Re: SHA-224 problem

2007-11-29 Thread David Shaw
On Thu, Nov 29, 2007 at 08:05:15PM -0500, David Shaw wrote: > I've committed a fix for this for 1.4.8, so that new RSA + SHA-224 > signatures use the right constants. I've also added some > bug-compatibility code so that 1.4.8 (and later) will be able to > verify the old, incorrect signatures. I

SHA-224 problem

2007-11-29 Thread David Shaw
A typo was recently discovered in the new OpenPGP RFC. While an errata document will be issued to take care of the RFC, there is some impact to GPG as well. The typo was in the encoded ASN.1 OID for SHA-224: a number that forms part of the signature when the hash is used with an RSA key. I've co

Needless passphrase prompt

2007-11-29 Thread Todd Hesla
This is a re-posting (in modified form) of a recent posting of mine under another subject heading ("Newbie question") which has not yet received any response. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - I am running GnuPG 2.0.3 on Fedora 7. I am using gpg-agent, an

Re: Decrypt problem with large file

2007-11-29 Thread Thomas Pries
Hello, Am Montag, 26. November 2007 10:19 schrieb Werner Koch: > I guess that the file got corrupted on the medium. Hard disks are not > 100% error free and with such a large file there is a chance that you > experienced a bit flip. No doubt, my fault, I should have a second (and third) copy of

Strange decryption problem (block_filter read error)

2007-11-29 Thread Alexander W. Janssen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, I noticed a strange problem which occurred now three or maybe four times, all under different circumstances. I was using my Openpgp Smartcard to encrypt a file (size about 1.4 MB) to someone else and to my key as well. When I wanted to acces

Re: artifacts and file name insert themselves before first line after decryption

2007-11-29 Thread Werner Koch
On Wed, 28 Nov 2007 18:31, [EMAIL PROTECTED] said: > ­. t.Customer_Service.csvGM That looks pretty much like a literal data packet. That is the OpenPGP container object used to wrap the actual data. You application needs to parse that too. Thus it is a usage problem with the Java library.

Re: 2 keys with same passwords and email on keyserver(but only 1 secretkey)

2007-11-29 Thread David Shaw
On Tue, Nov 27, 2007 at 11:52:29PM +0100, Peter Lampesberger wrote: > hey! > > Im a gpg newbie... > > And i did one bad thing: I generated my first key and uploaded the > public key to the keyserver. > > then i decided to take a better keylength and deleted the old key on my > harddisk (and y

Fwd: 2 keys with same passwords and email on keyserver(but only 1 secretkey)

2007-11-29 Thread Adam Schreiber
This was sent to me individually and I can only imagine that its intended destination was here. -- Forwarded message -- From: Peter Lampesberger <[EMAIL PROTECTED]> Date: Nov 27, 2007 5:52 PM Subject: 2 keys with same passwords and email on keyserver(but only 1 secretkey) To: [EMA

Re: Error: this may be caused by a missing self-signature

2007-11-29 Thread David Shaw
On Thu, Nov 22, 2007 at 06:15:33PM +0800, [EMAIL PROTECTED] wrote: > Dear support, > > There is an error "this may be caused by a missing self-signature" when > partner sides import my public key? > They are using currently using gpg 1.4.7 under Windows Server 2003, my > questions are: > > 1) why

Re: Encryption keys: RSA vs. ElGamal

2007-11-29 Thread Sven Radde
Hi! [EMAIL PROTECTED] schrieb: > I know that "A disadvantage of > the ElGamal system is that the encrypted message becomes very big, > about twice the size of the original message", This may be true, but mind you that the "message" the ElGamal (or RSA) encrypts is only the symmetric (=256bit) k

Newbie question

2007-11-29 Thread Todd Hesla
I am a newbie to GnuPG, and am using gpg-agent so that I only need to enter my passphrase once. If I decrypt a file (which I encrypted to myself), I am of course asked to enter my passphrase. If I decrypt it a second time, gpg-agent supplies my passphrase from its cache. However, gpg2 still disp

Error: this may be caused by a missing self-signature

2007-11-29 Thread zoeyyl . hung
Dear support, There is an error "this may be caused by a missing self-signature" when partner sides import my public key? They are using currently using gpg 1.4.7 under Windows Server 2003, my questions are: 1) why causes the error? 2) Is it because they are using windows server 2003? can windows

Re: Revoke a key - What is with the decrypted messages?

2007-11-29 Thread Sven Radde
Hi! Wolf Canis schrieb: > I have a revocation > certificate. Great! ;-) > But what is with the decrypted messages to me, can I still encrypt this > messages? Or is the secret key invalid too? You will be able to decrypt messages and others will be able to verify signatures which were issued by

2 keys with same passwords and email on keyserver(but only 1 secretkey)

2007-11-29 Thread Peter Lampesberger
hey! Im a gpg newbie... And i did one bad thing: I generated my first key and uploaded the public key to the keyserver. then i decided to take a better keylength and deleted the old key on my harddisk (and yeah i ignored the warning message.) Of course, i didnt generate any revoke-ce