus einer sicheren Quelle kommt. Einfach irgendwas aus dem Internet runterzuladen und auf CD zu brennen schafft noch keine sichere Umgebung. Im allgemeinen sind gepresste Medien vertrauenswürdiger als gebrannte. Auch die Hardware ist wichtig. Wenn man ein System verwendet, von dem vorab bekannt war, dass es für die Erzeugung wertvoller Schlüssel genutzt wird, dann mag jemand auf die Idee gekommen sein, einen Hardware-Keylogger zu installieren. Achten Sie auch auf eher triviale Angriffe: Verhindern Sie, dass jemand Sie bei der Eingabe Ihrer Hauptschlüssel-Passphrase beobachtet (und sei es durchs Fenster) oder den Zettel sehen kann, auf dem die Passphrase notiert ist. Starten Sie das System nach der Schlüsselerzeugung neu oder (besser) schalten Sie es für ca. drei Minuten aus. <span id="User_IDs"></span> == User-IDs == User-IDs sind formal nur beliebige Zeichenketten, die allerdings typischerweise aus einem Namen, einem optionalen Kommentar und einer E-Mail-Adresse bestehen. Diese Struktur erlaubt es Mailprogrammen, den passenden Schlüssel für eine Empfängeradresse zu finden (die meisten Programme verlangen aus offensichtlichen Gründen eine Bestätigung ihres Vorschlags). Ein öffentlicher OpenPGP-Schlüssel (präziser: ein Zertifikat) hat mindestens eine User-ID, kann darüber hinaus aber beliebig viele haben. Somit kann man denselben Schlüssel für unterschiedliche E-Mail-Adressen nutzen (was aber nur sinnvoll ist, wenn diese Adressen auf demselben Sicherheitsniveau genutzt werden sollen). Mehrere Adressen im selben Zertifikat zu kombinieren hat Vor- und Nachteile. Der Hauptvorteil ist, dass man mit weniger Schlüsseln auskommt und dementsprechend weniger Zertifizierungsaufwand hat. Der Hauptnachteil ist, dass man User-IDs zwar für ungültig erklären kann, sie aber für immer sichtbar bleiben, und dass ein kombiniertes Zertifikat es trivial erlaubt, Schlüsse über unterschiedliche Rollen des Besitzers zu ziehen, die man nicht öffentlich verbunden wissen möchte: Privatperson, Beruf, andere Organisationen (Vereine, Parteien, was auch immer). Es gibt sogar Gründe, Adressen derselben Gruppe nicht in einem Zertifikat zusammenzuführen: seriöse Adressen (vorname.nachname@example.org), anonyme Adressen (heejei7u@example.org), Spaßadressen (superman17@example.org). Es kann auch sein, dass es bei bestimmten Adressen niemand einen Grund geben wird, OpenPGP mit ihnen zu nutzen; solche Adressen sollten natürlich nicht Teil einer User-ID werden. Die Entscheidung, eine Adresse zu einem Zertifikat hinzuzufügen, ist dauerhaft. Aber es ist leicht, später Adressen hinzuzufügen. Deshalb sollten Sie gut darüber nachdenken, bevor Sie einen Schlüssel erzeugen. Fangen Sie im Zweifelsfall mit weniger Adressen an. Es ist sinnvoll, eine spezielle User-ID ohne E-Mail-Adresse zu haben. Bei den meisten E-Mail-Adressen kann man nicht sicher sein, dass man sie für immer haben wird. Wenn Sie eine User-ID widerrufen (etwa weil Sie die zugehörige Adresse nicht mehr haben), dann verlieren Sie alle Zertifizierungen, die an dieser User-ID hängen. Aber Sie werden nie Ihren Namen verlieren (sogar wenn man heiratet o.Ä. gibt es normalerweise wenig Grund, diese User-ID zu widerrufen). Sie behalten also die Zertifizierungen für diese User-ID auf jeden Fall. Und sie können den Kommentar dieser User-ID für eine Aussage über den Schlüssel nutzen: "Alltagsschlüssel mit sicherem Offline-Hauptschlüssel und policy URL" <span id="Key_type_and_length"></span> == Schlüsseltyp und Schlüssellänge == <div class="mw-translate-fuzzy"> Die gut unterstützten Schlüsseltypen sind DSA (nur Signaturen), ElGamal (nur Verschlüsselung) und RSA (beides); ECDSA (elliptische Kurven) werden in Kürze folgen. GnuPG bietet gegenwärtig (2013) die Möglichkeit, interaktiv Schlüssel mit 1024 Bit bis 4096 Bit Länge zu erzeugen. </div> The differences in security, execution time, signature size, and being required or just considered optional by the standard (rfc4880) are irrelevant for most scenarios. The one relevant difference is: The g10 smartcard supports RSA only. Thus generate an RSA key unless you have concrete and good reason for a different decision. 1024 bit keys are considered breakable by certain well known government agencies today or in the near future. 2048 bit keys are considered safe for decades. But remember: These well known agencies would not waste their time and money by computing your key. They would steal your key. Thus if you want a larger key in order to be safe against this kind of opponent then make sure that they cannot steal it. This obviously requires profound knowledge, discipline and probably some money. The practical reasons against very long keys are: Commonly used versions of GnuPG do not support keys with more than 2048 or 3072 bit respectively length. Operations with asymmetric keys are costly in general. To make it worse: Operation with twice the key size take eight times as long. And it takes long to generate huge keys. For mobile devices this CPU load can become a problem. Thus: Unless you have concrete and good reason for a different decision stick to 2048 bit (at least for everyday keys). == Key expiration == The main key can set (and change) the expiration date for itself and its subkeys. The only "disadvantage" of an expiration date for others is that they have to update the key to keep it usable. But keys shall be updated regularly anyway so you may consider that an advantage as well. The main advantage of an expiration date (for the main key, too) is that keys which are not used any more can easily be recognized as such. The "official" way is another, of course. If a key is abandoned then a revocation certificate should be published. But this may be impossible (key or passphrase lost and no certificate created before (or lost, too)) or you may simply forget to do so (or to publish it everywhere). The "right" validity period is a compromise between reducing disturbance by expired keys (on both sides; remember that you need a secure environment to change the expiration date with an offline main key) and the time which a key still appears valid. One year may be a good choice. == Revocation certificate == A revocation certificate is a file (or print-out) which you may create preventively to later revoke a whole key in case you have no access to the secret main key any more. This is a huge advantage if you have not just lost access to the key but someone else has! The disadvantage is: You should protect this file / print-out similarly well as the secret main key itself. It can be serious damage if you have only one (suitable) key, need it urgently and someone else destroys it right then. Obviously a main key revocation is forever (cannot be superseded by a newer self-signature). If you (or someone else you really trust) have another key which is secure enough then you may add this key as a designated revoker to yours (you need not publish this). A designated revoker can revoke another key. Of course, the signature for the designated revoker must be available when this shall be used. If you have not given it to the other person and lost it together with your key then this is useless. If you prefer security over availability then you may make friend A your designated revoker, encrypt this signature for friend B and ask friend C to store it. == Passphrase, safe storage, and backup == You should think about where you will store the passphrase for the main key and the revocation certificate file or print-out. Secure passphrases are hard to remember. You will most probably have to write it down. You really should not use a passphrase you have ever typed on an insecure system (and, of course, you really should not ever do so in the future). You should choose something like rsbBwNl137LcWP33RI: 18 chars consisting of lower and upper case letters and digits. Don't use special chars or umlauts. You gain little security (if you cannot remember 18 random chars then you probably cannot remember 15, too) but may get problems if you are ever forced to use the key on a rescue system (text mode Linux) with "wrong" keyboard settings. You improve security if you memorize a part of the passphrase and write down just the rest or if you write down both halves of it separately and store them in different places (one in your wallet, the other one at home). But if you store an 18 chars passphrase in two parts and an attacker gets one of them then the remaining 9 chars are not a secure protection any more. If you have created a revocation certificate then you have to store that in a safe place, too. And, of course, you should have reliable backups of your key. It is nice if you need not be afraid that somebody has stolen your key but it is probably very unpleasant if you cannot decrypt your data any more. If you have a secure passphrase then you may even put a backup of your secret main key on your web site. == Key policy and policy URL == You should write a document (plain text or HTML) which describes the intended usage and security of your key and (maybe added later) your criteria for certifying the keys of other people. You can write one or more URLs at which this document can (later) be found into the key and in every signature you make. This key component is called a policy URL. It is a good idea to publish only user ID signatures which contain this policy URL(s). It is important that the users of your key can check whether a certain document belongs to a policy URL (the web server download is not safe, not even over HTTPS). Thus you should change the policy URL every time you change the document and mention the URL well visible in the document. You may use this pattern: <tt><nowiki>http://yourdomain.example.org/openpgp/0x12345678__policy.1.htm</nowiki>l</tt> This document should have a detached signature (or a cleartext signature if it is plain text) by the offline main key. You should link the detached signature from the document. == Preferred key server == Like the policy URL a key server URL can be written into the key. You should decide which key server shall be authoritative for your key so that the users of your key know where they have to search for the "officially current version" of your key. This should be the key server which you upload key updates to first. This should be the one you configure in the GnuPG config file (<code>--keyserver</code>) for key searches and uploads. This address should mainly be available for a long time and have only few and short outages. You may even use your own web site: <tt><nowiki>http://yourdomain.example.org/openpgp/0x12345678.asc</nowiki></tt> Availability is improved if a server pool (with the same DNS address) is used. If you have no better idea then you may use <tt>hkp://pool.sks-keyservers.net</tt> or one of the more local pools <tt>hkp://eu.pool.sks-keyservers.net</tt> (Europe), <tt>hkp://na.pool.sks-keyservers.net</tt> (North America) or <tt>hkp://sa.pool.sks-keyservers.net</tt> (South America). See http://sks-keyservers.net/overview-of-pools.php == Algorithm preferences == You can also write into your key (for others) and into your config file (for your actions) in which order you prefer the cipher and digest algorithms. You should do this before you generate the key (this is easier than changing it afterwards). It makes sense to avoid SHA-1. Please be aware that you cannot prevent that GnuPG creates SHA-1 signatures with your key (because that is the only digest required by the standard). You may want to put lines like these in your <tt>gpg.conf</tt>: {{Input|1=<nowiki> personal-cipher-preferences AES256,AES192,AES,CAST5,3DES personal-digest-preferences SHA512,SHA384,SHA256,SHA224,RIPEMD160,SHA1 cert-digest-algo SHA512 default-preference-list AES256,AES192,AES,CAST5,3DES,SHA512,SHA384,SHA256,SHA224,RIPEMD160,SHA1,ZLIB,BZIP2,ZIP </nowiki>}} == Further reading == * [[Special:myLanguage/KGpg|KGpg]] * [[Special:myLanguage/KMail/PGP_MIME|KMail PGP/MIME]] * [[Special:myLanguage/KMail/gpg|KMail gpg]] * [[Special:myLanguage/Concepts/OpenPGP_For_Beginners|OpenPGP For Beginners]] * [[Special:myLanguage/Concepts/OpenPGP_For_Advanced_Users|OpenPGP For Advanced Users]] [[Category:Getting Started]] [[Category:Internet]] [[Category:Security]] [[Category:Tutorials]] [[Category:New Users]]
Toggle limited content width