Contexto e âmbito
Esta página descreve as chaves PGP/OpenPGP oficiais utilizadas pelo CSIRT e pelo SOC da Cyberprotech, para encriptação de relatórios de incidente, validação de assinaturas digitais e proteção de informação sensível (TLP:AMBER ou superior).
Informação detalhada sobre a equipa, missão e serviços encontra-se no documento RFC 2350:
https://csirt.cyberprotech.org/rfc2350.txt
Chave PGP – SOC (Security Operations Center)
- Identidade associada
soc@cyberprotech.pt- Key ID
0x7B15CC152B5AEB4D- Fingerprint
B66C BE48 2CC6 DD3E 2204 5FBD 7B15 CC15 2B5A EB4D- Download da chave pública
-
cyberprotech-soc-public.asc
cyberprotech-soc-public.key - Keyserver
- keys.openpgp.org – pesquisa por soc@cyberprotech.pt
- Comandos GnuPG (exemplo)
-
gpg --keyserver hkps://keys.openpgp.org --search-keys soc@cyberprotech.pt
gpg --keyid-format LONG --fingerprint 0x7B15CC152B5AEB4D
Página detalhada da chave SOC: https://soc.cyberprotech.pt/pgp-soc.html
Chave PGP – CSIRT (Computer Security Incident Response Team)
- Identidade associada
csirt@cyberprotech.pt- Key ID
0x688950E724A946FB- Fingerprint
64AA 9C3F 6023 B651 BF03 3845 6889 50E7 24A9 46FB- Download da chave pública
-
pubkey.asc
cyberprotech-csirt-public.asc
cyberprotech-csirt-public.key - Keyserver
- keys.openpgp.org – pesquisa por csirt@cyberprotech.pt
- Comandos GnuPG (exemplo)
-
gpg --keyserver hkps://keys.openpgp.org --search-keys csirt@cyberprotech.pt
gpg --keyid-format LONG --fingerprint 0x688950E724A946FB
Ver bloco completo da chave pública CSIRT
-----BEGIN PGP PUBLIC KEY BLOCK----- xsFNBGkm5AcBEACvZgvnYURlWNULGF+gfmpSYlr0rCZY+cdrs3OYnlv85KpSScF6 DZSccGbh0MgyPpaghWjmEW1UFCxFkuaTMHgOlt8D13JTc9BkgKPuFa8raqVvfJp4 hFCSoY/LTeMKFiY9PhuyHybFmTiCtcS6NfzelWQfBE8YBqGjw0YTmPzQHkUyFzOr UoRhy06PoaePeYO1tWXuIb5iuVmkg5HEGJR+rFQ6+Qeni1IklTDdZK+vf9WMSCGA aAdjmkvC7+1c4ne8ByhkyuTEem5rzlidwx0hk6vZrg1xN24yTpQUsJZNFnRvCCKk 8DbzLoI++SOycgB6yJeeFWlT0yHwqzgcO0D9gGKAESGC1x2lTK3FK3ra42SZoNnW GRKsgmfg/h3cumrdmZBTxyoDLRe3+hf+s2IbM+Q30nfveht2M1EGhCPb8WLxUf5C PhONKFu3S4d8/DcnzecuIwi28VfJWv4m2vH/U9LaBVQLq9XYocy8xyGI6xLO82ZX t+sQ/R3gkDc1n+FWX2WJIuUMAg7wM0Za9q17tkwx8GhLrqFIDP3L4bCOCzUG+lx8 4XCKEYeX8dAsdzyrh8PAzo1DgBHdSiwHrasOEIQJUORGtMKu9P3faSsLdsTCCa3Z hXz3ciuQsOg8Xr0OcNQyqDEL8u0Dha2kKAQ8B2q6EHDhxwzK/FirKLPHYQARAQAB zSxDU0lSVCBAIEN5YmVycHJvdGVjaCA8Y3NpcnRAY3liZXJwcm90ZWNoLnB0PsLB jQQTAQgANxYhBGSqnD9gI7ZRvwM4RWiJUOckqUb7BQJpJuQIBQkJZgGAAhsDBAsJ CAcFFQgJCgsFFgIDAQAACgkQaIlQ5ySpRvsYhBAAiBeJahpfGV76yDvziRcf/cZO 49prer1k5VvMg3nBXNtuuOoFKJ8MTuIRBamaS3P/Y97ejrgRtldO/fN8Gaa5WxGR ARjKQ+Htch9LIfLW9N5xuJXTccEA53XDiM/+iGVQBjKy2qCJjTYLCxRUx+r7LLxX firjyPS2vIoTvnDLfPd7fFCmvjreWJN96qOoQIYn64V3KIpfPyiCWNwqL72np7z3 9RXzSVq9T+a3G8Y4cOY1hZ34as1dQLLrjnv7tXuUYAnDOpPr3PgM8PaS6pvW7JPV 2NmRvoLyN3HZVyqi1w4nCg//CKp8jcBIOhPRNXpGPIIhOCOOGiw06lnBZQC/du7Y yQ2WWnEeGJQJCHLR18VzE3BTvAH22Kw3yBAWgEuJrZOuvXxxibwZ0JT5S/xTYB87 cBXVdhNZ5q8xofsZGyeFas5M2kOAGIDPgN3hh6SQBcvJsnPc17P5hzmCyiE4ZlfC Z56TGEYHPCiMtnwwSNnCnJtz6azY2EBT+2r/IMKBgMSl0sRuP+aNNFCv9eHl6GWL A+IjC4zCKjUGwgbRnXMNI4VFbndcDZjyFZJjJbmepNdmXGsoxB0L0tbU3X9jMMFO VTSQwn4VSs3rQvwpKtmYiVMnvNSz3P0UCGUhz3/nXcZCmAAoQmeu8F+h98ozLdNh PBxharHlj8MBs4nZTe7OwU0EaSbkCQEQAMrLz4gMIdEdqWkTmLQBGywEcmWN3ri0 C0f5fWaiQBPTQ974rXP85i9tyZVF3HrozC49NPyvHVIpSfoS7pUwmtps0lUGnOTf 7y0v9Ogk5fMWCF1TDGnimGVIOP+k+44ej7GyWrf4KMag/fH8RXi+e78KIFYvsFJO gtay5ynIhUPOel8GRv+Kzgnr3TOyinJilzwkBuoY/16lAwZKHdKH+wtAZNET6+7l T7InuV3F/i7RcR4IvnOIsRzI1nB7DuU6gzWmnfJHzODUTSJswz9dVhpaz+Mk4bZj LPwf+QiEI2Jc9kFHJSwbkgLyAJncInjSgp+bmSKEjMC9als2SEXnP/B4172VKEHj oKSQAspKrPXJGJRdET86e03OBUZkpvIW3Dfs0FREVbYuuGXt7nW+vW15caK0rpzo 2kc/WgLV53VpRcWPPAIiqWahj/2HwltFJCaSeyA2+eWP+/rygPDbDYdVFsQm/lrk 9k+QKj2y5y8xU7TeSimsCU3DRWsHHxKVWGdYvA4u/KWS3ydykU9zvJtO0ADrKyla 1H+YW4rr0DBAUkHhCSC21YR8rkuI50b1LRhMDn+cRascy4guEIS3U6tKwBtkzbU1 NSDAO3/wN3Bd3QiIe2H+wTUbuFhL4PsTpG2sWZMD2nkC66AM3VNxE0gMT3z2wHv6 EA4wAPjVL0XFABEBAAHCwXwEGAEIACYWIQRkqpw/YCO2Ub8DOEVoiVDnJKlG+wUC aSbkCgUJCWYBgAIbDAAKCRBoiVDnJKlG+w+ZD/44oGWd5MO2dNoW1Go8ZvSnaQex yrAwUgAWXpskkBEnH9n0T7+4VB+9LIXu1TcJR+piiYe8PUubkL7nl/PY1VQcJ7QW yQrke0jiD8v5OcUh9PgAQB36CRS6f154K2BGlw851wPIMor0WqXQFl68VQpR5skI pxP2mWQEkqk+lNkwwVwg/k0rWfegNsEv5VH+4g9sFn+qGssvRiOvVXo1Fkjds5Ao B+wI5v6/RZPrgaVKI7ZvQQajC851dxZTLznyNMYCunThjrOGN5FGeWp2Pi6A3/dY Uf7Thx9G87j5ahRMr40dRvsBYAtsfkCFU68Ick8iXzGD5b5FCP76dl+JHePYnXF3 cVEpcBwltWijNoQWJ5jS3ppR94lL3gtVzLqhXXp9Z3+A576pUt+Ta6BrZu6np6Ln ICwH6cIOOchQ5yFVu+90I/y6uDuKoEgUXmnoR9Gbl+vig5pERaMstOG62JySJHQV Oo2t28YjviAB2jkdJddEddwNTj0SvV2ErU/UiRVE7yBaJO7ygSvrx0R9mMh24LaR JygDJN3QUm/1/zGgrEIOlCaAqRHomCumwLg3rxgUcA3N/jMS0wThvJQw2k7+b2ZY qjceIDXMP/CuqHoMmGKV1s2oeZGS0Hn+CVT+5v5i4WmBu9ficzOMxjQXk6hKx+co VhcqhNYgkmdywaAPJA== =yZNo -----END PGP PUBLIC KEY BLOCK-----
Página detalhada da chave CSIRT: https://csirt.cyberprotech.pt/pgp-csirt.html
Boas práticas de utilização
Antes de utilizar qualquer chave PGP, recomenda-se:
- Validar o fingerprint por canal independente (telefone ou reunião presencial).
- Utilizar sempre TLP adequado (WHITE, GREEN, AMBER, RED).
- Encriptar anexos sensíveis (logs, evidências, dumps) antes de enviar por e-mail.
TLP:WHITE
TLP:GREEN
TLP:AMBER
TLP:RED