PGP/GPG

Tools and standards for encrypting, signing, and verifying data using public-key cryptography.

Why it matters

PGP/GPG is useful because it gives engineers a shared vocabulary for designing, building, reviewing, and operating real systems. It helps teams reason about tradeoffs, failure modes, performance, and maintainability instead of treating implementation details as isolated facts.

Where it fits

This concept belongs in the software track, inside the security layer. It often appears alongside public key cryptography, digital signature.

Mental model

Think of PGP/GPG as a named pattern or capability. When you can recognize it, you can ask better questions: what problem does it solve, what assumptions does it make, what can fail, and what neighboring concepts should be considered?

Common mistakes

• Treating the term as a buzzword instead of connecting it to concrete engineering decisions.
• Ignoring related constraints such as scale, security, ownership, observability, and failure recovery.

Related concepts

Study this together with public key cryptography, digital signature to understand how it behaves in a larger system.