On Mon, 11 Apr 2016 10:49:32 +0200,
Erik Nellessen wrote:
> 
> If I understand it correctly, --override-session-key does not allow me to set 
> the session key before encryption. It allows me to set the session key when 
> decrypting, so I can do it without using the private key. The option is used 
> to reveal the content of messages without revealing the private key.
> 
> See: 
> http://security.stackexchange.com/questions/115231/how-to-decrypt-a-message-using-only-session-key
> 
> But following this approach, I would need to be able to change the session 
> key before encryption. So I think this does not solve the problem yet. Am I 
> right? Any other ideas?

You're right.  If you are willing to modify GnuPG, this is easy to
change, however.  (Look at seskey.c:make_session_key and have it use
the contents of opt.override_session_key rather than generate a random
key.)

:) Neal

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to