Re: How are primary key binding signatures (0x19) handled by gpg?

2014-05-22 Thread David Shaw
On May 22, 2014, at 1:04 PM, martijn.list wrote: > According to RFC 4880 > > "For subkeys that can issue signatures, the subkey binding signature > MUST contain an Embedded Signature subpacket with a primary key binding > signature (0x19) issued by the subkey on the top-level key." > > The sub

Re: How are primary key binding signatures (0x19) handled by gpg?

2014-05-22 Thread Daniel Kahn Gillmor
On 05/22/2014 01:04 PM, martijn.list wrote: > The sub key of the following key (key ID 0549B8A5640444E6) is valid for > signing (RSA Encrypt or Sign) but it does not contain a primary key > binding signature: > > http://pgp.mit.edu/pks/lookup?search=0x0549B8A5640444E6&op=index The subkey here (0

How are primary key binding signatures (0x19) handled by gpg?

2014-05-22 Thread martijn.list
According to RFC 4880 "For subkeys that can issue signatures, the subkey binding signature MUST contain an Embedded Signature subpacket with a primary key binding signature (0x19) issued by the subkey on the top-level key." The sub key of the following key (key ID 0549B8A5640444E6) is valid for s

On composing scrypt and openpgp s2k key stretching for symmetric encryption

2014-05-22 Thread Brian Gitonga Marete
Hello all! What would be the security effect of generating a 32 byte key from a passphrase using scrypt and then using that as a "passphrase" for openpgp's symmetric encryption (this 32 byte key will of course then be acted upon by openpgp's s2k algorithm). Specifically, can one expect that this w