Re: OpenPGP smartcard and RSA 8192 bit

2014-03-24 Thread ------ ------
I just followed these instructions and generated a 8192 RSA key with gnupg.

http://goo.gl/ycJZkj

It works perfectly...

John


2014-03-24 0:02 GMT+01:00 Martin Paljak :

> No. 4k is the reasonable maximum.
> --
> Martin
> +372 515 6495
>
>
> On Sun, Mar 23, 2014 at 12:37 PM, -- -- 
> wrote:
> > Hi!
> >
> > Just for the sake of curiosity, is it possible to store a 8192 bit RSA
> key
> > on the OpenPGP smart card? Two keys ? Three keys?
> >
> > Thank you, please include me in CC for reply.
> >
> > John Peters
> >
> > ___
> > Gnupg-users mailing list
> > Gnupg-users@gnupg.org
> > http://lists.gnupg.org/mailman/listinfo/gnupg-users
> >
>
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


gpg debugging of signed mimes

2014-03-24 Thread Tim Prepscius
Hello,

I'm working on a pgp based webmail.
https://github.com/timprepscius/mv

Yes, I know, javascript injection.


Is there any way I can have gpg apple mail display exactly the part of
the mime that was checked for a signature?

I'm signing things incorrectly, but I think it is a white space issue...
Not sure.  It would be helpful if I could see what gpg/apple-mail
thinks I signed.

(or if anyone has any other hints as to a better way to debug this
(besides reading the RFC which I have) )

-tim

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: OpenPGP smartcard and RSA 8192 bit

2014-03-24 Thread Robert J. Hansen

I just followed these instructions and generated a 8192 RSA key with gnupg.

http://goo.gl/ycJZkj

It works perfectly...


The limits on key size were chosen with great deliberation and for  
good reasons.  Although you are certainly free to change these limits,  
it would be unwise to do so lightly.  Most users who create extremely  
large certificates will immediately encounter three major problems:


* It won't work with smartcards
* Other GnuPG users can't verify signatures it makes
* Other GnuPG users can't encrypt to it

If you need a longer key, then wait for elliptical-curve cryptography  
to be added to GnuPG.  (It should be coming along fairly soon.)



___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users