Re: About my prefered settings...

2008-06-23 Thread Robert J. Hansen
Faramir wrote: > Thanks for the answers. I am a bit confused about if I should use > names like aes256 or codes like S9. Six of one, half dozen of another. I think it's generally for the best if people use names, since they're easier to read and harder to screw up. > Also, do I have to include

Re: About my prefered settings...

2008-06-23 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Shaw escribió: ... > Put this in your gpg.conf: > > personal-cipher-preferences aes256 > personal-digest-preferences sha256 > personal-compress-preferences zip > > GPG will then use those algorithms when possible, but will never use > them i

Re: Multiple uid's vs. multiple primary keys & "master signing keys"

2008-06-23 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Koppenhofer escribió: > 1) Multiple uid's (emails) per primary key versus multiple primary keys > I have 3 email addresses I currently use: one personal, one for foss > development, and one for work. I could create 3 uid's associated with >

Re: About my prefered settings...

2008-06-23 Thread Robert J. Hansen
There are Members of this List who understand I 'break rules' and some call Me an I-D-I-O-T', I prefer the term /Bleeding Edge/ but this in NO way makes Me correct. I'd characterize it this way, actually: The source is free. You're free to do with it as you like, and most people here will ste

Re: About my prefered settings...

2008-06-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Faramir wrote: > Cifrado: AES256, AES192, AES, CAST5, 3DES (cipher) > Resumen: SHA1, SHA256, RIPEMD160 (hashing) > Compresin: ZLIB, BZIP2, ZIP, Sin comprimir [no compression] (compression) > Caracter¡sticas: MDC, Sevidor de claves no-modif

Re: Multiple uid's vs. multiple primary keys & "master signing keys"

2008-06-23 Thread David Shaw
On Mon, Jun 23, 2008 at 03:28:44PM -0400, David Koppenhofer wrote: > Hi everyone, > > I'm a potential new gpg user, and have been struggling with a few > questions about how uid's and keys should be configured. I've poured > over the documentation, mailing list, and web pages, and now want to > v

Re: TEXTMODE Option in Gpg4Win ?

2008-06-23 Thread David Shaw
> On Wed, Jun 18, 2008 at 09:03:42AM -0700, Larry Seabrook wrote: > > Hello, > > > > We are using the Gpg4Win product for encrypting files. > > > > The files we are encrypting and sending are text files with carriage-return > > and linefeed characters at the end of each line (record). > > > > The

RE: TEXTMODE Option in Gpg4Win ?

2008-06-23 Thread Larry Seabrook
David, Do you recommend having a "gpg.conf" file containing "TEXTMODE=OFF" or just omitting that file altogether? Thanks, Larry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Shaw Sent: June 23, 2008 11:37 AM To: gnupg-users@gnupg.org Subject:

Re: TEXTMODE Option in Gpg4Win ?

2008-06-23 Thread David Shaw
On Wed, Jun 18, 2008 at 09:03:42AM -0700, Larry Seabrook wrote: > Hello, > > We are using the Gpg4Win product for encrypting files. > > The files we are encrypting and sending are text files with carriage-return > and linefeed characters at the end of each line (record). > > The receiver of the

Multiple uid's vs. multiple primary keys & "master signing keys"

2008-06-23 Thread David Koppenhofer
Hi everyone, I'm a potential new gpg user, and have been struggling with a few questions about how uid's and keys should be configured. I've poured over the documentation, mailing list, and web pages, and now want to verify what I've come up with so far. I know there are probably no "right" answ

Re: What regenerates files in ~/.gnupg?

2008-06-23 Thread David Shaw
On Mon, Jun 23, 2008 at 01:27:52PM -0400, Zembower, Kevin wrote: > What's automatically regenerating the files in my ~/.gnupg/ directory, > using the Ubuntu 8.04 system: > [EMAIL PROTECTED]:~$ date;rm .gnupg/*;sleep 10; ls -l .gnupg/*;date > Mon Jun 23 12:30:38 EDT 2008 > -rw--- 1 kevinz kevinz

What regenerates files in ~/.gnupg?

2008-06-23 Thread Zembower, Kevin
What's automatically regenerating the files in my ~/.gnupg/ directory, using the Ubuntu 8.04 system: [EMAIL PROTECTED]:~$ date;rm .gnupg/*;sleep 10; ls -l .gnupg/*;date Mon Jun 23 12:30:38 EDT 2008 -rw--- 1 kevinz kevinz 0 2008-06-23 12:30 .gnupg/pubring.gpg -rw--- 1 kevinz kevinz 0 2008-

Re: About my prefered settings...

2008-06-23 Thread David Shaw
On Mon, Jun 23, 2008 at 05:59:44AM -0400, Faramir wrote: > Now the question is: how do I set a "default prefered ^thing to use^" > without making unavailable the other algorithms? The idea is to use the > custom setting only when the recipient can receive messages using these > settings... I think

Re: About my prefered settings...

2008-06-23 Thread Robert J. Hansen
Faramir wrote: > But now, I would like to know what cipher algorithms, hash function and > compression I am using... and of course, I don't know how to know it. Is > there a way to know, by looking at my public key (or sending some > command to gpg), what is my preferred settings? The best way is

Session Key algorithm

2008-06-23 Thread Funaki, Yasuhiro
Dear Expert, I am wondering that which algorithm is used for the session key in GnuPG 1.4.8? I understand the session key is symmetric key and used for message encryption, my concern is the compatibility with PGP commercial. i.e PGP commercial use IDEA but GnuPG does not have it, then message can

GnuPG package without installer

2008-06-23 Thread us3r07
Hello there, it would be nice, if you could also provide an alternative GnuPG binary package for Windows without installer. I would suggest a simple zip file. Thanks! Regards, Kevin _ Der WEB.DE SmartSurfer hilft bis zu 70% Ihr

Re: Session Key algorithm

2008-06-23 Thread Werner Koch
On Fri, 20 Jun 2008 13:15, [EMAIL PROTECTED] said: > I am wondering that which algorithm is used for the session key in GnuPG > 1.4.8? That is all described in RFC4880. > I understand the session key is symmetric key and used for message > encryption, my concern is the compatibility with PGP co

Re: Oh Dear, Pin Entry Broken on openPGP card!

2008-06-23 Thread Werner Koch
On Mon, 23 Jun 2008 12:36, [EMAIL PROTECTED] said: > [When pinentry pops up it says: "Please enter the PIN (`PIN') to > unlock the card". I then enter my pin, the box closes and the > terminal repsonds with:] I was wrong. Your first try with "unblock PIN" was correct. The unblocking requires t

Re: (possible) feature request ;-)

2008-06-23 Thread Christoph Anton Mitterer
On Mon, 2008-06-23 at 16:30 +0200, Werner Koch wrote: > On Mon, 23 Jun 2008 13:30, > [EMAIL PROTECTED] said: > > > I set the flag, that nobody writes the key to disk (by accident) if he > > uses gpg manually on the encrypted file. > > You can't avoid that. --for-your-eyes-only is a very weak ga

Re: (possible) feature request ;-)

2008-06-23 Thread Werner Koch
On Mon, 23 Jun 2008 13:30, [EMAIL PROTECTED] said: > I set the flag, that nobody writes the key to disk (by accident) if he > uses gpg manually on the encrypted file. You can't avoid that. --for-your-eyes-only is a very weak gadget and only implemented for PGP 2 compatibility. The usual way I i

Re: gpg unusable from within an initrd

2008-06-23 Thread Christoph Anton Mitterer
On Mon, 2008-06-23 at 11:59 +0200, Werner Koch wrote: > Add option "--batch". Doesn't this disable any interactions like entering the passphrase? Thanks, Chris. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/

Re: gpg unusable from within an initrd

2008-06-23 Thread Christoph Anton Mitterer
On Mon, 2008-06-23 at 17:45 +0700, Vlad "SATtva" Miller wrote: > Or, if interactive mode is desired, place this in your initrd script: > > mv /dev/tty /dev/tty.bak > cp -a /dev/console /dev/tty > > # > # do gpg stuff here > # > > rm /dev/tty > mv /dev/tty.bak /dev/tty That's what I do right now

Re: (possible) feature request ;-)

2008-06-23 Thread Christoph Anton Mitterer
On Mon, 2008-06-23 at 11:51 +0200, Werner Koch wrote: > > I'm suggesting that such keys have the for-your-eyes flag set (because > > it shouldn't be necessary to write them to disk). > This flag is a property of the encrypted message and not of the key. Of course,.. with "key", I didn't meant any O

Re: Remove public key from secret key

2008-06-23 Thread Nik N
Isn't this the case where symmetric encryption would be a perfectly adequate solution? NikNot ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Oh Dear, Pin Entry Broken on openPGP card!

2008-06-23 Thread Edward Robinson
Hello all, For some reason entering the pin to my smartcard card (for decrypting, signing, authenticating) has broken... $ gpg --card-status Returns, among the usual blurb this: PIN retry counter : 3 0 3. I am pretty sure that this should say 3 3 3 or 2 2 3 or 0 0 3. basically the first and

Re: gpg unusable from within an initrd

2008-06-23 Thread Christoph Anton Mitterer
I've just seen: On Sat, 2008-06-21 at 21:46 +0200, Christoph Anton Mitterer wrote: > /dev/tty is not available (an won't be) /dev/tty is there (5,0) and readable. No idea which problems gpg has... :-/ Chris. smime.p7s Description: S/MIME cryptographic signature ___

Session Key algorithm

2008-06-23 Thread Funaki, Yasuhiro
Dear Expert, I am wondering that which algorithm is used for the session key in GnuPG 1.4.8? I understand the session key is symmetric key and used for message encryption, my concern is the compatibility with PGP commercial. i.e PGP commercial use IDEA but GnuPG does not have it, then message can

Re: gpg unusable from within an initrd

2008-06-23 Thread Vlad "SATtva" Miller
Werner Koch (23.06.2008 16:59): > On Sat, 21 Jun 2008 21:46, > [EMAIL PROTECTED] said: > >> With it, in complains "gpg: Sorry, no terminal at all requested - can't >> get input" > > Add option "--batch". Or, if interactive mode is desired, place this in your initrd script: mv /dev/tty /dev/tty.

Re: Oh Dear, Pin Entry Broken on openPGP card!

2008-06-23 Thread Edward Robinson
Werner, thanks for your quick reply (as usual!). > Try 1 (change PIN). This should sync it again. BTW, you may do the same by > using > > $ gpg --card-edit > Command> admin > Command> passwd $ gpg --change-pin gpg: OpenPGP card no. D2760001240101010001101E detected 1 - change P

Re: About my prefered settings...

2008-06-23 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John W. Moore III escribió: > Faramir wrote: > >> But now, I would like to know what cipher algorithms, hash function and >> compression I am using... and of course, I don't know how to know it. Is >> there a way to know, by looking at my public key (

Re: Oh Dear, Pin Entry Broken on openPGP card!

2008-06-23 Thread Werner Koch
On Mon, 23 Jun 2008 11:18, [EMAIL PROTECTED] said: > Returns, among the usual blurb this: PIN retry counter : 3 0 3. I am pretty > sure that this should say 3 3 3 or 2 2 3 or 0 0 3. basically the first and > second digit (which refer to the unlocking pin) should always be the same. 3 > 0 3 sho

Re: gpg unusable from within an initrd

2008-06-23 Thread Werner Koch
On Sat, 21 Jun 2008 21:46, [EMAIL PROTECTED] said: > With it, in complains "gpg: Sorry, no terminal at all requested - can't > get input" Add option "--batch". Salam-Shalom, Werner -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz.

Re: (possible) feature request ;-)

2008-06-23 Thread Werner Koch
On Mon, 23 Jun 2008 10:31, [EMAIL PROTECTED] said: > I'm suggesting that such keys have the for-your-eyes flag set (because > it shouldn't be necessary to write them to disk). This flag is a property of the encrypted message and not of the key. I consider it as pretty useless because most people

Re: Testing (I got a "delayed message notification")

2008-06-23 Thread Werner Koch
On Mon, 23 Jun 2008 07:53, [EMAIL PROTECTED] said: > And I wanted to test if the list is working, or if it is down... Disk full. Sorry for the trouble. Shalom-Salam, Werner -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. ___

gpg unusable from within an initrd

2008-06-23 Thread Christoph Anton Mitterer
Hi. I have to use gpg from within an initrd. /dev/tty is not available (an won't be) only /dev/console is here. But whatever I do gpg complains: Without --no-tty it complains that /dev/tty isn't there (gpg: cannot open '/dev/tty': No such device or address) With it, in complains "gpg: Sorry, no

Oh Dear, Pin Entry Broken on openPGP card!

2008-06-23 Thread Edward Robinson
Hello all, For some reason entering the pin to my smartcard card (for decrypting, signing, authenticating) has broken... $ gpg --card-status Returns, among the usual blurb this: PIN retry counter : 3 0 3. I am pretty sure that this should say 3 3 3 or 2 2 3 or 0 0 3. basically the first and

Re: About my prefered settings...

2008-06-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Faramir wrote: > But now, I would like to know what cipher algorithms, hash function and > compression I am using... and of course, I don't know how to know it. Is > there a way to know, by looking at my public key (or sending some > command to gpg)

(possible) feature request ;-)

2008-06-23 Thread Christoph Anton Mitterer
Hi. I'm writing a suite of scripts and a little frame work for the use cryptsetup/dm-crypt within an initrd for Debian This also includes a keyscript to decrypt (symmetrically) OpenPGP encrypted dm-crypt keys. I'm suggesting that such keys have the for-your-eyes flag set (because it shouldn't be

Re: removing (uninstalling) GNUPG / GPG4Win 1.1.0.407

2008-06-23 Thread CliveSRT
There should be an entry in ADD & REMOVE Programs for the software installed. Not sure that messing with the registry would be a good idea. The error you are getting is because the program can no longer be found by Outlook. Suggest either reinstalling the application so as to replace the files

Testing (I got a "delayed message notification")

2008-06-23 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 And I wanted to test if the list is working, or if it is down... -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQEcBAEBAgAGBQJIXzptAAoJEMV4f6PvczxAAUQH/2F+84nOJJCcD6RXY94HK

About my prefered settings...

2008-06-23 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Well, I have avoided messing with the preferences settings of gpg, since I don't fully understand how does it works, and I am a bit afraid of breaking something. In special, I don't want to deliver messages that can't be read by the recipient... I con

TEXTMODE Option in Gpg4Win ?

2008-06-23 Thread Larry Seabrook
Hello, We are using the Gpg4Win product for encrypting files. The files we are encrypting and sending are text files with carriage-return and linefeed characters at the end of each line (record). The receiver of these files needs the CR and LF characters preserved by the encryption-decryption