Difference between clearsign and detached signatures?

2014-08-28 Thread TJ
I've recently been digging deep into the source-code trying to understand what the differences are between --clearsign and --detach-sign signatures. This came about whilst writing code that calls on "gpg --verify" on detached signatures; specifically Debian APT archives that contain "Release" (

Re: Public Key Algorithms - GnuPG 2.x lists fewer than GnuPG 1.x

2014-08-28 Thread Werner Koch
On Thu, 28 Aug 2014 12:11, kristian.fiskerstr...@sumptuouscapital.com said: > Speaking of which, with libgcrypt 1.7.0 this has the fun variant of > (note the 3x RSA, without distinguishing -S and -E) be98b59 gpg: Do not show "MD5" and triplicated "RSA" in --version. Thanks, Werner -- Die

Re: email verification as casual checking?

2014-08-28 Thread Steve Jones
On Thu, 28 Aug 2014 13:12:30 +0200 Philip Jackson wrote: > Whether or not I want to send secrets to a person depends on lots of > things. I think at present that I would be unlikely to send any > important secret by email. I cannot imagine my confidence levels on > the person's identity or trust

Re: email verification as casual checking?

2014-08-28 Thread Philip Jackson
On 28/08/14 00:58, Steve Jones wrote: > On Sat, 23 Aug 2014 12:56:11 +0200 > Philip Jackson wrote: > >> - the email address belongs to a person who does control the key and >> he may or may not be the person named in the email address. I am >> risking my secrets with an unknown person. I had be

Re: Public Key Algorithms - GnuPG 2.x lists fewer than GnuPG 1.x

2014-08-28 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 08/28/2014 11:57 AM, Werner Koch wrote: > On Wed, 27 Aug 2014 23:27, 2014-667rhzu3dc-lists-gro...@riseup.net > said: >> 1.4.16: RSA, RSA-E, RSA-S, ELG-E, DSA >> >> 2.0.26: RSA, ELG, DSA >> >> Is this actually a change in what is supported, or ju

Re: Public Key Algorithms - GnuPG 2.x lists fewer than GnuPG 1.x

2014-08-28 Thread Werner Koch
On Wed, 27 Aug 2014 23:27, 2014-667rhzu3dc-lists-gro...@riseup.net said: > 1.4.16: RSA, RSA-E, RSA-S, ELG-E, DSA > > 2.0.26: RSA, ELG, DSA > > Is this actually a change in what is supported, or just how GnuPG > reports it? No. RSA-E and RSA-S are the same as RSA. They merely use different algor

Re: installing gnupg-2.0.26

2014-08-28 Thread Peter Lebbing
On 27/08/14 21:43, Philip Jackson wrote: > I downloaded bzip2=1.0.6.tar.gz and now gnupg 2.0.26 seems to be working fine. > Thanks everyone for the help. The Ubuntu package libbz2-1.0 contains the actual _shared library_ that programs can use. However, if you want to _compile_ a program so it can