GpgME: Compile under MinGW

2006-02-22 Thread Kiefer, Sascha
Hi, I downloaded the latest GpgME version and called configure. The last lines it outputes are: configure: WARNING: *** *** ttyname() is not thread-safe and ttyname_r() does not exist *** checking whether we are using the GNU C Library 2.1 or newer... no checking for getenv_r... no configure: WAR

RE: PKA

2005-12-26 Thread Kiefer, Sascha
Not sure: PKI - Public Key Infrastructure PKA - Public Key Application ? HTH --esskar > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Pawel Shajdo > Sent: Dienstag, 27. Dezember 2005 01:44 > To: gnupg-users@gnupg.org > Subject: PKA > > > Salve! >

OT: Salted Hashes and dictionary attacks

2005-11-15 Thread Kiefer, Sascha
Hi. I'm i right: We calculate the salted hash d of the password p and the salt s using the hash-function H like this: d = H( p + s ) + s This will have the affect that d != H( p + s' ) + s' (only if s != s') but will not protect us against a dictionary attack since we can easily precompute H( w

RE: Multiple signing - is this a common desire? (was Re: Signing MS-Excel spread sheets)

2005-09-05 Thread Kiefer, Sascha
Well, i do not know about files, but our product signs mails using multiple-signatures (at least two signatures are required before a mail leaves the system). So i think it is NOT a bad feature. Regards, Sascha > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] O

RE: Outlook & S/MIME

2005-07-05 Thread Kiefer, Sascha
Well, I thought about a makro or something similar. But thanks anyway! > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of John W. Moore III > Sent: Dienstag, 5. Juli 2005 20:32 > To: gnupg-users@gnupg.org > Subject: Re: Outlook & S/MIME > > > -BE

RE: Outlook and S/MIME

2005-07-04 Thread Kiefer, Sascha
Well, the person does not have a public key in the first place. But outlook does not know that in advance. After clicking on "Send" an error is raised that the mail can not be send encrypted because of the missing public key. :) > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[E

RE: automating signing of keys

2005-07-01 Thread Kiefer, Sascha
Hi. Well, i think you have to trust the key somehow by default, Or try using the option "--always-trust" HTH --sk > I have not seen any responses. But I have an add'l question: > after importing, and verifying is it required to sign the new > key prior to encrypting? _

RE: How to detect inline PGP in mails! Best practice?

2005-06-18 Thread Kiefer, Sascha
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm not aware of that. Are u using mutt? May u send me a signed, encrypted and your public key so i can get the idea? Regards, Sascha > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Alain Bench > Sent

RE: How to detect inline PGP in mails! Best practice?

2005-06-18 Thread Kiefer, Sascha
Thanks. I use a similar approaches... I just finished (more less) the part yesterday where the body is text/html only and does not have an alternative text/plain. What i figuered that you can pipe any content (encrypted or/and signed) to gnupg using the option --decrypt and it will verify and/or de

RE: GnuPG Clearsign vs. PGP/MIME Signing

2005-06-05 Thread Kiefer, Sascha
> Possibly the confusion is that RFC-2015 was updated by > RFC-3156. You should do things the 3156 way. > > David Well, as far as i see there is no difference between the MIME format of rfc2015 and rfc3156. So, what is right? RFC like: Content-Type: multipart/signed; micalg=pgp-md5 pro

RE: GnuPG Clearsign vs. PGP/MIME Signing

2005-06-04 Thread Kiefer, Sascha
Signing > > > On Sat, Jun 04, 2005 at 10:42:51AM +0200, Kiefer, Sascha wrote: > > Hmm. > > I just implemented RFC2015 3 days ago. > > The format of PGP/MIME described in that paper does not match the > > format you are using. Your mails start with a Content-Type

RE: GnuPG Clearsign vs. PGP/MIME Signing

2005-06-04 Thread Kiefer, Sascha
rsign vs. PGP/MIME Signing > > > Kiefer, Sascha wrote: > > >Hmm. > >I just implemented RFC2015 3 days ago. > >The format of PGP/MIME described in that paper does not match the > >format you are using. Your mails start with a Content-Type of > >multipa

RE: GnuPG Clearsign vs. PGP/MIME Signing

2005-06-04 Thread Kiefer, Sascha
Hmm. I just implemented RFC2015 3 days ago. The format of PGP/MIME described in that paper does not match the format you are using. Your mails start with a Content-Type of multipart/mixed and you declare The pgp data as attachments. But this is not true. Maybe I'm missing something, or your message

RE: Pref

2005-06-02 Thread Kiefer, Sascha
> "At least". Does the bank has contracted anyone with enough > knowledge of cryptography to make educated assumptions about > the strength of the different algorithms in GnuPG? Hopefully! :) But i think, it's not the boss of the bank that will change those Settings but the security administrat

RE: Pref

2005-06-01 Thread Kiefer, Sascha
> Yes, but this is a bad mistake to make. If an algorithm does > not appear in someones preferences, then it shouldn't be > used. For example, IDEA is an optional algorithm in OpenPGP. > If your administrator decides that everyone should use IDEA, > that will mean that some users will not be

RE: Pref

2005-06-01 Thread Kiefer, Sascha
> Yes, you will. > > However, why are you doing this? GnuPG automatically does > this for you. Not really. Only if i change the pref for the key i use. My system is similar to the PGP universal system which runs on a server. Let's think about SHA-1. Right now, it will be the preferred hash alg

RE: Pref

2005-06-01 Thread Kiefer, Sascha
> > 3. Will i get more than that "uid:uSascha Kiefer (test4711) > > <[EMAIL PROTECTED]>1,:" information if i do not have a private > > key? > > I'm not sure what you're asking here. Well, i have an automated system where you are able to define some policies e.g. use just AES256 for

Pref

2005-05-31 Thread Kiefer, Sascha
Hi I have same questions! 1. what is the difference between showpef and pref using the option "--with-colons" ? 2. S9 S8 S7 S3 S2 H2 H3 Z2 Z1: S=symmetric, H=hash, Z=compression? H3 means RIPEMD160 because "gpg.exe --version" tells me that the hashing algorithms that are supported are MD5, SHA1,

OpenPGP Message Encryption in JavaScript

2005-03-24 Thread Kiefer, Sascha
Hi. I just found this website: http://www.hanewin.de/encrypt/main.htm I think it's pretty nice. Would do you think about it? --sk ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

RE: Shouldn't keyservers store and provide subkeys?

2005-03-24 Thread Kiefer, Sascha
Go for it! > BTW, to avoid answering these questions over and over, should > we just setup working keyservers under the gnupg.net domain? > It seems the old and broken pgp.net servers will never vanish. ___ Gnupg-users mailing list Gnupg-users@gnup

Bug or Feature in rndw32.c ?

2005-03-22 Thread Kiefer, Sascha
I just had a look on the source to get an idee of gathering entropy. I noticed the following: Line 660-664: (*add) ( &minimumWorkingSetSize, sizeof (&minimumWorkingSetSize), requester ); (*add) ( &maximumWorkingSetSize, sizeof (&maximumWorkingSetSize), reques

RE: GPGee - GPG Explorer Extension (context menu) front end

2005-03-21 Thread Kiefer, Sascha
Well, It would be nice to have a control to select the keyring location. I keep my keys on a memory stick, so i'm not able to use your tool! --esskar > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Kurt Fitzner > Sent: Montag, 21. März 2005 23:19 >

RE: Saving photo of a key to a given filename

2005-03-16 Thread Kiefer, Sascha
Well, i use a c++ program to do the same (using CreateProcess and redirecting STDIN, STDOUT, STDERR) My code is STARTUPINFO si; BOOL result; memset(&si, 0, sizeof(si)); si.cb = sizeof(si); si.dwFlags = STARTF_USESTDHANDLES | STARTF_USESHOWWINDOW; si.hStdInput = m_childstdinrd; si.hStdOutput =