Last updated: 2002-04-18
GnuPG 1.0.6

gpg(1)                                                     gpg(1)


NAME 程式名稱
       gpg -- encryption and signing tool
		編碼加密與簽證工具

SYNOPSIS 使用概要
       gpg  [--homedir name]  [--options file]  [options]  command  [args]
		家目錄		選項			   指令	     引數

DESCRIPTION 簡述
       gpg is the main program for the GnuPG system.
	GPG 是 GnuPG 系統的主程式

       This   man  page  only  lists  the  commands  and  options
       available.  For a more verbose documentation get  the  GNU
       Privacy    Handbook   (GPH),   which   is   available   at
       http://www.gnupg.org/gph/ .  You will find a list of HOWTO
       documents at http://www.gnupg.org/docs.html .
	本文內容僅列出可用的命令與選項，較深入的內容請參閱 GPH 手
	冊，該手冊可自 http://www.gnupg.org/gph/ (譯註：本連結目前
	已移至：http://www.gnupg.org/docs.html) 下載。另外可在
	http://www.gnupg.org/docs.html 找到 HOWTO 的文件列表。

COMMANDS 指令
       gpg recognizes these commands:
	GPG 所能運用的指令如下

       -s, --sign
                 Make  a  signature. This command may be combined
                 with --encrypt.
		將資料簽署編碼後輸出。本指令可與 --encrypt 合併使
		用。

       --clearsign
                 Make a clear text signature.
		直接對原始資料加入簽署資訊。(譯按：僅適用於文字資
		料)

       -b, --detach-sign
                 Make a detached signature.
		製作一份分離的簽署檔。(譯按：可用於非文字檔案)

       -e, --encrypt
                 Encrypt data. This option may be  combined  with
                 --sign.
		對資料編碼加密。本項可與 --sign 併用。

       -c, --symmetric
                 Encrypt   with   symmetric  cipher  only.   This
                 command asks for a passphrase.
		使用對稱式加密法處理資料。本指令會要求輸入密碼。

       --store   Store only (make a simple RFC1991 packet).
		僅對資料做編碼處理。(製作一份簡單的 RFC1991 封包)

       --decrypt [file]
                 Decrypt file (or stdin if no file is  specified)
                 and  write  it  to stdout (or the file specified
                 with --output). If the decrypted file is signed,
                 the  signature  is  also  verified. This command
                 differs from the default operation, as it  never
                 writes  to the filename which is included in the
                 file and it rejects files which don't begin with
                 an encrypted message.
		對檔案解密解碼 (如未指定檔案則對標準輸入做處理)
		並輸出至標準輸出設備 (或寫入至 --output 所指定的
		檔案中)。如果加密檔已經過簽署，則簽署資料將同時被
		驗證。本指令與內定的處理所不同是，它不會直接將輸
		出的資料寫入與原加密檔同名的檔案中，同時它也不會
		去處理未經編碼過的資料。

       --verify [[sigfile]  [signed-files]]
                 Assume that sigfile is a signature and verify it
                 without   generating   any   output.   With   no
                 arguments,  the  signature  packet  is read from
                 stdin.  If only a sigfile is given, it may be  a
                 complete  signature  or a detached signature, in
                 which case the signed stuff  is  expected  in  a
                 file  without  the  ".sig"  or ".asc" extension.
                 With more than 1 argument, the first should be a
                 detached  signature  and the remaining files are
                 the signed stuff.  To read the signed stuff from
                 stdin,  use  -  as  the  second  filename.   For
                 security reasons  a  detached  signature  cannot
                 read  the  signed  material  from  stdin without
                 denoting it in the above way.
		內定假設 sigfile 為一份簽署檔且在驗證後不產生任何
		輸出。若未在選項後加上任何引數，則簽署資料將自標
		準輸入端讀取。若引數僅有簽署檔 (sigfile)，它可能
		是一份完整的簽署或分離式簽署，在這情況下已簽署的
		資料將假設為沒有 .SIG 或 .ASC 副檔名的檔案。當引
		數不止一個時，第一個引數須為分離式簽署檔而其他的
		則是被簽署的檔案。要自標準輸入設備讀取被簽署的資
		料，請使用 - (譯註：減號) 為第二個檔案名稱。基於
		安全上的考量，分離式的簽署不能從標準輸入端無聲無
		息地讀取簽署後的資料如前述之做法。(譯按：使用 -)

       --verify-files [files]
                 This  is  a  special  version  of  the  --verify
                 command   which  does  not  work  with  detached
                 signatures.  The command expects the files to be
                 verified either on the command line or reads the
                 filenames from stdin;   each  name  must  be  on
                 separate line. The command is intended for quick
                 checking of many files.
		這是一個 --verify 指令的特別版，它並不用來驗證分
		離式簽署檔。本指令用以驗證已簽署過的檔案，檔案名
		稱可為指令的引數或自標準輸入設備輸入；每一個欲驗
		證的檔案名稱須位在每一個獨立列中 (譯註：不可將許
		多檔名置於同一列中而以空格或符號分隔)。本指令的目
		地在於同時快速驗證許多檔案。

       --list-keys [names]

       --list-public-keys [names]
                 List all keys from the public keyrings, or  just
                 the ones given on the command line.
		列出所有在公鑰匙圈中的公鑰，或僅列出指令之引數
		names 在公鑰匙圈中的公鑰資訊。(譯註：與上方指令相
		同)

       --list-secret-keys [names]
                 List  all keys from the secret keyrings, or just
                 the ones given on the command line.
		列出所有在私鑰匙圈中的私鑰，或僅列出引數所指定的
		私鑰資訊。

       --list-sigs [names]
                 Same as  --list-keys,  but  the  signatures  are
                 listed too.
		同上 --list-keys 指令，但是簽署資訊也會一併列出。

       --check-sigs [names]
                 Same  as  --list-sigs,  but  the  signatures are
                 verified.
		同上 --list-sigs 指令，但是簽署資訊會經過驗證。

       --fingerprint [names]
                 List all keys with their fingerprints.  This  is
                 the  same  output  as  --list-keys  but with the
                 additional   output   of   a   line   with   the
                 fingerprint.  May  also be combined with --list-
                 sigs or --check-sigs.  If this command is  given
                 twice,  the  fingerprints  of all secondary keys
                 are listed too.
		列出所有公鑰的指紋。這個指令輸出與 --list-keys 相
		同的資訊，但另外多了一行公鑰指紋的資料。本指令可
		與 --list-sigs 或 --check-sigs 併用。若本指令同時
		使用兩次，則會將所有副鑰的指紋也全部列出。

       --list-packets
                 List only  the  sequence  of  packets.  This  is
                 mainly useful for debugging.
		列出編碼封包的編碼脈絡。本指令在除錯時相當有用。

       --gen-key Generate   a  new  key  pair.  This  command  is
                 normally only used interactively.
		產生一雙新的鑰匙對。這個指令通常只被用於使用者與
		電腦的對話模式。(譯按：本句譯文可能有誤，請以原文
		為據。原意可能意指本命令非用於批次作業。)

                 There is an experimental  feature  which  allows
                 you  to  create keys in batch mode. See the file
                 doc/DETAILS in the source distribution on how to
                 use this.
		另外有一個實驗中的功能讓你可以用批次作業來產生鑰
		匙對。請閱讀原始碼中 doc/DETAILS 來了解如何從事這
		項作業。

       --edit-key name
                 Present  a  menu which enables you to do all key
                 related tasks:
		在現有的功能表中，有下列與鑰匙對相關的工作：

                 sign      Make a signature on key of  user  name
                           If  the  key  is not yet signed by the
                           default user (or the users given  with
                           -u),    the   program   displays   the
                           information of the key again, together
                           with  its fingerprint and asks whether
                           it should be signed. This question  is
                           repeated  for all users specified with
                           -u.
			對一個使用者的鑰匙作簽署，如果該鑰匙未還
			未被內定使用者簽署 (或是由 -u 所指定的使
			用者)，程式將再一次顯示該鑰匙的資訊與指紋
			碼，並且詢問是否需對該鑰匙作簽署，詢問會
			一直重覆至所有 -u 指定的使用者結束。

                 lsign     Same as --sign but  the  signature  is
                           marked   as  non-exportable  and  will
                           therefore never  be  used  by  others.
                           This  may  be  used to make keys valid
                           only in the local environment.
			作用如 --sign 一般，但簽署會標記為無法輸
			出，且將不會被其他使用者使用。這可用來使
			鑰匙僅可運用於區域環境內。

                 revsig    Revoke a signature.   GnuPG  asks  for
                           every signature which has been done by
                           one of  the  secret  keys,  whether  a
                           revocation   certificate   should   be
                           generated.
			廢除一個簽署。每一個經由私鑰所完成的簽署
			GnuPG 都會一一詢問，是否每個廢除證明都要
			被產生。

                 trust     Change the  owner  trust  value.  This
                           updates  the  trust-db immediately and
                           no save is required.
			更改擁有者信任值。這個動作將會立即更新信
			任資料庫而不須另做儲存。

                 disable

                 enable    Disable or enable  an  entire  key.  A
                           disabled  key can normally not be used
                           for encryption.
			上面的停用與此處的啟用功能，是對一個完整
			的鑰匙作用。被停用的鑰匙其通常將無法再被
			用來做為編碼加密的依據。

                 adduid    Create an alternate user id.
			增加一個替代的使用者名稱。

                 deluid    Delete a user id.
			刪除一個使用者名稱。

                 addkey    Add a subkey to this key.
			增加一個副鑰至該鑰匙。

                 delkey    Remove a subkey.
			移除一個副鑰。

                 revkey    Revoke a subkey.
			廢除一個副鑰。

                 expire    Change the key expiration time.  If  a
                           key  is selected, the time of this key
                           will be changed.   With  no  selection
                           the  key expiration of the primary key
                           is changed.
			更改鑰匙的使用期限。如果有特定的鑰匙被選
			擇，則該鑰匙的使用期限會更動；若未選擇特
			定的鑰匙，那麼就是主鑰匙的時限會被更改。

                 passwd    Change the passphrase  of  the  secret
                           key.
			更改秘鑰的密碼。

                 uid n     Toggle selection of user id with index
                           n.  Use 0 to deselect all.
			以序號 n 來選取使用者名稱。使用序號 0 來
			取消所有已選取的使用者。

                 key n     Toggle selection of subkey with  index
                           n.  Use 0 to deselect all.
			以序號 n 來選取副鑰。若使用序號 0 則取消
			原先所有已選取的部分。

                 check     Check all selected user ids.
			檢查所有被選取的使用者。

                 pref      List preferences.
			列示鑰匙的設定內容。

                 showpref  More verbose preferences listing.
			同上，但以文字代替符號來顯示內容。

                 toggle    Toggle  between  public and secret key
                           listing.
			切換公鑰與私鑰清單。

                 save      Save all changes to the key rings  and
                           quit.
			儲存所有的更動至鑰匙圈並退出。

                 quit      Quit  the program without updating the
                           key rings.
			退出程式並且不儲存之前的修改。

                 The listing shows you the key with its secondary
                 keys and all user ids. Selected keys or user ids
                 are indicated by an asterisk. The trust value is
                 displayed with the primary key: the first is the
                 assigned owner  trust  and  the  second  is  the
                 calculated  trust  value.   Letters are used for
                 the values:
		進入編輯模式後，程式會列示出該鑰匙及所有它的副鑰
		與使用者名稱。在被選取的使用者或鑰匙前會以一個星
		號標示出來。信任值所顯示的是主鑰的狀態：第一個值
		是屬於被指定擁有者的信任值；而第二個值是經計算的
		信任值。信任值由下列的字母及符號來代表。

                 -         No  ownertrust  assigned  /  not   yet
                           calculated.
			沒有擁有者信任值被指定 / 尚未被計算該值

                 e         Trust calculation has failed; probably
                           due to an expired key.
			信任值的計算失敗，可能是因為鑰匙過期了。

                 q         Not     enough     information     for
                           calculation.
			沒有足夠的資訊來做計算。

                 n         Never trust this key.
			不信任此鑰匙。

                 m         Marginally trusted.
			勉強算是信任。
			

                 f         Fully trusted.
			信任。

                 u         Ultimately trusted.
			非常信任。

       --sign-key name
                 Sign  a public key with your secret key. This is
                 a shortcut version of the subcommand "sign" from
                 --edit.
		以你的私鑰對一個公鑰作簽署。這算是一個捷徑，用來
		代替 --edit 指令內的副指令 sign 。

       --lsign-key name
                 Sign  a public key with your secret key but mark
                 it  as  non-exportable.   This  is  a   shortcut
                 version of the subcommand "lsign" from --edit.
		以你的私鑰對一個公鑰作簽署，但它會被記為不可輸出
		的簽署。如上一般它也是一個 --edit 的捷徑，作用如
		lsign 副指令。

       --trusted-key long key ID
                 Assume  that  the  specified  key (which must be
                 given  as  a   full  8  byte  key  ID)   is   as
                 trustworthy as one of your own secret keys. This
                 option is useful if you don't want to keep  your
                 secret  keys  (or  one of them) online but still
                 want to be able to check the validity of a given
                 recipient's or signator's key.
		假設被指定的鑰匙 (該鑰必須由完整 8byte 使用者代號
		來指定) 是一個如同你自己的私鑰一樣可以被信賴。當
		你不願意讓你的私鑰 (或任一私鑰) 保留在線上，而你
		仍希望能繼續檢查收件者或簽署者的鑰匙時，這個選項
		將會相當好用。

       --delete-key name
                 Remove key from the public keyring
		自公鑰鑰匙圈將一把鑰匙移除。

       --delete-secret-key  name
                 Remove key from the secret and public keyring
		同時將一把鑰匙從公鑰及私鑰鑰匙圈中移除。

       --delete-secret-and-public-key  name
                 Same  as  --delete-key,  but  if  a  secret  key
                 exists, it will be removed first.
		功能同 --delete-key，但若是私鑰也存在時則先將私鑰
		移除。

       --gen-revoke
                 Generate  a  revocation  certificate   for   the
                 complete key. To revoke a subkey or a signature,
                 use the --edit command.
		對一把鑰匙製作一個廢除認證。如果是要廢除副鑰或簽
		署，應使用 --edit 指令為之。

       --export [names]
                 Either  export  all  keys  from   all   keyrings
                 (default   keyrings  and  those  registered  via
                 option --keyring), or if at least  one  name  is
                 given,  those of the given name. The new keyring
                 is written to stdout or to the file  given  with
                 option  "output".   Use together with --armor to
                 mail those keys.
		輸出所有在鑰匙圈中的公鑰 (包含了內定的鑰匙圈或是
		由選項 --keyring 登記的鑰匙圈)，或輸出引數所指定
		名字的公鑰。輸出的鑰匙圈會寫至標準輸出設備，或寫
		至 --output 所指定的檔案中。若併用 --armor 可輸出
		為純文字內容以便使用電子郵件將公鑰傳出。


       --send-keys [names]
                 Same  as  --export  but  sends  the  keys  to  a
                 keyserver.   Option  --keyserver must be used to
                 give the name of this keyserver. Don't send your
                 complete  keyring  to  a keyserver - select only
                 those keys which are new or changed by you.
		作用如 --export 一般，但輸出的公鑰會傳送至公鑰伺
		服器。使用選項 --keyserver 必須同時使用，並指定欲
		上傳的公鑰伺服器名稱。請勿上傳你完整的鑰匙，僅需
		送出你修改過或新產生的鑰匙即可。

       --export-all [names]
                 Same as --export, but also  exports  keys  which
                 are not compatible with OpenPGP.
		作用如 --export 一般，但會連同一些與 OpenPGP 不相
		容的鑰匙一併輸出。

       --export-secret-keys [names]

       --export-secret-subkeys [names]
                 Same  as  --export,  but exports the secret keys
                 instead.  This is normally not very useful and a
                 security  risk.   The second form of the command
                 has the special property to  render  the  secret
                 part  of  the primary key useless; this is a GNU
                 extension to OpenPGP and  other  implementations
                 can  not be expected to successfully import such
                 a key.
		作用如 --export 類似，但輸出的是私鑰的內容。這個
		指令並不常用，而且有安全上的風險存在。第二列的指
		令具有特殊的內容來展現主鑰無用的機密部分。(譯按：
		本句譯文可能有誤，請以原文為據。) 這是一個 GNU
		外加至 OpenPGP 的功能，並且本功能無法預期可以在某
		些其他的 OpenPGP 程式中，成功地將私鑰輸入。

       --import [files]

       --fast-import [files]
                 Import/merge keys. This adds the given  keys  to
                 the  keyring.   The  fast version does not build
                 the trustdb; this can be done at any  time  with
                 the command --update-trustdb.
		此處兩個指令用來將鑰匙 (譯註：含公鑰與私鑰，如果
		私鑰存在的話) 加入鑰匙圈。快速模式(--fast-import)
		的作用會少了信任資料的建立；信任資訊可以隨時以指
		令 --update-trustdb 來加入。

                 There  are a few other options which control how
                 this command works.  Most notable  here  is  the
                 --merge-only  option  which  does not insert new
                 keys  but  does  only   the   merging   of   new
                 signatures,  user-IDs and subkeys.  See also the
                 option --allow-secret-key-import.
		另外還有一些其他的選項能控制本指令的運作。在這裏
		比較顯著的例子是 --merge-only 選項，它將會使輸入
		的內容不含新鑰匙，而只輸入新的簽署、使用者名稱、
		副鑰等內容。請同時參考 --allow-secret-key-import
		選項。

       --recv-keys key IDs
                 Import the keys with the given key  IDs  from  a
                 HKP  keyserver.  Option --keyserver must be used
                 to give the name of this keyserver.
		從 HKP 公鑰伺服器上下載一個使用者的鑰匙。此刻須同
		時使用 --kerserver 選項，並給定一定欲連接的公鑰伺
		服器名稱。

       --export-ownertrust
                 List the assigned  ownertrust  values  in  ASCII
                 format for backup purposes.
		列出被指定的擁有者信任值為文字格式，以利於備份時
		使用。(譯註：它會輸出至標準輸出設備，可配合
		--output 使用寫至檔案。)

       --import-ownertrust [files]
                 Update  the  trustdb  with the ownertrust values
                 stored  in  files  (or  stdin  if  not   given);
                 existing values will be overwritten.
		從引數的檔案輸入 (若沒有指定檔案則自標準輸入設備
		輸入) 擁有者信任值，更新信任資料；如果信任值已經
		存在時，則現存值將會被覆寫。

       --print-md algo [files]
                 Print  message  digest of algorithm ALGO for all
                 given files of stdin.  If "*" is  used  for  the
                 algorithm,  digests for all available algorithms
                 are printed.
		以 ALGO 所指定的演算法，計算出檔案的信息摘要值列
		出。如果 "*" 取代引數 ALGO 時，則信息摘要值會以所
		有可用的演算法來計算並列出。(譯註：據實際在 NT 與
		Win98 的 DOS 視窗中使用的經驗，與自 GnuPG mailing
		list 所得到的答案，可以使用的方式如下：
			--print-mds [files]
			--print-md "*" [files]
		上列兩種皆可以正確使用無誤。至於在 Linux 環境下除
		上列 Win32 的兩種之外，還可使用如下方式：
			--print-md '*' [files]
			--print-md \* [files]
		至於其他平台請自行測試。)

       --gen-random 0|1|2                 [count]
                 Emit COUNT random bytes  of  the  given  quality
                 level. If count is not given or zero, an endless
                 sequence  of  random  bytes  will  be   emitted.
                 PLEASE,  don't  use this command unless you know
                 what you  are  doing;  it  may  remove  precious
                 entropy from the system!
		以引數所指定的等級來散發亂數計數位元組。如果引數
		為零或未指定，則一組無窮的亂數計數位元組數列將被
		散發。
		請注意：除非很清楚本指令的用途，否則請勿使用；它
		可能自系統將原有的一致性移除。(譯按：本段翻譯可能
		有誤，請以原文為據)

       --gen-prime mode                  bits             [qbits]
                 Use the source, Luke :-). The output  format  is
                 still subject to change.
		閱讀原始碼吧。輸出格式還會改變。
		(譯者目前不明白本段內容。下方是譯者得自 GPG
		mailing list 的答案，以下內容是由 John Kane
		[jkane89@softhome.net] 所答覆。)

	===== BEGIN of John Kane's answer about PRIME =====
	Yes, this is not written well, and you should re-write it
	instead of trying to translate it.  This command is
	experimental.
	沒錯，這部分寫的不是很好，你可能需要改寫它而不是試著直接
	翻譯這部分。這是個實驗中的選項不適用於一般的使用者。

	If you set 'mode' to be 1, it generates or calculates a
	large prime number.  'Bits' is the size. If 'mode' is 2,
	'qbits' is the length of a short prime; gnupg makes a big
	prime 'p' and a small prime 'q', then multiplies p*q and
	shows the result.
	如果將 'mode' 設為 1，則會產生或計算出一個大的質數；
	'bits' 是數的大小；'qbits' 是質數的長度。如果 'mode' 為
	2，GnuPG 會製作一個大的質數 'p' 和一個小的質數 'q'，然後
	以 p*q 增值並回覆結果。

	Try " --gen-prime 1 300 " and " --gen-prime 2 300 50 ".
	可以試試 "--gen-prime 1 300" 和 "--gen-prime 2 300 50"

	   --gen-prime n p_bits [q_bits]
	        When n is 1, this makes a large prime P.  When n
	        is 2, makes two primes, one 'p_bits' long, the
		other 'q_bits' long, calculates P*Q and prints
		the result.
	        This command is experimental; it may change in
	        later version of gnupg.
		當 n 為 1 時，程式會產生一個大的質數。當 n 為 2
		時，程式會產生兩個質數；一個長度為 p_bits；另一
		個長度為 q_bits，計算 P 乘 Q 並列出結果。
		這是一個實驗中的選項，在未來的版本可能會做修改。
		(譯按：本段內容由 John Kane 改寫，提供大家參考。
		原始的回覆還包含 John 對 man page 的一些看法，因
		為與本段無關而略去。僅在此對他說聲抱歉，並且非常
		感謝 John Kane[jkane89@softhome.net] 的解說！)

	I am very appreciate John Kane's answer. Thanks!
	===== END of John Kane's answer about PRIME =====

       --version 
                 Print  version  information along with a list of
                 supported algorithms.
		列示版本資訊以及被支援的演算法。

       --warranty
                 Print warranty information.
		顯示授權資訊。

       -h, --help
                 Print usage information.  This is a really  long
                 list even though it doesn't list all options.
		顯示使用者求助資訊。即使此處所顯示的並不是所有的
		選項，它依舊是一份相當長的列表。

OPTIONS 選項
       Long  options  can  be  put  in  an  options file (default
       "~/.gnupg/options").  Do  not  write  the  2  dashes,  but
       simply  the name of the option and any required arguments.
       Lines with a hash as the first  non-white-space  character
       are  ignored.  Commands  may  be put in this file too, but
       that does not make sense.
	以完整文字 (譯註：非簡寫指令，但功能與簡寫指令相同) 所表
	示之選項，可以用於選項檔中 (預設為“~/.gunpg/options”，
	譯註：在 Win32 的版本中，預設為 C:\GNUPG\options)。在將選
	項加入選項檔時，僅需寫入選項指令名稱以及該指令所需的引數
	即可，而不用把兩個減號 (--) 也加入。每行第一個非空白字元
	若為 "#" 符號時，則該行會被忽略。指令亦可加入選項檔中來使
	用，但這麼做沒什麼意義就是了。

       gpg recognizes these options:
	GPG 能識別的選項如下：

       -a, --armor
                 Create ASCII armored output.
		將保護的訊息以 ASCII 文字格式輸出。

       -o, --output file
                 Write output to file.
		將輸出的內容寫至引數所指定的檔案中。

       -u, --local-user name
                 Use name as the user ID to sign.  This option is
                 silently  ignored for the list commands, so that
                 it can be used in an options file.
		以引數的使用者名稱做為使用者的身份來簽署。這個選
		項在有關列示的指令時會被默默地忽略，所以它可以被
		用來放在選項檔中。

       --default-key name
                 Use name as default user ID for signatures.   If
                 this  is  not  used  the  default user ID is the
                 first user ID found in the secret keyring.
		將使用者名稱設為在簽署時的預設使用者。如果這個使
		用者名稱，不是在私鑰匙圈中的第一個使用者時，可以
		本選項設定為預設使用者。

       -r, --recipient name
                 Encrypt for user id name. If this option is  not
                 specified,  GnuPG  asks  for  the user-id unless
                 --default-recipient is given
		將引數中的使用者設為收件者之一，訊息將以其公鑰來
		加密。除非預設收件者 (--default-recipient) 已被設
		定，否則本選項未被使用時，那麼 GnuPG 會請求輸入收
		件者名稱。

       --default-recipient name
                 Use  name  as  default   recipient   if   option
                 --recipient is not used and don't ask if this is
                 a valid one. name must be non-empty.
		如果 --recipient 未被設定或指出，則引數中的使用者
		將設為內定收件者，而本選項的引數若為一個存在且可
		用的名稱時，程式不會要求輸入收件者的名稱。

       --default-recipient-self
                 Use the default  key  as  default  recipient  if
                 option  --recipient is not used and don't ask if
                 this is a valid one.  The  default  key  is  the
                 first one from the secret keyring or the one set
                 with --default-key.
		使用預設公鑰為內定收件者，若 --recipient 未被設定
		或指出，且此為一可用的名稱時，則程式將不詢問也不
		要求輸入使用者名稱。預設公鑰是在私鑰匙圈中的第一
		個使用者名稱，或是以 --default-key 選項被設為內定
		使用者。

       --no-default-recipient
                 Reset   --default-recipient    and    --default-
                 recipient-self.
		重新設定預設收件者 (--default-recipient) 和系統預
		設收件者 (--default-recipient-self)。

       --encrypt-to name
                 Same as --recipient but this one is intended for
                 use in the options file and  may  be  used  with
                 your own user-id as an "encrypt-to-self".  These
                 keys  are  only  used  when  there   are   other
                 recipients given either by use of --recipient or
                 by the asked user  id.   No  trust  checking  is
                 performed  for  these user ids and even disabled
                 keys can be used.
		作用如 --recipient 一樣，但本選項的用意在於加入選
		項檔中來使用，以及使用在以您個人的使用者名稱來加
		密的場合。當有其他的收件者名稱被指定時 (不論是由
		--recipient 所設定，或是由程式要求輸入者) ，這些
		公鑰會在此時有作用。在本選項所指定的使用者將不會
		做信任檢查，而且即使是停用的公鑰仍舊能被使用。

       --no-encrypt-to
                 Disable the use of all --encrypt-to keys.
		停用 --encrypt-to 選項所指定的鑰匙。

       -v, --verbose
                 Give more information during processing. If used
                 twice, the input data is listed in detail.
		可使程式在處理過程中顯示更多的訊息 (譯按：以供使
		用者參考) 。如果本選項重覆使用兩次則會列出更詳細
		的資訊。

       -q, --quiet
                 Try to be as quiet as possible.
		試著儘可能不輸出訊息。

       -z n      Set  compression  level to n. A value of 0 for n
                 disables compression.  Default  is  to  use  the
                 default  compression level of zlib (normally 6).
		設定壓縮等級為 n，而當 n 的值為 0 時則不壓縮。預
		設值為使用 zlib 的壓縮等級 (通常為 6)。

       -t, --textmode
                 Use  canonical  text  mode.   If  -t  (but   not
                 --textmode)  is  used together with armoring and
                 signing,  this  enables  clearsigned   messages.
                 This  kludge  is  needed  for PGP compatibility;
                 normally you would use --sign or --clearsign  to
                 selected the type of the signature.
		使用標準文字模式。如果使用 -t (注意！不是
		-textmode) 選項並同時用了文字編碼以及簽署等選項，
		則本選項會將簽署資料直接加入訊息之中，如使用
		clearsign 一般。為了要與 PGP 相容的原故，這種拼湊
		的做法是必須的；通常我們會選用 --sign 或者是
		--clearsign 來決定簽署的型態。

       -n, --dry-run
                 Don't  make  any changes (this is not completely
                 implemented).
		不做任何改變。(本選項尚未完成)

       -i, --interactive
                 Prompt before overwriting any files.
		當要對任何檔案做覆寫前先顯示提示語。

       --batch   Use  batch  mode.   Never  ask,  do  not   allow
                 interactive commands.
		使用批次摸式。不用問了，它不支援交談模式的命令。

       --no-tty  Make  sure that the TTY (terminal) is never used
                 for any output.  This option is needed  in  some
                 cases because GnuPG sometimes prints warnings to
                 the TTY if --batch is used.
		強制不將輸出結果送到 TTY (終端機)。本選項在某些時
		候是必須的，因為 GnuPG 在使用批次模式 (--batch)
		時，可能會傳送一些警語到終端機上。

       --no-batch
                 Disable batch mode.   This  may  be  of  use  if
                 --batch is enabled from an options file.
		停用批次模式。這個的使用時機是當已經使用批次模式
		(--batch) 在選項檔中時。

       --yes     Assume "yes" on most questions.
		假設所有需要回應的答覆皆為 "是"。

       --no      Assume "no" on most questions.
		假設所有需要回應的答覆皆為 "否"。

       --always-trust
                 Skip  key  validation  and assume that used keys
                 are always fully trusted.  You  won't  use  this
                 unless   you   have   installed   some  external
                 validation scheme.
		省略鑰匙的確認動作，並假設所有使用的鑰匙都是可以
		被完全信任的。除非你已經安裝了其他外部的確認工具
		程式，否則你應該用不到這個選項。

       --keyserver name
                 Use name to lookup keys which  are  not  yet  in
                 your keyring.  This is only done while verifying
                 messages with signatures.  The  option  is  also
                 required  for the command --send-keys to specify
                 the keyserver to where the keys should be  send.
                 All  keyservers synchronize with each other - so
                 there is no need to send keys to more  than  one
                 server.   Using  the  command "host -l pgp.net |
                 grep wwwkeys" gives you a  list  of  keyservers.
                 Because  there  is  load  balancing using round-
                 robin DNS you may notice that you get  different
                 key servers.
		當某個使用者還不在你的鑰匙圈中時，此選項可以使用
		者名稱去找公鑰來使用。這選項僅在做驗證訊息與簽署
		時可用。當使用了傳送公鑰 (--send-keys) 選項時，此
		選項也同時需要，並且是用來指定公鑰伺服器，使公鑰
		可以被傳送到正確的伺服器上。所有的公鑰伺服器會相
		互做資料同步，所以並不需要將公鑰傳送到超過一個以
		上的伺服器上。你可以使用指令
			host -l pgp.net | grep wwwkeys
		來得到公鑰伺服器的列表，因為負載平衡使用循環式
		DNS 的緣故，你可能會發現你會得到不同公鑰伺服器的
		列表。

       --no-auto-key-retrieve
                 This option disables the automatic retrieving of
                 keys   from   a   keyserver   while    verifying
                 signatures.  This  option  allows  you to keep a
                 keyserver in the options file  for  the  --send-
                 keys and --recv-keys commands.
		當簽署的驗證動作在進行時，此選項是將自動從公鑰伺
		服器下載公鑰的功能停用。此選項允許你保留公鑰伺服
		器在選項檔中，以利傳送公鑰 (--send-keys) 和下載公
		鑰 (--recv-keys) 兩個選項使用。

       --honor-http-proxy
                 Try  to  access the keyserver over the proxy set
                 with the variable "http_proxy".
		嘗試透過代理伺服器來連接公鑰伺服器，其中代理伺服
		器是由 "http_proxy" 變數來設定。

       --keyring file
                 Add file to  the  list  of  keyrings.   If  file
                 begins  with  a  tilde  and  a  slash, these are
                 replaced by the HOME directory. If the  filename
                 does not contain a slash, it is assumed to be in
                 the home-directory ("~/.gnupg" if  --homedir  is
                 not  used).  The filename may be prefixed with a
                 scheme:

                 "gnupg-ring:" is the default one.

                 "gnupg-gdbm:" may be used for a GDBM ring.  Note
                 that  GDBM  is  experimental  and  likely  to be
                 removed in future versions.
		加入一個檔案到公鑰匙圈中。如果引數 "file" 由～或
		／符號起始時，那麼它們會以家目錄 (home) 來取代。
		(譯按：Win32 系統雖有類似家目錄的設定－在
		\WINxx\Profiles\username－卻不完全與 unix 系統相
		同，目前譯者尚未測試本選項的實際使用結果。) 如果
		檔名不包含／符號，它將被假設為在家目錄中
		("~/.gnupg" 如果 --homedir 未被設定使用。) 檔名會
		有一前置字的配合：
		"gnupg-ring:" 是預設值。
		"gnupg-gdbm:" 可被用來做為 GDBM 鑰匙圈。請注意
		GDBM 是一個實驗選項，而且可能會在未來的版本中會移
		除。(譯按：本段請參考原文以得正確意義。)

                 It might make sense  to  use  it  together  with
                 --no-default-keyring.
		此選項也可與無預設公鑰匙圈 (--no-default-keyring)
		併用。

       --secret-keyring file
                 Same as --keyring but for the secret keyrings.
		同前 --keyring 用法，不過在此用於處理私鑰匙圈。

       --homedir directory
                 Set  the name of the home directory to directory
                 If this  option  is  not  used  it  defaults  to
                 "~/.gnupg".  It  does not make sense to use this
                 in a  options  file.  This  also  overrides  the
                 environment variable "GNUPGHOME".
		設定引數為家目錄名稱。但是如果這個選項不被使用在
		預設目錄 "~/.gnupg" (譯按：Win32 為 C:\gnupg 或是
		在 registry 中所設的 homedir) 的選項檔中，那麼它
		實在沒什麼意義。此選項會覆蓋環境變數 "GNUPGHOME"
		所設的值。

       --charset name
                 Set  the name of the native character set.  This
                 is used to convert some strings to proper  UTF-8
                 encoding.  Valid values for name are:
		設定本地字元集。這是用來將某些字串轉換為適當的
		UTF-8 編碼。可用以做為引數的值有：

                 iso-8859-1
                           This is the default Latin 1 set.
			這是預設的拉丁字集一。

                 iso-8859-2
                           The Latin 2 set.
			拉丁字集二。

                 koi8-r    The usual Russian set (rfc1489).
			通用俄羅斯字集 (RFC1489)。

                 utf-8     Bypass  all  translations  and  assume
                           that  the   OS   uses   native   UTF-8
                           encoding.
			省略所有的轉碼工作並假設作業系統使用了本
			地字集的 UTF-8 編碼。

       --utf8-strings

       --no-utf8-strings
                 Assume  that  the arguments are already given as
                 UTF8 strings.  The  default  (--no-utf8-strings)
                 is  to  assume that arguments are encoded in the
                 character set as specified by  --charset.  These
                 options  affect  all  following arguments.  Both
                 options may be used multiple times.
		假設引數已經以 UTF8 設定好了。預設值
		(--no-utf8-strings) 是假設引數內容已用 --charset
		選項將字元集設定好，所有在本選項後的引數都將會受
		到影響，上列的兩個選項都可以被多次使用。

       --options file
                 Read options from file and do not  try  to  read
                 them  from  the  default  options  file  in  the
                 homedir (see --homedir). This option is  ignored
                 if used in an options file.
		自引數所指定的檔案讀取選項設定，並且試著不自預設
		的目錄 (參考 --homedir 選項) 讀取選項檔內容。當這
		個選項被使用在一個選項檔中時它將會被忽略。

       --no-options
                 Shortcut for "--options /dev/null".  This option
                 is detected before an attempt to open an  option
                 file.
		本選項是 "--options /dev/null" 的捷徑。這是用來避
		免讀取選項檔的方法。

       --load-extension name
                 Load  an  extension  module.  If  name  does not
                 contain   a   slash   it    is    searched    in
                 "/usr/local/lib/gnupg"  See  the manual for more
                 information about extensions.
		載入一個延伸模組。如果模組名稱不包含斜線字元 (譯
		按：指 unix 系統的根目錄 "/") 時，則搜尋的路徑會
		從 "/usr/local/lib/gnupg" (譯按：Win32 版本應該是
		從 "C:\gnupg"，譯者未做過測試，請自行試用。) 開始
		，請參閱使用手冊來了解更多有關延伸模組的資訊。

       --debug flags
                 Set debugging flags. All  flags  are  or-ed  and
                 flags may be given in C syntax (e.g. 0x0042).
		設定除錯旗標。所有的旗標以 OR 運算，而旗標可利用
		C 的語法給定 (例如：0x0042)。(譯按：由於譯者不諳
		程式語言，本段譯文將有誤謬，請參考原文以為核。)

       --debug-all
                 Set all useful debugging flags.
		設定所有在除錯上有用的旗標。

       --status-fd n
                 Write   special   status  strings  to  the  file
                 descriptor n.   See  the  file  DETAILS  in  the
                 documentation for a listing of them.
		將特殊狀態字串記錄到檔案 (引數 n) 之中。有關所有
		的狀態字串可在文件目錄中 (譯註：GPG_SOURCE\doc\)
		的檔案 DETAILS 看到。

       --logger-fd n
                 Write log output to file descriptor n and not to
                 stderr.
		將記錄輸出到檔案 (引數 n) 之中，而不直接輸出到標
		準錯誤輸出。

       --no-comment
                 Do  not  write  comment  packets.   This  option
                 affects    only   the   generation   of   secret
                 keys.  Please note, that this has nothing to  do
                 with the comments in clear text signatures.
		不將註解封包輸出。這個選項只在產生私鑰時有作用。
		請注意，這個選項不會對文字直接簽署的註解作用。

       --comment string
                 Use  string  as  comment  string  in  clear text
                 signatures.  To suppress those  comment  strings
                 entirely, use an empty string here.
		在簽署中以引數的字串做為註解。如果要隱藏所有的註
		解文字，只要使引數空白即可。

       --default-comment
                 Force  to  write  the standard comment string in
                 clear text signatures.  Use this to overwrite  a
                 --comment from a config file.
		將標準註解強制加入到簽署內容。使用這個選項來覆寫
		選項檔中 --comment 所指定的註解文字。

       --no-version
                 Omit   the   version   string   in   clear  text
                 signatures.
		在簽署內容中省略版本宣告。

       --emit-version
                 Force to write the version string in clear  text
                 signatures.   Use  this  to overwrite a previous
                 --no-version from a config file.
		強制將版本宣告字串加入文件簽署中。使用本選項來覆
		蓋選項檔中 --no-version 選項。

       -N, --notation-data name=value
                 Put the name value pair into  the  signature  as
                 notation   data.   name  must  consist  only  of
                 alphanumeric   characters,   digits    or    the
                 underscore;  the  first  character must not be a
                 digit.  value may be any  printable  string;  it
                 will  be  encoded  in  UTF8, so you should check
                 that your --charset is set  correctly.   If  you
                 prefix   name  with  an  exclamation  mark,  the
                 notation  data  will  be  flagged  as   critical
                 (rfc2440:5.2.3.15).

       --set-policy-url string
                 Use   string   as   Policy  URL  for  signatures
                 (rfc2440:5.2.3.19).  If you prefix  it  with  an
                 exclamation  mark, the policy URL packet will be
                 flagged as critical.

       --set-filename string
                 Use string as the name of file which  is  stored
                 in messages.
		將引數的文字設為檔案名稱並存入訊息之中。(譯註：本
		選項於加密時使用，應配合下一個選項。)

       --use-embedded-filename
                 Try  to create a file with a name as embedded in
                 the data.  This can be a dangerous option as  it
                 allows to overwrite files.
		試著產生以訊息原先儲存的檔案名稱來命名的檔案。這
		可能是一個危險的選項，因為它會直接覆寫已存在的同
		名檔案。(譯註：本選項於解密時使用，應配合上一個選
		項使用。)

       --completes-needed n
                 Number  of completely trusted users to introduce
                 a new key signer (defaults to 1).

       --marginals-needed n
                 Number of marginally trusted users to  introduce
                 a new key signer (defaults to 3)

       --max-cert-depth n
                 Maximum  depth of a certification chain (default
                 is 5).

       --cipher-algo name
                 Use   name  as  cipher  algorithm.  Running  the
                 program with the command --version yields a list
                 of supported algorithms. If this is not used the
                 cipher    algorithm   is   selected   from   the
                 preferences stored with the key.
		指定以引數 name 所設的加密演算法做加密運算。如果
		所指定的演算法不與所選用的公鑰其演算法相符時，請
		執行程式並使用指令 --version 來顯示所有支援的演算
		法。(譯按：本段內容請以原文為準，譯文可能與原意有
		出入。)

       --digest-algo name
                 Use  name as message digest  algorithm.  Running
                 the  program with the command --version yields a
                 list of supported algorithms.  Please note  that
                 using   this  option  may  violate  the  OpenPGP
                 requirement, that a 160 bit hash is to  be  used
                 for DSA.
		指定以引數 name 所設的摘要值演算法做雜湊函數的運
		算。執行程式並使用指令 --version 可以顯示所有支援
		的演算法。另外請注意：使用本選項將可能與 OpenPGP
		的要求不相容，因為 DSA 演算法會使用到一個 160bit
		的雜湊值。(譯按：本段內容請以原文為準，譯文可能有
		出入。)

       --s2k-cipher-algo name
                 Use   name  as  the  cipher  algorithm  used  to
                 protect secret  keys.   The  default  cipher  is
                 BLOWFISH.  This   cipher   is   also   used  for
                 conventional encryption if --cipher-algo is  not
                 given.
		指定以引數 name 所設的加密演算法，來保護私鑰。預
		設的演算法是 BLOWFISH 。如果 --cipher-algo 未被指
		定的話，這種加密也同時被用做傳統加密時的演算法。

       --s2k-digest-algo name
                 Use  name as the digest algorithm used to mangle
                 the passphrases.  The default algorithm is RIPE-
                 MD-160.   This digest algorithm is also used for
                 conventional encryption if --digest-algo is  not
                 given.
		指定以引數 name 所設的摘要演算法，來打亂密碼以保
		護密碼，預設為 RIPE-MD-160 。如果 --digest-algo
		未被指定的話，這種演算法也同時被用做傳統編碼時的
		演算法。

       --s2k-mode n
                 Selects how passphrases are mangled. If n is 0 a
                 plain passphrase (which is not recommended) will
                 be  used,  a  1  (default)  adds  a  salt to the
                 passphrase and a 3 iterates the whole process  a
                 couple of times.  Unless --rfc1991 is used, this
                 mode is also used for conventional encryption.

       --compress-algo n
                 Use compress algorithm  n. Default is 2 which is
                 RFC1950  compression.  You  may use 1 to use the
                 old zlib version (RFC1951) which is used by PGP.
                 The  default  algorithm  may give better results
                 because the window size is not limited to 8K. If
                 this  is  not used the OpenPGP behavior is used,
                 i.e. the compression algorithm is selected  from
                 the  preferences;  note, that this can't be done
                 if you do not encrypt the data.

       --disable-cipher-algo name
                 Never allow the use of name as cipher algorithm.
                 The  given  name  will  not be checked so that a
                 later loaded algorithm will still get  disabled.

       --disable-pubkey-algo name
                 Never  allow  the  use  of  name  as  public key
                 algorithm.  The given name will not  be  checked
                 so  that a later loaded algorithm will still get
                 disabled.

       --no-sig-cache
                 Do not cache  the  verification  status  of  key
                 signatures.    Caching   gives   a  much  better
                 performance in key listings.   However,  if  you
                 suspect  that  your  public  keyring is not save
                 against write modifications, you  can  use  this
                 option to disable the caching.  It probably does
                 not make sense to disable it because all kind of
                 damage  can  be  done  if someone else has write
                 access to your public keyring.

       --no-sig-create-check
                 GnuPG normally  verifies  each  signature  right
                 after  creation  to  protect  against  bugs  and
                 hardware malfunctions which could leak out  bits
                 from  the  secret  key.  This extra verification
                 needs some time (about 115% for DSA  keys),  and
                 so  this  option  can  be  used  to  disable it.
                 However, due to  the  fact  that  the  signature
                 creation    needs   manual   interaction,   this
                 performance penalty  does  not  matter  in  most
                 settings.

       --throw-keyid
                 Do  not  put  the  keyid into encrypted packets.
                 This option hides the receiver  of  the  message
                 and   is   a   countermeasure   against  traffic
                 analysis.   It  may  slow  down  the  decryption
                 process  because  all  available secret keys are
                 tried.

       --not-dash-escaped
                 This option changes the  behavior  of  cleartext
                 signatures  so  that  they can be used for patch
                 files. You should not send such an armored  file
                 via  email  because  all spaces and line endings
                 are hashed too.  You can not use this option for
                 data  which  has  5 dashes at the beginning of a
                 line, patch files don't  have  this.  A  special
                 armor   header   line  tells  GnuPG  about  this
                 cleartext signature option.

       --escape-from-lines
                 Because some mailers change lines starting  with
                 "From  "  to  "<From " it is good to handle such
                 lines in a special way when  creating  cleartext
                 signatures.  All  other  PGP versions do it this
                 way too. This option is not enabled  by  default
                 because it would violate rfc2440.

       --passphrase-fd n
                 Read  the  passphrase from file descriptor n. If
                 you use 0 for n, the  passphrase  will  be  read
                 from  stdin.     This  can  only be used if only
                 one passphrase  is  supplied.   Don't  use  this
                 option if you can avoid it.

       --command-fd n
                 This is a replacement for the deprecated shared-
                 memory IPC mode.  If  this  option  is  enabled,
                 user input on questions is not expected from the
                 TTY but from  the  given  file  descriptor.   It
                 should  be  used  together with --status-fd. See
                 the file doc/DETAILS in the source  distribution
                 for details on how to use it.

       --use-agent
                 Try  to  use  the  GnuPG-Agent. Please note that
                 this agent is  still  under  development.   With
                 this option, GnuPG first tries to connect to the
                 agent before it asks for a passphrase.

       --rfc1991 Try to be more RFC1991 (PGP 2.x) compliant.

       --openpgp Reset all packet, cipher and digest  options  to
                 OpenPGP  behavior.  Use this option to reset all
                 previous  options   like   --rfc1991,   --force-
                 v3-sigs,  --s2k-*,  --cipher-algo, --digest-algo
                 and --compress-algo to OpenPGP compliant values.
                 All PGP workarounds are also disabled.

       --force-v3-sigs
                 OpenPGP  states  that  an  implementation should
                 generate v4 signatures but PGP 5.x recognizes v4
                 signatures  only  on  key material.  This option
                 forces v3 signatures for signatures on data.

       --force-mdc
                 Force  the  use  of  encryption  with   appended
                 manipulation code.  This is always used with the
                 newer ciphers (those with  a  blocksize  greater
                 than   64   bit).   This  option  might  not  be
                 implemented yet.

       --allow-non-selfsigned-uid
                 Allow the import of keys with user IDs which are
                 not   self-signed,   but   have   at  least  one
                 signature.  This only allows the  import  -  key
                 validation  will  fail and you have to check the
                 validity of the key my other means.   This  hack
                 is  needed  for  some German keys generated with
                 pgp 2.6.3in. You should really avoid  using  it,
                 because  OpenPGP  has  better  mechanics  to  do
                 separate signing and encryption keys.

       --allow-freeform-uid
                 Disable all checks on the form of  the  user  ID
                 while  generating a new one.  This option should
                 only be used in very special environments as  it
                 does  not ensure the de-facto standard format of
                 user IDs.

       --ignore-time-conflict
                 GnuPG  normally  checks  that   the   timestamps
                 associated   with   keys   and  signatures  have
                 plausible   values.    However,   sometimes    a
                 signature  seems to be older than the key due to
                 clock problems.  This option makes these  checks
                 just a warning.

       --ignore-crc-error
                 The ASCII armor used by OpenPG is protected by a
                 CRC  checksum   against   transmission   errors.
                 Sometimes  it  happens that the CRC gets mangled
                 somewhere on the transmission  channel  but  the
                 actual content (which is anyway protected by the
                 OpenPGP protocol) is still  okay.   This  option
                 will let gpg ignore CRC errors.

       --lock-once
                 Lock  the  databases  the  first  time a lock is
                 requested and do not release the lock until  the
                 process terminates.

       --lock-multiple
                 Release the locks every time a lock is no longer
                 needed. Use this to override a previous  --lock-
                 once from a config file.

       --lock-never
                 Disable locking entirely.  This option should be
                 used only in very special environments, where it
                 can   be   assured  that  only  one  process  is
                 accessing those files.  A bootable floppy with a
                 stand-alone  encryption system will probably use
                 this.  Improper usage of this option may lead to
                 data and key corruption.

       --no-random-seed-file
                 GnuPG  uses  a file to store its internal random
                 pool  over  invocations.   This   makes   random
                 generation   faster;   however  sometimes  write
                 operations are not desired.  This option can  be
                 used  to  achieve  that  with the cost of slower
                 random generation.

       --no-verbose
                 Reset verbose level to 0.

       --no-greeting
                 Suppress the initial copyright  message  but  do
                 not enter batch mode.

       --no-secmem-warning
                 Suppress   the  warning  about  "using  insecure
                 memory".

       --no-armor
                 Assume the input data is not  in  ASCII  armored
                 format.
		預設輸入的資料不是以美國標準交換碼 (ASCII) 做編碼
		處理格式.

       --no-default-keyring
                 Do  not  add the default keyrings to the list of
                 keyrings.
		不將預設公鑰匙圈加入公鑰匙圈列表中。

       --skip-verify
                 Skip the signature verification step.  This  may
                 be  used  to  make  the decryption faster if the
                 signature verification is not needed.

       --with-colons
                 Print key listings delimited by colons.

       --with-key-data
                 Print key listings delimited by colons and print
                 the public key data.

       --with-fingerprint
                 Same  as  the  command --fingerprint but changes
                 only the format of the output and  may  be  used
                 together with another command.

       --fast-list-mode
                 Changes  the output of the list commands to work
                 faster; this is achieved by leaving  some  parts
                 empty.  Some applications don't need the user ID
                 and the trust information given in the listings.
                 By  using  this  options  they  can get a faster
                 listing.  The exact behaviour of this option may
                 change in future versions.

       --fixed-list-mode
                 Do  not merge user ID and primary key in --with-
                 colon listing mode and print all  timestamps  as
                 seconds since 1970-01-01.

       --list-only
                 Changes the behaviour of some commands.  This is
                 like --dry-run but different in some cases.  The
                 semantic  of this command may be extended in the
                 future.  Currently  it  only  skips  the  actual
                 decryption  pass  and  therefore  enables a fast
                 listing of the encryption keys.
		變更部分指令的動作，這有點像 --dry-run，但在某些
		場合會有些不同。本選項的語法在未來可能會做延伸，
		目前它會略過實際的解碼動作，而只是很快地將編碼用的
		公鑰列出。

       --no-literal
                 This is not for normal use.  Use the  source  to
                 see for what it might be useful.

       --set-filesize
                 This  is  not for normal use.  Use the source to
                 see for what it might be useful.

       --emulate-md-encode-bug
                 GnuPG versions prior to 1.0.2 had a bug  in  the
                 way  a  signature  was  encoded.   This  options
                 enables  a   workaround   by   checking   faulty
                 signatures  again  with the encoding used in old
                 versions.  This  may  only  happen  for  ElGamal
                 signatures which are not widely used.

       --show-session-key
                 Display  the  session  key used for one message.
                 See --override-session-key for  the  counterpart
                 of this option.

                 We think that Key-Escrow is a Bad Thing; however
                 the user  should  have  the  freedom  to  decide
                 whether to go to prison or to reveal the content
                 of one specific message without compromising all
                 messages  ever  encrypted  for  one  secret key.
                 DON'T USE IT UNLESS YOU ARE REALLY FORCED TO  DO
                 SO.

       --override-session-key string
                 Don't  use  the  public  key but the session key
                 string.  The format of this string is  the  same
                 as  the one printed by --show-session-key.  This
                 option is normally not used but comes  handy  in
                 case someone forces you to reveal the content of
                 an encrypted message; using this option you  can
                 do this without handing out the secret key.

       --merge-only
                 Don't  insert  new  keys into the keyrings while
                 doing an import.

       --allow-secret-key-import
                 Allow import of secret keys.  The import command
                 normally  skips secret keys because a secret key
                 can  otherwise  be  used  to  attack  the  trust
                 calculation.

       --try-all-secrets
                 Don't  look  at  the  key  ID  as  stored in the
                 message but try all secret keys in turn to  find
                 the  right  decryption  key.  This option forces
                 the behaviour as used  by  anonymous  recipients
                 (created  by using --throw-keyid) and might come
                 handy  in  case  where  an   encrypted   message
                 contains a bogus key ID.

       --enable-special-filenames
                 This  options  enables a mode in which filenames
                 of the form  -&n,  where  n  is  a  non-negative
                 decimal  number,  refer to the file descriptor n
                 and not to a file with that name.

       --no-expensive-trust-checks
                 Experimental use only.

How to specify a user ID
如何指定一個使用者名稱
       There are different ways on how to specify a  user  ID  to
       GnuPG; here are some examples:
	這裏有不同的幾種方法來指定出一個使用者的名稱給 GnuPG；下
	面就是一些範例：



       234567C4

       0F34E556E

       01347A56A

       0xAB123456
                 Here  the  key  ID  is  given in the usual short
                 form.
		此處所列是將名稱以一般的短格式來給定。(譯注：當使
		用者的代號以英文字母開始時，如：AB123456，則在使
		用此類短格式時應在代號前加上“0x”來區別，以免GPG
		將代號視為使用者的簡稱或電子郵件帳號名稱。)

       234AABBCC34567C4

       0F323456784E56EAB

       01AB3FED1347A5612

       0x234AABBCC34567C4
                 Here the key ID is given in  the  long  form  as
                 used by OpenPGP.
		此處所列是將名稱以 OpenGPG 的長格式來給定。

       1234343434343434C434343434343434

       123434343434343C3434343434343734349A3434

       0E12343434343434343434EAB3484343434343434

       0xE12343434343434343434EAB3484343434343434
                 The best way to specify a key ID is by using the
                 fingerprint  of  the  key.   This   avoids   any
                 ambiguities  in  case  that there are duplicated
                 key IDs (which are really rare for the long  key
                 IDs).
		指定使用者最好的方法是使用鑰匙指紋，這可避免當有
		重覆的使用者名稱時(雖然這種情況僅在很長使用名稱時
		偶而發生)，程式不會誤認。

       =Heinrich Heine <heinrichh@uni-duesseldorf.de>
                 Using  an exact to match string.  The equal sign
                 indicates this.

       <heinrichh@uni-duesseldorf.de>
                 Using the email address part  which  must  match
                 exactly.  The  left angle bracket indicates this
                 email address mode.

       +Heinrich Heine duesseldorf
                 All  words  must   match   exactly   (not   case
                 sensitive)  but  can  appear in any order in the
                 user ID.  Words are any  sequences  of  letters,
                 digits,  the  underscore and all characters with
                 bit 7 set.

       #34       Using the Local ID.  This is a  very  low  level
                 method  and  should only be used by applications
                 which  really  need  it.   The  hash   character
                 indicates  this method.    An application should
                 not assume that this is only a number.

       Heine

       *Heine    By case insensitive substring matching.  This is
                 the  default  mode  but applications may want to
                 explicitly indicate this by putting the asterisk
                 in front.

       Note that you can append an exclamation mark to key IDs or
       fingerprints.  This flag which tells GnuPG to use  exactly
       that  primary or secondary key and don't try to figure out
       which secondary or primary key to use.


RETURN VALUE
       The program returns 0 if everything  was  fine,  1  if  at
       least a signature was bad, and other error codes for fatal
       errors.


EXAMPLES
       gpg -se -r Bob file
                 sign and encrypt for user Bob

       gpg --clearsign file
                 make a clear text signature

       gpg -sb  file
                 make a detached signature

       gpg --list-keys  user_ID
                 show keys

       gpg --fingerprint  user_ID
                 show fingerprint

       gpg --verify  pgpfile

       gpg --verify  sigfile [files]
                 Verify the signature of  the  file  but  do  not
                 output  the  data.  The  second form is used for
                 detached  signatures,  where  sigfile   is   the
                 detached  signature  (either  ASCII  armored  of
                 binary) and [files] are the signed data; if this
                 is  not  given  the name of the file holding the
                 signed data is constructed by  cutting  off  the
                 extension  (".asc"  or  ".sig") of sigfile or by
                 asking the user for the filename.

ENVIRONMENT
       HOME      Used to locate the default home directory.

       GNUPGHOME If set directory used instead of "~/.gnupg".

       http_proxy
                 Only honored when the option  --honor-http-proxy
                 is set.

FILES
       ~/.gnupg/secring.gpg
                 The secret keyring

       ~/.gnupg/secring.gpg.lock
                 and the lock file

       ~/.gnupg/pubring.gpg
                 The public keyring

       ~/.gnupg/pubring.gpg.lock
                 and the lock file

       ~/.gnupg/trustdb.gpg
                 The trust database

       ~/.gnupg/trustdb.gpg.lock
                 and the lock file

       ~/.gnupg/random_seed
                 used to preserve the internal random pool

       ~/.gnupg/options
                 May contain options

       /usr[/local]/share/gnupg/options.skel
                 Skeleton options file

       /usr[/local]/lib/gnupg/
                 Default location for extensions


WARNINGS
       Use  a  *good* password for your user account and a *good*
       passphrase to protect your secret key.  This passphrase is
       the  weakest  part  of  the  whole system.  Programs to do
       dictionary attacks on your secret keyring are very easy to
       write and so you should protect your "~/.gnupg/" directory
       very well.

       Keep in mind that, if this program is used over a  network
       (telnet), it is *very* easy to spy out your passphrase!

       If  you are going to verify detached signatures, make sure
       that the program nows about  it;  either  be  giving  both
       filenames  on the commandline or using - to specify stdin.

BUGS
       On many  systems  this  program  should  be  installed  as
       setuid(root).  This  is  necessary  to  lock memory pages.
       Locking memory pages prevents the  operating  system  from
       writing  memory  pages  to  disk.  If  you  get no warning
       message  about  insecure  memory  your  operating   system
       supports  locking  without  being  root. The program drops
       root privileges as soon as locked memory is allocated.