File Encryption with GPG

import gnupg

# Initialize the GPG instance with a root folder, where your keys will be stored.
gpg = gnupg.GPG(gnupghome="/any/folder")
# A passphrase is needed when you decrypt the data using your private key
# It serves as another authentication layer to verify the private key's owner
passphrase = "the_decryption_password"
input_data = gpg.gen_key_input(
    # Associate the keypair with owner information
    # This is just for identification, not for verification
    name_real="Tai Le",
    name_email="ltquoctaidn98@gmail.com", 
    # Specify our passphrase here
    passphrase=passphrase,
    # Encryption method like RSA, DSA, ....
    # Each type has its own strength
    key_type="RSA",
    # The longer the key length the more secure it is against brute-force attacks
    # But it has its cost; the more secure, the lower performance
    key_length=1024,
    # We can also define an expiration date
    expire_date="365d",
)
# Generate the key
key = gpg.gen_key(input_data)
# Dump the key into the variable
public_key = gpg.export_keys(str(key))
private_key = gpg.export_keys(str(key), True, passphrase=passphrase)

# Export key to files
with open("public_key.asc", "w") as f:
    f.write(public_key)

with open("private_key.asc", "w") as f:
    f.write(private_key)

import os
import gnupg

gpg = gnupg.GPG(gnupghome="/any/folder2")

file_data = open("public_key.asc", "r").read()
input_data: gnupg.ImportResult
# Import the file
input_data = gpg.import_keys(file_data)
# Remember to set trust level to "TRUST_ULTIMATE" to the key. If not, we cannot encrypt files using the key
gpg.trust_keys(input_data.fingerprints, "TRUST_ULTIMATE")
# Check whether the key was imported
print(gpg.list_keys())

import gnupg
import time

gpg = gnupg.GPG(gnupghome="/any/folder2")

path = "/home/user/Documents/High performance MySQL optimization, backups, and replication.pdf"
start = time.time()

# We should always use "read binary" here, because it is the input of decrypt_file method
with open(path, "rb") as file_stream:
    status = gpg.encrypt_file(
        file_stream,
        # Convert the output file into text for friendly delivering via email and other methods
        armor=True,
        # Recipient here is to find the appropriate public key among many keys imported
        # We can define a string or an array of string here. If multiple recipients are passed, the library will attach multiple keyprints of the public keys to the metadata of the encrypted file. So we can have one encrypted file for multiple public keys
        recipients=["ltquoctaidn98@gmail.com"],
        # Output file
        output=f"{path}.encrypted",
    )

print(status.ok)
print(status.stderr)
print("End time:", time.time() - start)

import gnupg
import time

gpg = gnupg.GPG(gnupghome="/any/folder")

# Import the private key
file_data = open("private_key.asc", "rb").read()
input_data: gnupg.ImportResult
input_data = gpg.import_keys(file_data)
gpg.trust_keys(input_data.fingerprints, "TRUST_ULTIMATE")

# Make sure the result of list_keys method is not empty
print(gpg.list_keys(True))

# Specify the encrypted file for decrypting
input_path = "/home/tai/Documents/High performance MySQL optimization, backups, and replication.pdf.encrypted"
output_path = "/home/tai/Documents/High performance MySQL optimization, backups, and replication2.pdf"
passphrase = "the_decryption_password"

start = time.time()
# We should always use "read binary" here, because it is the input of decrypt_file method
with open(input_path, "rb") as f:
    # As I already told, we need to detail the passphrase when decrypting
    status = gpg.decrypt_file(f, output=output_path, passphrase=passphrase)

print(status.ok)
print(status.stderr)
print("End time:", time.time() - start)