RE: how to create a symmetric cipher

2006-11-14 Thread Wei Wu [H]
Thanks to all for offering help. I think I did not describe clearly what I need (actually for one of my friends). Let me know if what I intend to do make no sense. The data to be protected resides on a fixed harddisk in a Windows computer. I have a tool on Windows platform that does encryption u

Re: Question about use of --cipher-algo AES & --openpgp

2006-11-14 Thread Henry Hertz Hobbit
Peter Lebbing wrote: > Option 1: > byte 0 = 0x8C: Old format, packet tag 3, 1 octet length of packet > byte 2 = 0x4: SK-ESK packet version 4 > byte 4 = 0,1 or 3: S2K specifier > > Option 2: > byte 0 = 0x8D: Old format, packet tag 3, 2 octet length of packet > byte 3 = 0x4: SK-ESK packet version

Re: Failure to sign with gpgsm

2006-11-14 Thread Pedro Pessoa
On Tuesday 14 November 2006 18:19, Werner Koch wrote: > On Tue, 14 Nov 2006 15:42, [EMAIL PROTECTED] said: > > After trying to figure out what's this problem and reaching a dead end, I > > went through the diferences out of a dump in both certtificates, the one > > that > > You should update to the

Re: how to create a symmetric cipher

2006-11-14 Thread Henry Hertz Hobbit
On Tue, 2006-11-14 at 16:01 -0600, [EMAIL PROTECTED] wrote: > Thanks. > > Well, my ultimate goal is to encrypt data, but I don't want to use > passphrase to do it as I believe it is not secure enough. > > So my questions are: > > 1. How to create a symmetric key or cipher? With that, I may use

RE: how to create a symmetric cipher

2006-11-14 Thread Martin A. Brown
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Greetings Wei Wu, : Well, my ultimate goal is to encrypt data, but I don't want to : use passphrase to do it as I believe it is not secure enough. : : So my questions are: : : 1. How to create a symmetric key or cipher? With that, I may use

RE: how to create a symmetric cipher

2006-11-14 Thread Wei Wu [H]
Thank you. As I said in my other posts, I don't want to use passphrase based encryption, and am looking for key based solution. Also I don't need a private/public key-pair based solution as symmetric key is more efficient. Regards, WW -Original Message- From: [EMAIL PROTECTED] [mailto:[

Re: how to create a symmetric cipher

2006-11-14 Thread Remco Post
Wei Wu [H] wrote: > Thanks. > > Well, my ultimate goal is to encrypt data, but I don't want to use > passphrase to do it as I believe it is not secure enough. > basically, a key is a asymmetric cypher used to protect the 'passprase' used in a symmetric cypher. So you can use the 'raw' symmetric

Problem compiling libgpg-error-1.4 with Mac OS X

2006-11-14 Thread Simon Ruderich
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, I'm trying to compile GnuPG 2.0 with Mac OS X. But I'm already failing with compiling libgpg-error-1.4. ./configure works but when I run make the following error is displayed and make fails: /bin/sh ../libtool --tag=CC --mode=link gcc -g

RE: how to create a symmetric cipher

2006-11-14 Thread Wei Wu [H]
Good to know the details of this process. I don't have a need to distribute data to other users, and simply need to protect some local data and only the person with the key is allowed to decrypt the data. That's the reason I want a symmetric key based solution. Thanks, Wei -Original Messag

Re: how to create a symmetric cipher

2006-11-14 Thread David Shaw
On Tue, Nov 14, 2006 at 04:00:02PM -0600, Wei Wu [H] wrote: > Thanks. > > Well, my ultimate goal is to encrypt data, but I don't want to use > passphrase to do it as I believe it is not secure enough. > > So my questions are: > > 1. How to create a symmetric key or cipher? With that, I may use a

Re: how to create a symmetric cipher

2006-11-14 Thread Joseph Oreste Bruni
When you encrypt to a person's public key you are not using the public key to encrypt the data. First, a random session key is generated and used to encrypt the data using a symmetric cipher. Then only the session key is encrypted using the public key and appended to the file. The recipient

RE: how to create a symmetric cipher

2006-11-14 Thread Wei Wu [H]
Thanks. Well, my ultimate goal is to encrypt data, but I don't want to use passphrase to do it as I believe it is not secure enough. So my questions are: 1. How to create a symmetric key or cipher? With that, I may use another tool to encrypt/decrypt. 2. Can gpg be used to do key based encrypti

Re: how to create a symmetric cipher

2006-11-14 Thread Joseph Oreste Bruni
gpg --symmetric --encrypt The default is CAST5, but you can specify the algorithm using -- cipher-algo -Joe On Nov 14, 2006, at 12:52 PM, Wei Wu [H] wrote: Hi there, I want to create a symmetric cipher such as AES to encrypt some data, and think gpg (GnuPG Version 1.4.2.1) may do this.

Re: how to create a symmetric cipher

2006-11-14 Thread David Shaw
On Tue, Nov 14, 2006 at 01:52:31PM -0600, Wei Wu [H] wrote: > Hi there, > > I want to create a symmetric cipher such as AES to encrypt some data, and > think gpg (GnuPG Version 1.4.2.1) may do this. But I found it gives only > three options, none is symmetric. I would appreciate if anyone can poin

how to create a symmetric cipher

2006-11-14 Thread Wei Wu [H]
Hi there, I want to create a symmetric cipher such as AES to encrypt some data, and think gpg (GnuPG Version 1.4.2.1) may do this. But I found it gives only three options, none is symmetric. I would appreciate if anyone can point me to another or way to do it? Regards, WW gpg --gen-key (1) D

Re: encrypted public keys Was: Re: Bug in getkey.c:2219:merge_selfsigs

2006-11-14 Thread Werner Koch
On Fri, 10 Nov 2006 21:33, [EMAIL PROTECTED] said: > curious why encrypting signed keys back to their owner is a bad habit. > It verifies the other half of the ID on the key (the email address), it > verifies that that person (still) has the secret key and passphrase. Why do you want this. It mi

Re: Failure to sign with gpgsm

2006-11-14 Thread Werner Koch
On Tue, 14 Nov 2006 15:42, [EMAIL PROTECTED] said: > After trying to figure out what's this problem and reaching a dead end, I > went > through the diferences out of a dump in both certtificates, the one that You should update to the lates version of gnupg (2.0.0) before checking any further.

Re: Use of IDEA in GnuPG 2

2006-11-14 Thread Werner Koch
On Tue, 14 Nov 2006 13:23, [EMAIL PROTECTED] said: > The 1.x methods of using IDEA in GnuPG don't work anymore with 2.0. You are still not giving upon this :-) IIRC, you need to wait only 4 more years for official support. Salam-Shalom, Werner

Re: OpenPGP Card implementation

2006-11-14 Thread Werner Koch
On Tue, 14 Nov 2006 13:30, [EMAIL PROTECTED] said: > I did some investigation, and there are lots of java card platforms that > would be eminently usable for the OpenPGP smartcard. The hard part is > redoing the code from BasicCard to Java. The hardware is easy to obtain. The cards are pretty e

Re: OpenPGP Card implementation

2006-11-14 Thread Werner Koch
On Tue, 14 Nov 2006 13:06, [EMAIL PROTECTED] said: > Is it very hard to design such a card from scratch, and very expensive > to have it produced as custom hardware? I'm sure there are enough > chip-producing companies in China who don't give a damn about western > lawyers. Good for people in Chi

Re: Failure to sign with gpgsm

2006-11-14 Thread Pedro Pessoa
On Friday 10 November 2006 22:39, Pedro Pessoa wrote: > Altough I can sign with a certificate from Thawte, when using a certificate > from the Portuguese nacional laywer association I'm having this error: > gpgsm: error creating signature: No value > > The certificate tree is correctly verified: >

Re: OpenPGP Card implementation

2006-11-14 Thread Benjamin Donnachie
Kurt Fitzner wrote: > I did some investigation, and there are lots of java card platforms that > would be eminently usable for the OpenPGP smartcard. The hard part is > redoing the code from BasicCard to Java. The hardware is easy to obtain. Can you point me in their direction please? I'd much

Re: OpenPGP Card implementation

2006-11-14 Thread Kurt Fitzner
Johan Wevers wrote: > Werner Koch wrote: > >> Thanks to the pay-tv's lawyers and the tv card crackers the problems >> on selling certain crypto cards exists. The rumour goes that they >> blackmail the chip vendors (like Atmel) to stop processing chips which >> are too easy to be used by tv card c

Re: Get signatures from a keyring file

2006-11-14 Thread David Shaw
On Sat, Nov 11, 2006 at 07:41:23PM -0800, Yiannis Pefkianakis wrote: > Hi, > > My question is how I can export the signatures from the keyring file. > The answer I am looking for, is not the command "check" because I > want to extract the actual signature. You want to export *just* the signat

Re: --edit-key command

2006-11-14 Thread David Shaw
On Thu, Nov 09, 2006 at 09:12:43AM -0800, dmdm wrote: > > what is the command in the edit-key section to add a missing uid to a key > for example i have been asked in this way: > > > Need add uid of [EMAIL PROTECTED] > only has uid of [EMAIL PROTECTED] > > a) so how to add uid of send? > >

Re: OpenPGP Card implementation

2006-11-14 Thread Johan Wevers
Werner Koch wrote: >Thanks to the pay-tv's lawyers and the tv card crackers the problems >on selling certain crypto cards exists. The rumour goes that they >blackmail the chip vendors (like Atmel) to stop processing chips which >are too easy to be used by tv card crackers. I call that "security >

Re: gpg-agent timeout not working

2006-11-14 Thread Zach Himsel
On 11/14/06, Werner Koch <[EMAIL PROTECTED]> wrote: > I use the gpg-agent to store my passphrase. The problem is that my > timeout is set for like 24 hours (actually, now it is 99 seconds > :) ), but pinentry keeps asking for my password every 4 hours or so. > How would I get that to work cor

Use of IDEA in GnuPG 2

2006-11-14 Thread Johan Wevers
Hello, The 1.x methods of using IDEA in GnuPG don't work anymore with 2.0. I assume I have to add IDEA to libgcrypt. Does anyone know how to do that? Is there an easy way or does it require changing the idea.c source and/or some makefiles to work? -- ir. J.C.A. Wevers // Physics and sci

Re: GnuPG 2.0

2006-11-14 Thread Remco Post
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John W. Moore III wrote: > The Bottom Line is that nothing is /missing/ in 1.4.x Builds. GPGshell > & WinPT will *not* work on Linux so GPG-Agent is the Linux version of a > 'Shell' for easy manipulation of GnuPG within Linux. > _but_ gpg-agent als

Re: Get signatures from a keyring file

2006-11-14 Thread John Clizbe
Yiannis Pefkianakis wrote: > Hi, > > My question is how I can export the signatures from the keyring file. > The answer I am looking for, is not the command "check" because I > want to extract the actual signature. > I had an idea to convert the keyring to ascii and parse it, but i > don't k

Re: Question about use of --cipher-algo AES & --openpgp

2006-11-14 Thread Peter Lebbing
I started writing this before HHH's last post. I'll trim it but some of it could give insight. Henry Hertz Hobbit wrote: > I followed what some people were saying, and it appears that this is > not the case! Further, there is NOTHING in the RFC indicating whether > we have that or not. In fact th

--edit-key command

2006-11-14 Thread dmdm
what is the command in the edit-key section to add a missing uid to a key for example i have been asked in this way: Need add uid of [EMAIL PROTECTED] only has uid of [EMAIL PROTECTED] a) so how to add uid of send? Also would be nice for some unique shortname (8 characters or less) at the

Get signatures from a keyring file

2006-11-14 Thread Yiannis Pefkianakis
Hi, My question is how I can export the signatures from the keyring file. The answer I am looking for, is not the command "check" because I want to extract the actual signature. I had an idea to convert the keyring to ascii and parse it, but i dont know the format of file so I cannot do it.

Get signatures from a keyring file

2006-11-14 Thread yiannis pefk
Hi, My question is how I can export the signatures from the keyring file. The answer I am looking for, is not the command "check" because I want to extract the actual signature. I had an idea to convert the keyring to ascii and parse it, but i dont know the format of file so I cannot do it.