Re: file encryption and integrity check

2006-02-20 Thread Eric
On Mon, 2006-02-20 at 17:46 +0100, Francesco Turco wrote: > i'd like to know if gnupg is a good choice for encrypting files with a > password and if it is possible to check if an encrypted file is > corrupted or not (integrity check). my goal is to burn some files on cds > and protect them both

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-20 Thread Walter Haidinger
On Mon, 20 Feb 2006, David Shaw wrote: > LDAP had TLS support back in 1.3.5. HTTP and FTP just got TLS support > in 1.4.3. At one point, I started documenting the new options and > stopped because the man page would be enormous. At some point, I'll > probably make a "gpgkeys" man page so as to

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-20 Thread David Shaw
On Tue, Feb 21, 2006 at 12:21:42AM +0100, Walter Haidinger wrote: > On Mon, 20 Feb 2006, David Shaw wrote: > > > > TLS too? How to tell GnuPG to use TLS over port 389 (ldap://)? > > > > Try for TLS, and do nothing if TLS can't start: > > keyserver-options tls=try > > > > Try for TLS, and print

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-20 Thread Walter Haidinger
On Mon, 20 Feb 2006, David Shaw wrote: > > TLS too? How to tell GnuPG to use TLS over port 389 (ldap://)? > > Try for TLS, and do nothing if TLS can't start: > keyserver-options tls=try > > Try for TLS, and print a warning if TLS can't start: > keyserver-options tls=warn > > Try for TLS, an

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-20 Thread David Shaw
On Mon, Feb 20, 2006 at 11:14:33PM +0100, Walter Haidinger wrote: > On Mon, 20 Feb 2006, David Shaw wrote: > > > Here's a rough guide for OpenLDAP: > [--cut--] > > Thanks, no problem following the guide. > > > The configuration above obviously allows anyone to write/delete keys. > > I'll add ap

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-20 Thread Walter Haidinger
On Mon, 20 Feb 2006, David Shaw wrote: > Here's a rough guide for OpenLDAP: [--cut--] Thanks, no problem following the guide. > The configuration above obviously allows anyone to write/delete keys. I'll add appropriate access rules once key import/export works. However, I'm having trouble with

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-20 Thread David Shaw
On Sat, Feb 18, 2006 at 10:11:32PM +0100, Peter Palfrader wrote: > Walter Haidinger schrieb am Samstag, dem 18. Feber 2006: > > > Now, I'd like to setup an OpenLDAP server to store the OpenPGP keys (for > > use with GnuPG). Please note that I already have a working OpenLDAP > > server, so I'd only

Re: file encryption and integrity check

2006-02-20 Thread David Shaw
On Mon, Feb 20, 2006 at 05:46:29PM +0100, Francesco Turco wrote: > hello, > > i am very new with gnupg and cryptography in general. > > i'd like to know if gnupg is a good choice for encrypting files with a > password and if it is possible to check if an encrypted file is > corrupted or not (in

Re: file encryption and integrity check

2006-02-20 Thread Roscoe
Sure will. gpg -c is what you want. Make sure you are using a MDC, which means either using one of the 128bit blocksize ciphers (your gpg will probably use AES256 by default, which is good - gpg -vc to find out) or passing the --force-mdc option. If you want protection in the way of recovering

file encryption and integrity check

2006-02-20 Thread Francesco Turco
hello, i am very new with gnupg and cryptography in general. i'd like to know if gnupg is a good choice for encrypting files with a password and if it is possible to check if an encrypted file is corrupted or not (integrity check). my goal is to burn some files on cds and protect them both fr

Re: [Announce] First release candidate for 1.4.3 available

2006-02-20 Thread David Shaw
On Mon, Feb 20, 2006 at 11:40:24AM +0100, Holger Schuettel wrote: > David Shaw schrieb: > > We are pleased to announce the availability of the first release > > candidate for the forthcoming 1.4.3 version of GnuPG: > > > > ftp://ftp.gnupg.org/gcrypt/alpha/gnupg/gnupg-1.4.3rc1.tar.bz2 (2.9M) > >

Re: Necessity of GPG when using SSL

2006-02-20 Thread Chris Boldiston
If you use Firefox, download the CustomizeGoogle extension and you can select "Secure" https mode for all gmail traffic and "Remove ads and related pages" Chris On 2/20/06, lusfert <[EMAIL PROTECTED]> wrote: > Benjamin Esham wrote on 20.02.2006 7:50: > > John Clizbe wrote: > >> Earthlink and Goog

Sign locally a batch of keys

2006-02-20 Thread Ismael Valladolid Torres
I need to import into my keyring several .asc files with some keys each. I want to trust marginally those keys, so I simply am not asked for fingerprint verification. I've thought of using lsign. Is there any way to lsign them all while importing as a batch procedure? Is lsign what I need in order

Re: [Announce] First release candidate for 1.4.3 available

2006-02-20 Thread Holger Schuettel
David Shaw schrieb: > We are pleased to announce the availability of the first release > candidate for the forthcoming 1.4.3 version of GnuPG: > > ftp://ftp.gnupg.org/gcrypt/alpha/gnupg/gnupg-1.4.3rc1.tar.bz2 (2.9M) > ftp://ftp.gnupg.org/gcrypt/alpha/gnupg/gnupg-1.4.3rc1.tar.bz2.sig > Is also a

Re: Remote signing?

2006-02-20 Thread Thomas Kühne
Matthias Urlichs wrote: > Hello, > > I need to sign files remotely. They're moderately large, so > transmitting them back to my firewalled-off laptop (I'm usually > behind a slow line), where the secret key lives, isn't a good idea. > > Ideas? see attachment for an ALPHA version (working but unsaf

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-20 Thread Peter Palfrader
Walter Haidinger schrieb am Sonntag, dem 19. Feber 2006: > Peter Palfrader schrieb: > > http://asteria.noreply.org/~weasel/PGPKeyserverSchema.zip > > Thanks! One question, though: Where is this schema from? > Is it the "new" one the GnuPG announcement was talking about or > is it a schema shipped

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-20 Thread Peter Palfrader
Walter Haidinger schrieb am Samstag, dem 18. Feber 2006: > Now, I'd like to setup an OpenLDAP server to store the OpenPGP keys (for > use with GnuPG). Please note that I already have a working OpenLDAP > server, so I'd only need to add schema, acls and keys, of course. > > Btw, can GnuPG also sto

Re: Remote signing?

2006-02-20 Thread Thomas Kühne
Matthias Urlichs wrote: > Hello, > > I need to sign files remotely. They're moderately large, so > transmitting them back to my firewalled-off laptop (I'm usually > behind a slow line), where the secret key lives, isn't a good idea. > > Ideas? I'currenty working on a patch for gnupg that enables r

Re: Remote signing?

2006-02-20 Thread Matthias Urlichs
Hello, I wrote: > I need to sign files remotely. They're moderately large, so transmitting > them back to my firewalled-off laptop (I'm usually behind a slow line), > where the secret key lives, isn't a good idea. > > Ideas? What happens if you have a smartcard, anyway -- doesn't the gpg agent t

Re: Using an official Austrian key on a smartcard with OpenPG

2006-02-20 Thread Reinhold Kainhofer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Thanks for the answer. Am Montag, 20. Februar 2006 01:14 schrieb John Clizbe: > Reinhold Kainhofer wrote: > > Hi all, > > I have a key on an official Austrian banking card (the operating system > > of the card is ACOS, the company that provides th