Re: Certification-only key

2017-06-02 Thread Lionel Elie Mamane
On Wed, May 31, 2017 at 05:42:10PM +0200, Peter Lebbing wrote: > On 31/05/17 14:52, Lionel Elie Mamane wrote: >> Right to be forgotten. The signatures I made a long time ago were made >> by a different person, although there is a continuity between the >> two. > Talking a

Re: Certification-only key

2017-05-31 Thread Lionel Elie Mamane
On Mon, Oct 04, 2010 at 10:45:02AM -0700, Doug Barton wrote: > On 10/4/2010 8:22 AM, Lionel Elie Mamane wrote: >> Also, when my signature subkey expires, it would (I guess) silently >> start using the primary. Which makes me_very_ happy I chose to make >> my primary certif

Re: C# .dll availability?

2014-04-25 Thread Lionel Elie Mamane
On Thu, Apr 24, 2014 at 10:07:31PM +, Charles Spitzer wrote: > Is there a GnuPGP project anywhere that does PGP encryption that is > usable in a C# application? I know I can execute commands at a > command line to do this, but that would require the plaintext to > reside on disk somewhere and

Re: Certification-only key

2010-10-04 Thread Lionel Elie Mamane
On Tue, Sep 06, 2005 at 01:03:00AM +0200, Lionel Elie Mamane wrote: > On Mon, Sep 05, 2005 at 04:46:46PM -0400, David Shaw wrote: >> On Mon, Sep 05, 2005 at 09:35:50PM +0200, Lionel Elie Mamane wrote: >>> You could argue I could have this without marking the key as >>>

Re: Changing GPG's default key type?

2009-07-30 Thread Lionel Elie Mamane
On Wed, Jul 29, 2009 at 05:14:04PM +0200, Jan Suhr wrote: > For my understanding GnuPG is standard conform and creates a "DSA > primary key (1024 bits - not "DSA2") with an Elgamal subkey per > default." > It was discussed in May to change this standard to 2048-bit RSA key: > http://www.imc.org/i

Re: Finally: Login via SSH authentication with OpenPGP smart card & 100% Free Software PCMCIA reader

2006-02-19 Thread Lionel Elie Mamane
On Sat, Feb 18, 2006 at 07:25:46AM +0100, Lionel Elie Mamane wrote: > On Sat, Feb 18, 2006 at 12:33:03AM +0200, Alon Bar-Lev wrote: >> I still don't understand why you use PKCS#1, PKCS#8, X.509, CMC, >> S/MIME and more... Why don't you invent some replacements for thes

On protocols [was: Finally: Login via SSH authe ntication with OpenPGP smart card & 100% Free Software PCMCIA reader]

2006-02-19 Thread Lionel Elie Mamane
On Sun, Feb 19, 2006 at 02:54:13PM -0500, Nicholas Sushkin wrote: > On Sunday 19 February 2006 01:14, [EMAIL PROTECTED] wrote: >> On Sat, Feb 18, 2006 at 12:33:03AM +0200, Alon Bar-Lev wrote: >>> I still don't understand why you use PKCS#1, PKCS#8, X.509, CMC, >>> S/MIME and more... Why don't you

Re: Finally: Login via SSH authentication with OpenPGP smart card & 100% Free Software PCMCIA reader

2006-02-17 Thread Lionel Elie Mamane
On Sat, Feb 18, 2006 at 12:33:03AM +0200, Alon Bar-Lev wrote: > I still don't understand why you use PKCS#1, PKCS#8, X.509, CMC, > S/MIME and more... Why don't you invent some replacements for these > too? Big news for you: We are here precisely because we prefer OpenPGP to S/MIME. And *I* certai

Re: new version of gnupg signed with different key?

2006-02-17 Thread Lionel Elie Mamane
On Fri, Feb 17, 2006 at 08:11:59PM +0100, Werner Koch wrote: > Yeah, we are using Subversion for quite some time now. But http://www.gnupg.org/(en)/download/cvs_access.html is still there, linked from http://www.gnupg.org/, and giving false information under the seal of "official". Please update

Re: OpenPGP smartcard: addcardkey fails

2006-02-16 Thread Lionel Elie Mamane
On Thu, Feb 16, 2006 at 01:59:57PM +1030, Alphax wrote: > Lionel Elie Mamane wrote: >> I'm trying to generate an authentication subkey (tied to my main >> OpenPGP key) in my OpenPGP (FSFE Fellowship) smartcard (for poldi / >> SSH use), but can't get it to work

Re: OpenPGP smartcard: addcardkey fails

2006-02-15 Thread Lionel Elie Mamane
On Wed, Feb 15, 2006 at 07:50:17PM +0100, Lionel Elie Mamane wrote: > I'm trying to generate an authentication subkey (tied to my main > OpenPGP key) in my OpenPGP (FSFE Fellowship) smartcard (for poldi / > SSH use), but can't get it to work. gpg --edit-card and --card-status &

OpenPGP smartcard: addcardkey fails

2006-02-15 Thread Lionel Elie Mamane
Hi, I'm trying to generate an authentication subkey (tied to my main OpenPGP key) in my OpenPGP (FSFE Fellowship) smartcard (for poldi / SSH use), but can't get it to work. gpg --edit-card and --card-status works like a charm. Command> addcardkey gpg: detected reader `SCM SCR 335 (60600ad9) 00 0

Re: OpenPGP smartcard: addcardkey fails

2006-02-15 Thread Lionel Elie Mamane
On Wed, Feb 15, 2006 at 07:50:17PM +0100, Lionel Elie Mamane wrote: > Hi, > > I'm trying to generate an authentication subkey (tied to my main > OpenPGP key) in my OpenPGP (FSFE Fellowship) smartcard (for poldi / > SSH use), but can't get it to work. gpg --edit-card and -

Re: Prefered algorithms priority

2005-11-07 Thread Lionel Elie Mamane
On Mon, Nov 07, 2005 at 07:10:26PM +0100, Christoph Anton Mitterer wrote: > As you probably know, one can set his prefered algorithms for a OpenPGP > key using setpref. > How is the priority specified? Is it from left to right, meaning that an > algorithm a left from another (b) is preferd in f

Re: OpenPG/X.509 interoperability

2005-11-02 Thread Lionel Elie Mamane
On Mon, Oct 31, 2005 at 12:36:13AM +0100, Christoph Anton Mitterer wrote: > What about the two big "free" X.509" suppliers (CACert and Thawte) > do they sign OpenPGP keys? Thawte used to, but doesn't anymore. CACert does. -- Lionel ___ Gnupg-users ma

Re: Migrating from PGP TO GPG

2005-10-05 Thread Lionel Elie Mamane
On Wed, Oct 05, 2005 at 10:41:17AM -0700, amit bhalerao wrote: > Is there any way i can validate that decryption process has been > successful base on error code? Do you have any document which list > down possible error code and cause of failure. Use --status-fd and read doc/DETAILS in t

Re: Migrating from PGP TO GPG

2005-10-05 Thread Lionel Elie Mamane
On Mon, Oct 03, 2005 at 05:02:52PM -0700, amit bhalerao wrote: > I want to decrypt a gpg encrypted document using a GPG. Is there > any way i can decrypt it in a non -interactive mode so that it > doesn't ask for passphrase.I want to execute the command in shell > script. > Any pointer t

Re: Any way to get smaller key sizes?

2005-09-28 Thread Lionel Elie Mamane
On Tue, Sep 27, 2005 at 06:21:57PM -0400, Jason Barrett wrote: > I am using GPG for encryption of sensitive information in a > database. Some members of the development team are concerned about > the space taken up by strings encrypted with 1024-bit keys You may want to look into elliptic curves

Re: Strange problem and key preferences

2005-09-24 Thread Lionel Elie Mamane
On Sat, Sep 24, 2005 at 11:57:21PM +0400, lusfert wrote: > Also I didn't understand how to set up preferences for a key: > allowed and preferred ciphers, digest algorithms and compress > methods. It is possible to set up them using PGP Desktop 9. gpg --edit-key 0xKeyID setpref "the preferences yo

Re: PGP2...

2005-09-22 Thread Lionel Elie Mamane
On Thu, Sep 22, 2005 at 10:25:02AM +0200, Laurent Jumet wrote: > Is this signature on the message, a PGP2 one? You made this signature with a DSS key. You "must" use an RSAv3 key to do PGP2-compatible signatures, I believe. Where PGP2 is the "official" version. And use MD5, not SHA1. -- Lio

Re: UbuntuLinux GPG Still Doesn't Work With Remailers

2005-09-22 Thread Lionel Elie Mamane
On Thu, Sep 22, 2005 at 01:59:17AM +0200, Laurent Jumet wrote: > Johan Wevers <[EMAIL PROTECTED]> wrote: > On my system, --pgp2 doesn't work. > The FAQ says --rfc1991 should be used instead, and this works. > This message should be signed in a PGP2-compliant way. To encrypt / sign in

Re: UbuntuLinux GPG Still Doesn't Work With Remailers

2005-09-22 Thread Lionel Elie Mamane
On Thu, Sep 22, 2005 at 09:38:21AM +0200, Lionel Elie Mamane wrote: > On Thu, Sep 22, 2005 at 01:59:17AM +0200, Laurent Jumet wrote: > > Johan Wevers <[EMAIL PROTECTED]> wrote: > > > On my system, --pgp2 doesn't work. > > The FAQ says --rfc1991 sho

Re: Migrating from PGP TO GPG

2005-09-16 Thread Lionel Elie Mamane
On Tue, Sep 13, 2005 at 02:01:14PM -0700, amit bhalerao wrote: > 1. We are generating a public private key on HOST system using GPG . > 2. This keys are exported to external vendor system. Vendor will be > encrypting the file using PGP (not sure about compatibilty) > 3. Files are then decrypted

Re: OpenPGP Card

2005-09-07 Thread Lionel Elie Mamane
On Wed, Sep 07, 2005 at 01:13:02PM +0200, Janusz A. Urbanowicz wrote: > PS> The whole discussion made me curious; I worked with smartcards > extensively few years ago and was grossly disappointed with the stuff from > the development side, but times they are a'changin... Where can I purchase a > c

Re: OpenPGP Card

2005-09-06 Thread &#x27;Lionel Elie Mamane'
On Tue, Sep 06, 2005 at 04:52:55PM +0200, Zeljko Vrba wrote: > 'Lionel Elie Mamane' wrote: >> 1) Pointers being passed >>By copying the whole address space back and forth at each call and >>return? "Morally" that's not running in separate a

Re: OpenPGP Card

2005-09-06 Thread &#x27;Lionel Elie Mamane'
On Tue, Sep 06, 2005 at 04:52:55PM +0200, Zeljko Vrba wrote: > 'Lionel Elie Mamane' wrote: >>Please do so. I'm curious how you will handle: >> >> 1) Pointers being passed >> >>By copying the whole address space back and forth at each call a

Re: how to select a subkey

2005-09-06 Thread Lionel Elie Mamane
On Tue, Sep 06, 2005 at 02:48:33PM +0200, Henk M. de Bruijn wrote: > Forgive my ignorance but how do I select a subkey? I'm not sure what you mean. In the "--edit-key" menu, you type "key n", replacing "n" by a number. From the command line, you "just" use the KeyID of the key. -- Lionel _

Re: OpenPGP Card

2005-09-06 Thread &#x27;Lionel Elie Mamane'
On Tue, Sep 06, 2005 at 04:26:05PM +0200, Zeljko Vrba wrote: >> PKCS#11 IS a library API. But really, how is API different from a >> protocol? Is the only difference linking in the same address space? > BTW, I can imagine writing a version of ld.so (BSD licensed!) that > will execute different sh

Re: OpenPGP Card

2005-09-06 Thread &#x27;Lionel Elie Mamane'
On Tue, Sep 06, 2005 at 04:04:28PM +0200, Zeljko Vrba wrote: > 'Lionel Elie Mamane' wrote: >>I had understood that it was not a _protocol_ but a library API. HTTP >>is a _protocol_ for data interchange over the network. I thought >>PKCS#11 was a _library_ API and

Re: OpenPGP Card

2005-09-06 Thread &#x27;Lionel Elie Mamane'
On Tue, Sep 06, 2005 at 10:09:25AM +0200, Alon Bar-Lev wrote: > Lionel Elie Mamane wrote: >> But there is indeed a case to be made that if the library >> implements a well-known, standard ABI, then linking to it is not a >> GPL violation. Legally it depends whether the l

Re: Linux-gnupg and win-pgp

2005-09-05 Thread Lionel Elie Mamane
On Tue, Sep 06, 2005 at 01:53:18AM +0200, Stefan Fuhrmann wrote: > Am Dienstag, 6. September 2005 01:31 schrieb Lionel Elie Mamane: >> On Mon, Sep 05, 2005 at 11:26:40PM +0200, Stefan Fuhrmann wrote: >>> Im using kubuntu and so kmail with gnupg. >>> When I send an enc

Re: OpenPGP Card

2005-09-05 Thread Lionel Elie Mamane
On Tue, Sep 06, 2005 at 03:14:56PM +1200, Peter Gutmann wrote: > Lionel Elie Mamane <[EMAIL PROTECTED]> writes: >>On Mon, Sep 05, 2005 at 10:14:41PM +0200, Alon Bar-Lev wrote: >>> Since your GPLed program does not contain any other licensed code it is >>> stil

Re: Linux-gnupg and win-pgp

2005-09-05 Thread Lionel Elie Mamane
On Mon, Sep 05, 2005 at 11:26:40PM +0200, Stefan Fuhrmann wrote: > Im using kubuntu and so kmail with gnupg. > When I send an encrypted mail to win user who has pgp the encrypted mail is > attached. > 1.) Why this message is attached and pgp is not able to decrypt it? > I have to save it first an

Re: OpenPGP Card

2005-09-05 Thread Lionel Elie Mamane
On Tue, Sep 06, 2005 at 12:59:48AM +0200, Alon Bar-Lev wrote: > Lionel Elie Mamane Wrote: >> Not unless that PKCS#11 module "is normally distributed with the >> major components of the operating system". (Assuming here that the >> PKCS#11 module would is a library

Re: Certification-only key

2005-09-05 Thread Lionel Elie Mamane
On Mon, Sep 05, 2005 at 04:46:46PM -0400, David Shaw wrote: > On Mon, Sep 05, 2005 at 09:35:50PM +0200, Lionel Elie Mamane wrote: >> On Mon, Sep 05, 2005 at 01:46:07PM -0400, David Shaw wrote: >>> It's not necessarily a good idea though: some people before agreeing >>

Re: OpenPGP Card

2005-09-05 Thread Lionel Elie Mamane
On Mon, Sep 05, 2005 at 10:14:41PM +0200, Alon Bar-Lev wrote: > Zeljko Vrba wrote: >> Neither do I understand that. Werner didn't give a single plausible >> argument except possibly of license incompatibility. But in my >> understanding, just incorporating PKCS#11 support into GnuPG would >> NOT

Re: Certification-only key

2005-09-05 Thread Lionel Elie Mamane
On Mon, Sep 05, 2005 at 01:46:07PM -0400, David Shaw wrote: > On Mon, Sep 05, 2005 at 04:41:40PM +0200, Lionel Elie Mamane wrote: >> I tried to generate an RSAv4 certification-only key with GnuPG, but >> failed, even in "expert mode". >> Is this impossible with Gnu

Certification-only key

2005-09-05 Thread Lionel Elie Mamane
Hi, I tried to generate an RSAv4 certification-only key with GnuPG, but failed, even in "expert mode". What I mean is a primary key that can be used to attach a subkey to it, or _maybe_ also to sign UserIDs of other keys (for the Web of Trust). But not for data signatures. As I understand the RFC