Yubikeys and GnuPG 2.2/2.3

Hi all, I run GnuPG 2.2.27 on Windows 10 and gpg-agent + ssh-pageant (from Cygwin) with Yubikey NEO for my SSH needs. For some time now, gpg-agent has problems detecting my Yubikey. Windows sometimes detects Yubikey as "Unknown Smart Card" and I used to resort to manually updating the driver to g

Re: Gpg4win LetsEncrypt issue

Am Mittwoch 05 Januar 2022 09:16:52 schrieb Alex Nadtoka via Gnupg-users: > Is there a way to enable more detailed debug mode so I can see the path for > the certificate that dirmngr is using? Use dirmngr.conf to add more diagnostic output, e.g. log-file c:\XYZ debug-level advanced and restart

Re: one ecc key-pair for both encryption and signature?

There is anequivalence given (two functions) in the Ed25519 wikipedia page, but I don't know if this allows the same curve used in both algorithms. Yes, in the same way that if you torture a DSA key long enough you can get the Elgamal encryption algorithm out of it. But once you do that, *you

Re: one ecc key-pair for both encryption and signature?

On 07/01/2022 16:55, Bernhard Reiter wrote: > Then RSA should be limited in the same way. (Because there it is possible, so I guess that there is another reason.) I agree, although IIRC such usage is supported for backwards compatibility reasons. | The curve is birationally equivalent to a

Re: one ecc key-pair for both encryption and signature?

Am Freitag 07 Januar 2022 15:21:45 schrieb Andrew Gallagher via Gnupg-users: > On 07/01/2022 14:06, Bernhard Reiter wrote: > > With 2.2.33 is is not possible to create a single ecc key-pair > > that can do "sign" and "encrypt". > > it is best practice to keep the encryption-capable subkey distinct.

Yubikeys and GnuPG 2.2/2.3

Hi all, I run GnuPG 2.2.27 on Windows 10 and gpg-agent + ssh-pageant (from Cygwin) with Yubikey NEO for my SSH needs. For some time now, gpg-agent has problems detecting my Yubikey. Windows sometimes detects Yubikey as "Unknown Smart Card" and I used to resort to manually updating the driver to g

Re: one ecc key-pair for both encryption and signature?

I know that "ed25519" and "cv25519" are different algorithms, but from my limited understanding the same key-pair should be usable for both encrypting and signing in theory? Ed25519 is (effectively) a Schnorr signature done over an Edwards curve. Schnorr signatures have really no capability of

Re: one ecc key-pair for both encryption and signature?

On 07/01/2022 14:06, Bernhard Reiter wrote: With 2.2.33 is is not possible to create a single ecc key-pair that can do "sign" and "encrypt". There are circumstances (legal, contractual, operational) where you may need to disclose or share an encryption key, so it is best practice to keep the

one ecc key-pair for both encryption and signature?

With 2.2.33 is is not possible to create a single ecc key-pair that can do "sign" and "encrypt". I know that "ed25519" and "cv25519" are different algorithms, but from my limited understanding the same key-pair should be usable for both encrypting and signing in theory? Can someone point me to an

Re: Having two versions of GPG on Linux causes problem

* 2022-01-07 13:45:09+0800, foods.bolds wrote: > I installed two versions of GnuPG on Ubuntu using two package > managers. > It seems that GPG 2.3 invoked the old version of gpg-agent residing in > /usr/bin. I cannot delete the old gpg because it is a dependency of > other software. Probably the

Having two versions of GPG on Linux causes problem

Hi, I installed two versions of GnuPG on Ubuntu using two package managers. GPG 2.2 is installed with built-in apt and GPG 2.3 is installed with LinuxBrew. The path of LinuxBrew has priority in the $PATH so it is invoked in the terminal (which is what I want). However whenever I uses it, it sho