Seeking Assurance on Security and Memory Leaks in SuSE GnuPG

2022-10-03 Thread Tony Lee via Gnupg-users
TL > I was pleased to receive a rapid response from Werner Koch, who explained that the nominated count_value of 1024 actually used a default count_value compatible with gpg 1.4, and then went on to explain that OpenPGP used an SHA1-based Key Distribution Function (KDF). Jacob B > KDF here is

Seeking Assurance on Security and Memory Leaks in SuSE GnuPG

2022-10-01 Thread Tony Lee via Gnupg-users
On Aug 27 I submitted a query to this mailing list on the same Subject as headed here, with further details on the software used. Specifically, I timed the encryption (primarily the KDF aspect) of alternative cleartext_files with various legal count_value values (1024, 131072, 2097152, 6501171

Re: Seeking Assurance on Security and Memory Leaks in SuSE GnuPG

2022-08-30 Thread Tony Lee via Gnupg-users
First: I am impressed, and honoured, to have had a fast response from Werner. I vaguely understand your explanation that the 1024 "Count" value was interpreted for backward compatibility with 1.4. However, according to the info gpg, I had followed their instructions in asking for some specific alg

Seeking Assurance on Security and Memory Leaks in SuSE GnuPG

2022-08-27 Thread Tony Lee via Gnupg-users
I have recently been seeking assurances on protection of sensitive data on my SuSE Leap 15.4 system, and protection of passwords. Issues discussed concern gpg2 2.2.27-150300.3.5.1, and keepassxc 2.7.1-bp154.3.3.1; together with hypothetical queries on Youbikey as libykpers-1-1 1.19.0-4.19. Prote

Re: issue with gpg4win

2021-12-26 Thread Kenneth H. Lee
I am having a similar issue on my Windows 11 system (upgraded from Windows 10). I've tried with no luck - adding the 2 root CAs and the intermediate CA from the referenced article - deleted the expired DST Root CA X3 - rebooted my system Regards, *Ken* *Kenneth H. Lee,

Re: issue with gpg4win

2021-12-26 Thread Kenneth H. Lee
I forgot to mention that I installed gpg4win 4.0.0 which has gpg 2.3.4 Regards, *Ken* *Kenneth H. Lee, CISSP*Google Voice: +1 646 883 9195 KHL at KENHLEE dot COM On Sun, Dec 26, 2021 at 2:36 PM Kenneth H. Lee wrote: > I am having a similar issue on my Windows 11 system (upgraded f

"gpg: signing failed: Invalid length" when use brainpool512r1 keys to sign things

2018-09-01 Thread Yanzhe Lee
lid length Key generation failed: Invalid length Best regards, Yanzhe Lee 0x3EA647C79FDA9CD1.asc Description: application/pgp-keys signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.g

Re: Hard to find alternate source of checksums

2018-06-11 Thread Lee
different sites to check the signing key fingerprints. And know enough to make sure the auto key retrieval function in GPG is turned off in your live distro Lee ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: using --keyserver but still getting gpg: no keyserver known (use option --keyserver)

2017-09-18 Thread Lee
On 9/18/17, Patrick Schleizer wrote: > gpg --keyserver hkp://pgp.mit.edu:11371 --search-keys m...@e-mail.com > > gpg --keyserver=hkp://pgp.mit.edu:11371 --search-keys m...@e-mail.com > > gpg: no keyserver known (use option --keyserver) > gpg: keyserver search failed: No keyserver available > > Wha

Cannot choose specific signing key with option --default-key

2017-06-14 Thread Yanzhe Lee
GPG Version: gpg (GnuPG) 2.1.21 libgcrypt 1.7.6 Operate System: macOS sierra 10.12.5 I have these keys with private key pub brainpoolP512r1/3EA647C79FDA9CD1 created: 2017-01-08 expires: 2032-01-05 usage: SCA trust: ultimate validity: ultimate ssb brainpoolP512r1/2D8801CE07BCC5B5 created: 2017-01

Re: Random Seed for Generating PGP Keys

2015-05-27 Thread George Lee
Hi, I'm not trying to generate multiple random numbers, but just generate a PGP key one time in a way that is very hard to crack by basing it on a one-time seed generated manually in a reliably random way. With software, there's risks that the sequence of numbers generated isn't fully random and

Re: Random Seed for Generating PGP Keys

2015-05-27 Thread George Lee
Hi, > I know that a CSPRNG is supposed to make this cryptographically secure Also, I may be wrong here -- it seems that CSPRNG sometimes refers to libgcrypt's "Continuously Seeded" and other times refers to "Cryptographically Secure." Peace, community, justice, - George _

Random Seed for Generating PGP Keys

2015-05-24 Thread George Lee
Hello, I'm interested in seeing if rather than relying on the built-in software to generate randomness when creating a PGP key, if it is possible to configure GnuPG to use a manually entered random seed. That way I could generate a seed using coins, dice, my magic cauldron, etc. Is this possible

Re: Import "Raw" RSA Secret Key?

2013-12-20 Thread Micah Lee
here-0.36/src/share ./pem2openpgp 'User ID ' < rsa_key (I haven't tested this exactly.) -- Micah Lee signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Another step towards crowdfunding

2013-12-17 Thread Micah Lee
er vendors to also do certificate pinning, bypassing PKI based on CAs altogether? -- Micah Lee signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: X.509 certificates for https://gnupg.org

2013-12-17 Thread Micah Lee
wik.php?idsite=1&rec=1"; style="border:0" alt="" /> You can pass other data to Piwik in this method as well (like page title) but it doesn't use javascript, so it's less intrusive: http://developer.piwik.org/api-reference/tracking-api -- M

Re: Another step towards crowdfunding

2013-12-17 Thread Micah Lee
directs to port 443. > I hesitate to pay the highwaymen. Yeah... The problem is you're wanting to make GnuPG go mainstream but then you end up with people seeing this: http://i.imgur.com/53nvUqm.png -- Micah Lee signature.asc Description: OpenPGP digital signature ___

Re: X.509 certificates for https://gnupg.org [was: Re: Another step towards crowdfunding]

2013-12-16 Thread Micah Lee
. I'd like to see GPG have just as good web security. (And for that matter, why do I have two cookies in my browser that gnupg.org set? _pk_id.1.9e41 and _pk_ses.1.9e41 -- the id one is a unique id, which means it can be used to track my movements through that domain even if I switch IPs.) --

Re: Another step towards crowdfunding

2013-12-16 Thread Micah Lee
can find security-hardened config examples here: https://github.com/ioerror/duraconf -- Micah Lee signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Another step towards crowdfunding

2013-12-13 Thread Micah Lee
bsite, could you add HTTPS to your to do list? Using HTTPS, making HTTP redirect to HTTPS, using the HSTS header, using perfect forward secrecy ciphersuites, and all those other best practices? I'm well aware of the drawbacks of CAs and centralized trust, but I don't think that's

Re: Another step towards crowdfunding

2013-12-13 Thread Micah Lee
bsite, could you add HTTPS to your to do list? Using HTTPS, making HTTP redirect to HTTPS, using the HSTS header, using perfect forward secrecy ciphersuites, and all those other best practices? I'm well aware of the drawbacks of CAs and centralized trust, but I don't think that's

RE: GnuGP Error

2011-04-07 Thread Lee Elcocks
What is the error? > Subject: GnuGP Error > To: Gnupg-users@gnupg.org > From: bshadl...@hertz.com > Date: Thu, 7 Apr 2011 15:25:28 +1300 > > > Hi there, > > We are using GnuGP 1.1.3 on a few PCs, all able to decrypt using 1 public > key. I can use it on my PC, but a new user on a new PC is ge

RE: gpg-zip : passphrase as parameter for scripts

2011-04-04 Thread Lee Elcocks
g-zip, and neither does GPG, thats what the error is telling you. > Date: Mon, 4 Apr 2011 16:43:08 +0200 > Subject: Re: gpg-zip : passphrase as parameter for scripts > From: arno.stef...@googlemail.com > To: l_elco...@hotmail.co.uk > > 2011/4/4 Lee Elcocks : > >

RE: gpg-zip : passphrase as parameter for scripts

2011-04-04 Thread Lee Elcocks
Take the space out between the "password" and the pipe I.E. echo password| gpg-zip > Date: Mon, 4 Apr 2011 03:02:08 -0700 > From: arno.stef...@googlemail.com > To: gnupg-users@gnupg.org > Subject: gpg-zip : passphrase as parameter for scripts > > > I am using in a script, with more than one

RE: Hi

2011-03-31 Thread Lee Elcocks
Im sorry, this email was not sent by me, ive been "hacked" should not happen again (fingers crossed) apologies to all Lee > Date: Thu, 31 Mar 2011 07:25:00 -0400 > From: thaj...@gmail.com > To: l_elco...@hotmail.co.uk > CC: gnupg-users@gnupg.org > Subject: Re: Hi

Hi

2011-03-31 Thread Lee Elcocks
hi it's in your best interests to start this right away http://bit.ly/gntBne ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

RE: empty file generated when running GPG batch

2011-03-24 Thread Lee Elcocks
Your out put should look like this. "C:\encryptedfiles\%%F.pgp" %%F From: jer...@jeromebaum.com To: johnathan.barb...@elephant.com Subject: Re: empty file generated when running GPG batch Date: Thu, 24 Mar 2011 10:53:23 + CC: gnupg-users@gnupg.org jb writes: > Hi, this is running i

RE: How can I drop a file for encryption on the GPA FileManager

2010-11-22 Thread Lee Elcocks
Good Luck with GPG4win, i cannot find any decent documentation on how to use! and get no reply's from the GPG4Win mailing lists either. You can't sign and encrypt a file at the same time either through the command line so i had to abort and go back to PGP. Really annoyed i waisted my time on th

GPG 4 Win

2010-11-18 Thread Lee Elcocks
Hello I have finaly managed to import PKSC12 files into GPGSM. Is their a way of importing OpenPGP keys into GPGSM? When trying i am just getting error Error: End of file The client insists that we use RSA keys using openSSL and bundle into P.12 Files, their public key are come as .txt

GPG4WIN

2010-11-15 Thread Lee Elcocks
Hi Couple of questions if i can about GPG4Win? I need to import .p12 files, how do i do this via the command line Do i need to make config changes somewhere? Can i automate GPG2 like i could GPG? Can i make a config file and load extension IDEA.dll so that it can use IDEA algorithm? Ar

David E. Lee is out of the office

2010-11-12 Thread David E. Lee
I will be out of the office starting 11/12/2010 and will not return until 11/15/2010. ** This message and any attachments contain information from Union Pacific which may be confidential and/or privileged. If you are not the intended recipient, be aware that any disclosure, copying, distribut

FW: Import .p12 key file

2010-11-11 Thread Lee Elcocks
: l_elco...@hotmail.co.uk To: w...@gnupg.org; r...@sixdemonbag.org Subject: RE: Import .p12 key file Date: Thu, 11 Nov 2010 14:12:15 + CC: gnupg-users@gnupg.org I use GPG version 1.4.10 is this one of the verrsions that *can* support pkcs12 keys? If so, How? Lee > From: w...@gnupg.org &

RE: Import .p12 key file

2010-11-11 Thread Lee Elcocks
I use GPG version 1.4.10 is this one of the verrsions that *can* support pkcs12 keys? If so, How? Lee > From: w...@gnupg.org > To: r...@sixdemonbag.org > Subject: Re: Import .p12 key file > Date: Wed, 10 Nov 2010 19:29:51 +0100 > CC: gnupg-users@gnupg.org > > On Wed,

Import .p12 key file

2010-11-10 Thread Lee Elcocks
Hi I want to be able to import our private keys into GPG. Our keys are .p12 files but this doesnt seem to work. Is their a way to get these .p12 key files into GPG? if so, what is the command? Many thanks for any help. Lee

RE: Scripting

2010-10-12 Thread Lee Elcocks
, please could you give the command, by the way does putty support SFTP with TLS authentication? > Subject: Re: Scripting > From: reid.thomp...@ateb.com > To: l_elco...@hotmail.co.uk > CC: reid.thomp...@ateb.com > Date: Tue, 12 Oct 2010 08:45:46 -0400 > > On Tue, 2010-10-12 at

Scripting

2010-10-12 Thread Lee Elcocks
Hello all. This is my last resort. I know that this is not the realy the correct place to pose such a question. I have now succesfully set up a fully automated GPG solution, with the help of all of you on this list. However my next task is to intergrate the scripts with GPG with WINS

gnu automatic decryption

2010-10-08 Thread Lee Elcocks
SETLOCAL PATH=C:\Program Files (x86)\GNU\GnuPG;%PATH% >"%TMP%\~decryptlist.txt" DIR /B "C:\decrypt_here" PUSHD "C:\decrypt_here" FOR /F "delims=" %%F IN ('MORE ^< "%TMP%\~decryptlist.txt"') DO ( IF EXIST %%F ( ECHO bingos| GPG --batch --yes --passphrase-fd 0 --decrypt-files *.pgp -o "C:\decrypted

RE: batch file automation -Nearly There!

2010-10-08 Thread Lee Elcocks
Hi, I have the signing key as the default key in the config file, do i still have to use both in the command, the encyption and signing is working perfectly, just the output of the file name (and size) that i cannot get to work. Im really sorry, ell explain what i need the script to be able

batch file automation -Nearly There!

2010-10-07 Thread Lee Elcocks
e using PGP, (but like i said, the file is empty) Hope ive explained clearly enough, thanks to all that have helped me get to this stage. Lee ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

[no subject]

2010-10-06 Thread Lee Elcocks
on windows scheduler. I want to drop any file into the drop folder and GPG to output the encyrpted file with the same name. The file names will be different everytime. Any help with this greatly appreciated Lee Elcocks

encryption automation

2010-10-06 Thread Lee Elcocks
scheduler. I want to drop any file into the drop folder and GPG to output the encyrpted file with the same name. The file names will be different everytime. Any help with this greatly appreciated Lee Elcocks

schedule batch file

2010-10-05 Thread Lee Elcocks
d i mean any help at all would be greatly appreciated! Many Thanks Lee ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

David E. Lee is out of the office

2010-07-30 Thread David E. Lee
I will be out of the office starting 07/29/2010 and will not return until 08/02/2010. ** This message and any attachments contain information from Union Pacific which may be confidential and/or privileged. If you are not the intended recipient, be aware that any disclosure, copying, distribut

Re: Passphrase error

2010-01-07 Thread Andre Lee
Hey John, Same code that was deployed on this server has worked on 2 other servers, my dev and test servers.  The code has not been altered in anyway.  I've found that the linux admin had to tweek the new test server to get it working like the dev server.  After that tweet was made the code sta

Re: Passphrase error

2010-01-06 Thread Andre Lee
Hey Guys, I'm back again with another crazy GPG issue:  I receive the following error when I run my decryption process through the Oracle BPEL process: gpg: public key is E3328CE0 gpg: using secondary key E3328CE0 instead of primary key 26C55D64 gpg: using secondary key E3328CE0 instead of pr

Passphrase error

2010-01-06 Thread Andre Lee
Hey Guys, I'm back again with another crazy GPG issue:  I receive the following error when I run my decryption process through the Oracle BPEL process: ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-us