[Announce] GnuPG 2.5.4 released

2025-02-12 Thread Werner Koch via Gnupg-users
Hello! We are pleased to announce the availability of a new GnuPG release: version 2.5.4. This release is another one in a series of public testing releases eventually leading to a new stable version 2.6. The main features in the 2.6 series are improvements for 64 bit Windows and the

[Announce] GnuPG 2.5.3 released

2025-01-14 Thread Werner Koch via Gnupg-users
Hello! We are pleased to announce the availability of a new GnuPG release: version 2.5.3. This release is the fourth of a series of public testing releases eventually leading to a new stable version 2.6. We also release a second Beta version of the forthcoming Gpg4win 5.0. The main features in

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-07 Thread Frank Guthausen
On Tue, 7 Jan 2025 04:09:52 + have--- via Gnupg-users wrote: > > A question of netiquette: Is it acceptable to do this on a first > post to a public list? Without having a final answer, some thoughts: 1. Signed emails which are sent to a list can be verified only with the p

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-07 Thread have--- via Gnupg-users
g/pub/Legal/Cases/ACLU_v_Reno/19970626_eff_cda.announce https://www.supremecourt.gov/search.aspx?filename=/docket/docketfiles/html/public/23-1122.html signature.asc Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-07 Thread Werner Koch via Gnupg-users
stein openpgp-digital-signature.asc Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-07 Thread have--- via Gnupg-users
adable from the list server; observe the size and the correct MIME type: https://lists.gnupg.org/pipermail/gnupg-users/2025-January/067460.html -- next part -- A non-text attachment was scrubbed... Name: have-post-quantum-anonymous-sex.asc Type: application/pgp-keys S

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-06 Thread have--- via Gnupg-users
://web.archive.org/web/19971114041230/http://www.eff.org/pub/Legal/Cases/ACLU_v_Reno/19970626_eff_cda.announce https://www.supremecourt.gov/search.aspx?filename=/docket/docketfiles/html/public/23-1122.html signature.asc Description: PGP signature ___ Gnupg-users mailing

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-06 Thread Robert J. Hansen via Gnupg-users
thing going right now. OpenPGP_signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-06 Thread have--- via Gnupg-users
implementation with usable PQ encryption would be consistent with the spirit of the Net. GnuPG 2.5.1 30 days after NIST final FIPS-203 = write code, protect users. -- # Remember these on Wednesday, January 15, 2025: https://web.archive.org/web/19971024171609/http://www.eff.org/blueribbon.html https

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-06 Thread Steffen Nurpmeso
[i removed h...@anonymous.sex; never did such..] Michael Richardson wrote in <20925.1736187...@obiwan.sandelman.ca>: |Werner Koch via Gnupg-users wrote: |> There is one remaining reason for having a network of synced |> keyservers: To distribute revocations. | |> Lookup of k

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-06 Thread Michael Richardson
Werner Koch via Gnupg-users wrote: > There is one remaining reason for having a network of synced > keyservers: To distribute revocations. > Lookup of keys by anything other than a fingerprint has no more > justification. And for that feature a simple distibuted

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-06 Thread Vincent Breitmoser via Gnupg-users
nclude-key-block. This does not even require mail. For both of these options, do you think PQC-sized public keys might become a challenge? Cheers - V ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Infrastructure support for GnuPG post-quantum keys

2025-01-06 Thread Werner Koch via Gnupg-users
nature ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GnuPG meets the standard of care set by Signal (Re: Betamax v. VHS, and the future of PQ-PGP)

2025-01-03 Thread Robert J. Hansen via Gnupg-users
st possible version of someone else's argument and engaging with that -- as I am attempting to do with you -- is called "steelmanning", and is seen as a courtesy among serious people. The foregoing timeline comparison MUST NOT be taken as a criticism of GnuPG. On the one hand, than

Infrastructure support for GnuPG post-quantum keys (Re: Betamax v. VHS, and the future of PQ-PGP)

2025-01-03 Thread have--- via Gnupg-users
This is a followup on infrastructure support for PQ-PGP keys. On Wed, 1 Jan 2025 23:57:25 +, h...@anonymous.sex wrote: I attempted to upload a post-quantum key created with GnuPG v2.5.1 to keys.openpgp.org. [...] I promptly reached out to supp...@keys.openpgp.org to ask when the

GnuPG meets the standard of care set by Signal (Re: Betamax v. VHS, and the future of PQ-PGP)

2025-01-03 Thread have--- via Gnupg-users
.g.: https://news.ycombinator.com/item?id=37571919 Version 1 of PQXDH was published 2023-05-24, almost a full year before GnuPG first added unstable PQC support. https://web.archive.org/web/20230919172437/https://signal.org/docs/specifications/pqxdh/ PQXDH was deployed for real users by Sept

Re: GnuPG 1.4 for OS X / macOS

2024-12-06 Thread R. Bag via Gnupg-users
If something is important enough to affect how they communicate, don't assume: ask. We asked. They are reluctant to do any "installs" just in order to evaluate our business proposition. My MacBook didn't come with GnuPG installed. I had to do that myself. Understood. We

[Announce] GnuPG 2.5.2 released

2024-12-06 Thread Werner Koch via Gnupg-users
Hello! We are pleased to announce the availability of a new GnuPG release: version 2.5.2. This release is the third of a series of public testing releases eventually leading to a new stable version 2.6. We also release a first Beta version of the forthcoming Gpg4win 5.0. The main features in

Re: GnuPG 1.4 for OS X / macOS

2024-12-04 Thread Robert J. Hansen via Gnupg-users
But our users know what GnuPG is, and they would, we assume, trust it without any prompting from us. As a guy who's been supporting users in communications security issues since 1991, please forgive me for sharing some very hard-earned wisdom. Never assume anything about your client

Re: GnuPG 1.4 for OS X / macOS

2024-12-04 Thread Ralph Seichter via Gnupg-users
* R. Bag via Gnupg-users: > our users know what GnuPG is, and they would, we assume, trust it > without any prompting from us. If your sole goal is to distribute GnuPG encoded files which third parties are going to decode: Are these encoded files historic in nature, or will you be encodin

Re: GnuPG 1.4 for OS X / macOS

2024-12-04 Thread R. Bag via Gnupg-users
even GnuPG 1.4 is way, way too much hammer for your task. Of course it is. But our users know what GnuPG is, and they would, we assume, trust it without any prompting from us. There are many other encryption programs around, perfectly capable of symmetrical encryption where key distribution

Re: GnuPG 1.4 for OS X / macOS

2024-12-03 Thread Robert J. Hansen via Gnupg-users
We distribute a particular set of symmetrically-encrypted files, and would like to give Apple users the ability to decrypt those using a simple terminal command-line, without the need for them to "install" anything on their computers. At risk of sounding disloyal to GnuPG, this is

Re: GnuPG 1.4 for OS X / macOS

2024-12-03 Thread R.Bag via Gnupg-users
gnupg-1.4.23.tar.bz2 is the latest version. Same place as all other gnupg source tarballs. But pretty please use it only to decrypt old PGP2 style encrypted data. We distribute a particular set of symmetrically-encrypted files, and would like to give Apple users the ability to decrypt those

Re: GnuPG 1.4 for OS X / macOS

2024-12-02 Thread Ralph Seichter via Gnupg-users
* R.Bag via Gnupg-users: > I notice in the "release archive" section on the server does not > include gnupg 1.4 (i.e., pre 2.x) versions. Correct. I don't know where one might be able to find pre-built GnuPG 1.4 binaries, especially ones which support modern versions of macO

Re: GnuPG 1.4 for OS X / macOS

2024-12-02 Thread Werner Koch via Gnupg-users
On Mon, 2 Dec 2024 10:52, R.Bag said: > I notice in the "release archive" section on the server does not > include gnupg 1.4 (i.e., pre 2.x) versions. Could someone kindly > point out where these might be available from? gnupg-1.4.23.tar.bz2 is the latest version. Same place

Re: GnuPG 1.4 for OS X / macOS

2024-12-02 Thread R.Bag via Gnupg-users
I notice in the "release archive" section on the server does not include gnupg 1.4 (i.e., pre 2.x) versions. Could someone kindly point out where these might be available from? TIA., R.Bag ___ Gnupg-users mailing list Gnupg-users@gnupg

Re: Mirroring GnuPG

2024-12-02 Thread Werner Koch via Gnupg-users
ssions. Thanks for reporting. Shalom-Salam, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein openpgp-digital-signature.asc Description: PGP signature ___ Gnupg-users mailing list Gnupg

Re: Mirroring GnuPG

2024-12-02 Thread Luca Vincenti via Gnupg-users
Hi, thank you for your answer. We do not think that is our problem as the rsync server is still online, the problem is specifically with these files: - /gnupg/g10-0.2.3.tar.gz.pgp.sig - /gnupg/g10-0.2.3.tar.gz.sig - /gnupg/g10-0.2.4.tar.gz.pgp.sig - /gnupg/g10-0.2.5.tar.gz.pgp.sig - /gnupg

Re: Mirroring GnuPG

2024-11-28 Thread Daniele Nicolodi via Gnupg-users
On 28/11/24 17:42, Ingo Klöcker wrote: On Mittwoch, 27. November 2024 12:09:36 Mitteleuropäische Normalzeit Luca Vincenti via Gnupg-users wrote: We at GARR have a mirror service aimed at the Italian community and we have been mirroring this project for a while using rsync on this source

GnuPG 2.4.7 for OS X / macOS is now available

2024-11-28 Thread Ralph Seichter via Gnupg-users
I am happy to announce that release 2.4.6 of GnuPG for OS X / macOS is now available. The installation disk image provides unified binaries suitable for both ARM- and Intel-based Macs. Please see https://sourceforge.net/p/gpgosx/docu/Download/ for further details. -Ralph

Re: Mirroring GnuPG

2024-11-28 Thread Ingo Klöcker
On Mittwoch, 27. November 2024 12:09:36 Mitteleuropäische Normalzeit Luca Vincenti via Gnupg-users wrote: > We at GARR have a mirror service aimed at the Italian community and we > have been mirroring this project for a while using rsync on this source: > ftp.gnupg.org::gnupg. I think y

Mirroring GnuPG

2024-11-28 Thread Luca Vincenti via Gnupg-users
Hello, We at GARR have a mirror service aimed at the Italian community and we have been mirroring this project for a while using rsync on this source: ftp.gnupg.org::gnupg. Since the release of GnuPG 2.4.6 (2024-10-29), we have been experiencing a "Permission denied" error while

[Announce] GnuPG 2.4.7 and Gpg4win 4.4.0 released

2024-11-28 Thread Werner Koch via Gnupg-users
Hello! We are pleased to announce the availability of a new stable GnuPG release: version 2.4.7. This version fixes a couple of bugs. What is GnuPG = The GNU Privacy Guard (GnuPG, GPG) is a complete and free implementation of the OpenPGP (aka LibrePGP) and S/MIME standards. GnuPG

GnuPG 2.4.6 for OS X / macOS is now available

2024-10-31 Thread Ralph Seichter via Gnupg-users
I am happy to announce that release 2.4.6 of GnuPG for OS X / macOS is now available. The installation disk image provides unified binaries suitable for both ARM- and Intel-based Macs. Please see https://sourceforge.net/p/gpgosx/docu/Download/ for further details. -Ralph

Re: call to undeclared function 'write' (Re: GnuPG 2.4.6 released)

2024-10-30 Thread Werner Koch via Gnupg-users
Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users

call to undeclared function 'write' (Re: GnuPG 2.4.6 released)

2024-10-29 Thread Ralph Seichter via Gnupg-users
* Werner Koch via Gnupg-users: > We are pleased to announce the availability of a new stable GnuPG > release: version 2.4.6. I am having problems building version 2.4.6 on macOS (Sequoia). The compiler reports errors like this one: app.c:386:5: error: call to undeclared function '

[Announce] GnuPG 2.4.6 released

2024-10-29 Thread Werner Koch via Gnupg-users
Hello! We are pleased to announce the availability of a new stable GnuPG release: version 2.4.6. This version fixes a couple of bugs, comes with a few new features, and has now full support for Portuguese. What is GnuPG = The GNU Privacy Guard (GnuPG, GPG) is a complete and free

Re: GnuPG Keyring Issue Across Systems. Where is pubring.kbx?

2024-10-10 Thread Werner Koch via Gnupg-users
On Wed, 9 Oct 2024 20:43, Alejandro said: > How i can downgrade my .gnupg folder to make it compatible with older > versions? For a new installation the option use-keyboxd is written to ~/.gnupg/common.conf. Uncomment that option and you are back to pubring.kbx. If you already have k

Re: GnuPG Keyring Issue Across Systems. Where is pubring.kbx?

2024-10-09 Thread Alejandro via Gnupg-users
Hello, Thanks, Researching a little bit inside the files, I found a pubring.db How i can downgrade my .gnupg folder to make it compatible with older versions? Thanks again On 10/9/24 6:00 PM, Ming Kuang via Gnupg-users wrote: On Wed, 2024-10-09 at 15:50 +0200, Alejandro via Gnupg-users

GnuPG Keyring Issue Across Systems. Where is pubring.kbx?

2024-10-09 Thread Alejandro via Gnupg-users
Hi, I’m using the default GnuPG package from `pacman -S gnupg` on my Arch system. For security reasons, I copied my GNUPGHOME to a USB drive, which worked well when I mounted it as GNUPGHOME. However, I recently needed to use my keys on another machine running Pop!_OS 22.04. After

Re: [admin] This is a GnuPG related ML

2024-09-14 Thread Daniel Kahn Gillmor via Gnupg-users
On Mon 2024-09-09 15:13:07 +0200, Werner Koch via Gnupg-users wrote: > Advertisement for other applications, like a Python wrapper around a > long standing command line API (going all the way back to pgp 2), is > thus off-topic. Jakob specifically asked how he could use GnuPG while relyi

[Announce] GnuPG 2.5.1 released

2024-09-12 Thread Werner Koch via Gnupg-users
Hello! We are pleased to announce the availability of a new GnuPG release: version 2.5.1. This release is the second of a series of public testing releases eventually leading to a new stable version 2.6. The main features in the 2.6 series are improvements for 64 bit Windows and the

[admin] This is a GnuPG related ML

2024-09-09 Thread Werner Koch via Gnupg-users
Hi! Just a short reminder that this mailing list's topic is GnuPG. Advertisement for other applications, like a Python wrapper around a long standing command line API (going all the way back to pgp 2), is thus off-topic. It feels more like a SEO strategy than as helpful information. P

On the Legacy Encryption Downgrade Attacks against GnuPG

2024-08-23 Thread Werner Koch via Gnupg-users
;AEAD-to-Legacy-CFB-Encryption Downgrade Attacks on GnuPG AEAD OCB". The upshot of the paper is that if you disable all protections and get the target to build an oracle for you you can attack Open/Libre/*/PGP. The requirement for GPG is to use the strongly deprecated "--ignore-m

Re: Using OpenPGP / GnuPG to unlock 'sudo bla bla' or 'sudo -s'

2024-08-14 Thread Andrew Gallagher via Gnupg-users
include system-auth-ac account include system-auth-ac password include system-auth-ac session include system-auth-ac EOF ln -sf system-auth-ssh-agent /etc/pam.d/system-auth fi fi cat > /etc/sudoers.d/pam-ssh-agent-auth < signature.asc Description: Message signed with OpenPGP ____

Re: Using OpenPGP / GnuPG to unlock 'sudo bla bla' or 'sudo -s'

2024-08-14 Thread Matthias Apitz
the @include lines? matthias -- Matthias Apitz, ✉ g...@unixarea.de, http://www.unixarea.de/ +49-176-38902045 Public GnuPG key: http://www.unixarea.de/key.pub I am not at war with Russia. Я не воюю с Россией. Ich bin nicht im Krieg mit Russland. ___

Re: Using OpenPGP / GnuPG to unlock 'sudo bla bla' or 'sudo -s'

2024-08-12 Thread Matthias Apitz
El día lunes, agosto 12, 2024 a las 06:13:43p. m. +0200, Werner Koch via Gnupg-users escribió: > On Mon, 12 Aug 2024 14:26, Matthias Apitz said: > > > password-store and for outbound SSH/SCP. Is there a way, for example > > with a config in /etc/pam.d/ to used the OpenPGP

Re: Using OpenPGP / GnuPG to unlock 'sudo bla bla' or 'sudo -s'

2024-08-12 Thread Werner Koch via Gnupg-users
s using ssh root@localhost foo --bar baz Salam-Shalom, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein openpgp-digital-signature.asc Description: PGP signature _______ Gnupg-u

Re: Using OpenPGP / GnuPG to unlock 'sudo bla bla' or 'sudo -s'

2024-08-12 Thread Andrew Gallagher via Gnupg-users
xample >> with a config in /etc/pam.d/ to used the OpenPGP card for providing >> the password to 'sudo ' or 'sudo -s' >> >> Thanks >> >> matthias >> >> -- >> Matthias Apitz, ✉ g...@unixarea.de, http://www.unixarea.d

Re: Using OpenPGP / GnuPG to unlock 'sudo bla bla' or 'sudo -s'

2024-08-12 Thread Andrew Gallagher via Gnupg-users
as > > -- > Matthias Apitz, ✉ g...@unixarea.de, http://www.unixarea.de/ +49-176-38902045 > Public GnuPG key: http://www.unixarea.de/key.pub > > I am not at war with Russia. Я не воюю с Россией. > Ich bin nicht im Krieg mit Russland. > > ____

Using OpenPGP / GnuPG to unlock 'sudo bla bla' or 'sudo -s'

2024-08-12 Thread Matthias Apitz
-- Matthias Apitz, ✉ g...@unixarea.de, http://www.unixarea.de/ +49-176-38902045 Public GnuPG key: http://www.unixarea.de/key.pub I am not at war with Russia. Я не воюю с Россией. Ich bin nicht im Krieg mit Russland. ___ Gnupg-users mailing list Gnupg-u

[Announce] GnuPG 2.5.0 released for public testing

2024-07-08 Thread Werner Koch via Gnupg-users
Hello! We are pleased to announce the availability of a new GnuPG release: version 2.5.0. This release is the first of a series of public testing releases eventually leading to a new stable version 2.6. The main features in the 2.6 series are improvements for 64 bit Windows and the introduction

Quick heads up: GnuPG 2.5.0 is now available

2024-07-05 Thread Werner Koch via Gnupg-users
liant wit the final FIPS2-03 and LibrePGP specification. Salam-Shalom, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein openpgp-digital-signature.asc Description: PGP signature ___

Re: GnuPG Development Hub account request

2024-06-20 Thread Werner Koch via Gnupg-users
youth that refuse military service. - A. Einstein openpgp-digital-signature.asc Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users

GnuPG Development Hub account request

2024-06-20 Thread 林博仁Buo-ren , Lin via Gnupg-users
Hello, I would like to request a new account for filing a document issue. Here are the account details: "brlin", "林博仁(Buo-ren, Lin)", "buo.ren@gmail.com" Thanks, 林博仁(Buo-ren, Lin) buo.ren@gmail.com ___ Gnupg-

Re: Using a GnuPG crypted RSA key for SSH

2024-05-03 Thread Matthias Apitz
El día jueves, mayo 02, 2024 a las 07:46:33 +0200, Werner Koch via Gnupg-users escribió: > On Thu, 2 May 2024 15:31, Matthias Apitz said: > > > which locks the card again. Any ideas? > > If you really want to reset the card after an operation _and_ you are > us

Re: Using a GnuPG crypted RSA key for SSH

2024-05-02 Thread Werner Koch via Gnupg-users
so using a browser or IMAP server with user certificate based authentication. -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein openpgp-digital-signature.asc Description: PGP signature ___ Gnupg-use

Re: Using a GnuPG crypted RSA key for SSH

2024-05-02 Thread Werner Koch via Gnupg-users
On Thu, 2 May 2024 16:58, Matěj Cepl said: > rather dubious: systemd can certainly manage a dependence on > shared resource, and concurrent running of two processes at Right. However, systemd does not use the same locking scheme as gnupg uses to avoid duplicate daemon startup. The

Re: Using a GnuPG crypted RSA key for SSH

2024-05-02 Thread Matěj Cepl via Gnupg-users
On Thu May 2, 2024 at 3:55 PM CEST, Ming Kuang via Gnupg-users wrote: > https://lists.gnupg.org/pipermail/gnupg-users/2024-March/066957.html > https://lists.gnupg.org/pipermail/gnupg-users/2024-March/066960.html Just for the record, I find the explanation in the later email rather d

Re: Using a GnuPG crypted RSA key for SSH

2024-05-02 Thread Matthias Apitz
ain. Any ideas? matthias -- Matthias Apitz, ✉ g...@unixarea.de, http://www.unixarea.de/ +49-176-38902045 Public GnuPG key: http://www.unixarea.de/key.pub I am not at war with Russia. Я не воюю с Россией. Ich bin nicht im Krieg mit Russland. ___ Gnupg

Re: Using a GnuPG crypted RSA key for SSH

2024-05-02 Thread Matthias Apitz
matthias -- Matthias Apitz, ✉ g...@unixarea.de, http://www.unixarea.de/ +49-176-38902045 Public GnuPG key: http://www.unixarea.de/key.pub I am not at war with Russia. Я не воюю с Россией. Ich bin nicht im Krieg mit Russland. ___ Gnupg-users m

Re: Using a GnuPG crypted RSA key for SSH

2024-05-02 Thread Henning Follmann
0200, Werner Koch via > > > Gnupg-users escribió: > > > > > > > and because gpg-agent does not usually run as deamon make shure it is > > running before you use ssh > > > > gpgconf --launch gpg-agent > > gpg-agent was always there, started by system bo

Re: Using a GnuPG crypted RSA key for SSH

2024-05-02 Thread Matthias Apitz
El día jueves, mayo 02, 2024 a las 07:44:04 -0400, Henning Follmann escribió: > On Thu, May 02, 2024 at 10:33:15AM +0200, Matthias Apitz wrote: > > El día jueves, mayo 02, 2024 a las 08:17:58 +0200, Werner Koch via > > Gnupg-users escribió: > > > > > ... > >

Re: Using a GnuPG crypted RSA key for SSH

2024-05-02 Thread Henning Follmann
On Thu, May 02, 2024 at 10:33:15AM +0200, Matthias Apitz wrote: > El día jueves, mayo 02, 2024 a las 08:17:58 +0200, Werner Koch via > Gnupg-users escribió: > > > ... > > On Linux take care to add "enable-ssh-support" to gpg-agent.conf because > > on some d

Re: Using a GnuPG crypted RSA key for SSH

2024-05-02 Thread Matthias Apitz
El día jueves, mayo 02, 2024 a las 08:17:58 +0200, Werner Koch via Gnupg-users escribió: > ... > On Linux take care to add "enable-ssh-support" to gpg-agent.conf because > on some distros the X config greps for this to decide whether to start > the ssh-agent or l

Re: Using a GnuPG crypted RSA key for SSH

2024-05-01 Thread Werner Koch via Gnupg-users
t is always enabled and thus the option is not really required. Salam-Shalom, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein openpgp-digital-signature.asc Description: PGP signature ____

Re: Using a GnuPG crypted RSA key for SSH

2024-05-01 Thread Henning Follmann
On Wed, May 01, 2024 at 04:32:54PM +0200, Matthias Apitz wrote: > > Hello, > > I've on my Linux cellphone L5 my RSA key for SSH crypted with GnuPG (to > be exactly with an OpenPGP card in the phone). I can do fine: > > $ gpg -d id_rsa.asc > id_rsa # which asks fo

Re: Using a GnuPG crypted RSA key for SSH

2024-05-01 Thread Christian C. via Gnupg-users
y for SSH crypted with GnuPG (to > be exactly with an OpenPGP card in the phone). I can do fine: > > $ gpg -d id_rsa.asc > id_rsa # which asks for the PIN of the OpenPGP card > $ ssh www.unixarea.de > Enter passphrase for key '/home/guru/.ssh/id_rsa': > ... > $ rm id_

Using a GnuPG crypted RSA key for SSH

2024-05-01 Thread Matthias Apitz
Hello, I've on my Linux cellphone L5 my RSA key for SSH crypted with GnuPG (to be exactly with an OpenPGP card in the phone). I can do fine: $ gpg -d id_rsa.asc > id_rsa # which asks for the PIN of the OpenPGP card $ ssh www.unixarea.de Enter passphrase for key '/home/gur

Re: Feature Request: 64-bit Windows Support for GnuPG

2024-03-18 Thread Werner Koch via Gnupg-users
Hi! and thanks for asking. On Sun, 17 Mar 2024 11:29, pal said: > I am writing to express my strong interest in a 64-bit version of GnuPG for > Windows. While I understand that currently only 32-bit systems (x86) are > officially supported, I believe adding 64-bit compatibility w

Feature Request: 64-bit Windows Support for GnuPG

2024-03-17 Thread pal via Gnupg-users
Dear GnuPG Developers, I am writing to express my strong interest in a 64-bit version of GnuPG for Windows. While I understand that currently only 32-bit systems (x86) are officially supported, I believe adding 64-bit compatibility would be a valuable improvement for many users. Many modern

[Announcement] GnuPG for OS X 2.4.5

2024-03-12 Thread Ralph Seichter via Gnupg-users
GnuPG for OS X / macOS release 2.4.5 is now available for download via https://sourceforge.net/p/gpgosx/docu/Download/ . The disk image signature key is available via public keyservers, and it can also be downloaded from https://www.seichter.de/pgp/gpgosx-signing.asc . pub ed25519

[Announce] GnuPG 2.4.5 released

2024-03-12 Thread Werner Koch via Gnupg-users
Hello! We are pleased to announce the availability of a new stable GnuPG release: version 2.4.5. This version fixes a couple of bugs and comes with some new features. What is GnuPG = The GNU Privacy Guard (GnuPG, GPG) is a complete and free implementation of the OpenPGP and S/MIME

Re: How to download commit packages from gnupg phabricator?

2024-03-07 Thread Matěj Cepl
On Wed Mar 6, 2024 at 1:20 PM CET, Vladimir Nikishkin via Gnupg-users wrote: > Dear All, > > I would like to try the GnuPG Password Manager > (https://dev.gnupg.org/source/gpgpass/) https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gpgpass.git;a=summary And it has ability to download a snap

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-06 Thread Bruce Walzer
On Wed, Mar 06, 2024 at 09:43:00AM +0100, Werner Koch wrote: > On Tue, 5 Mar 2024 11:15, Bruce Walzer said: > > > So just to be clear, I am not complaining that GnuPG implemented the > > LibrePGP version of OCB. I am complaining that GnuPGP did #2 and #3 > > before imp

Re: How to download commit packages from gnupg phabricator?

2024-03-06 Thread Werner Koch via Gnupg-users
pgp-digital-signature.asc Description: PGP signature _______ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users

How to download commit packages from gnupg phabricator?

2024-03-06 Thread Vladimir Nikishkin via Gnupg-users
Dear All, I would like to try the GnuPG Password Manager (https://dev.gnupg.org/source/gpgpass/) However, I don't seem to be able to find a way to download a tarball of the commit in any way. I looked at the source of Phabricator, and it seems that support for downloading zips exists:

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-06 Thread Werner Koch via Gnupg-users
On Tue, 5 Mar 2024 11:15, Bruce Walzer said: > So just to be clear, I am not complaining that GnuPG implemented the > LibrePGP version of OCB. I am complaining that GnuPGP did #2 and #3 > before implementation was close to universal and did not clearly spell Sorry, this is not true. OC

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-05 Thread Bruce Walzer
would be the LibrePGP (4880bis) version. So just to be clear, I am not complaining that GnuPG implemented the LibrePGP version of OCB. I am complaining that GnuPGP did #2 and #3 before implementation was close to universal and did not clearly spell out the implications to the users. Speaking of

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-05 Thread Werner Koch via Gnupg-users
one-really-disable-aead-for-recent-gnupg-created-pgp-keys > > The answer started with: > >> While authenticated encryption (AEAD) is good - especially for something >> like OpenPGP, which is an old and over-complicated standard that has a >> concerning large attack surf

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-05 Thread Tobias Leupold via Gnupg-users
as a definitive source for the correct facts. Because we have this statement: > That is not a GnuPG specific but an agreed upon format by the participants > of the OpenPGP WG and implemented by all major implementations. Which does not match what others say (apart from Vincent's stateme

Re: Your message to Gnupg-users awaits moderator approval

2024-03-05 Thread Werner Koch via Gnupg-users
or years and years. Shalom-Salam, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein openpgp-digital-signature.asc Description: PGP signature ___ Gnupg-users mailing list Gnupg-use

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-05 Thread Werner Koch via Gnupg-users
On Mon, 4 Mar 2024 19:05, Tobias Leupold said: > IMO interoperability with GnuPG is crucial for this project. Most > people using that on their phones will come from Linux, or they will Actually most users will come from Windows ;-) Salam-Shalom, Werner -- The pioneers of a w

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-05 Thread Werner Koch via Gnupg-users
On Tue, 5 Mar 2024 00:16, Vincent Breitmoser said: > The packet format referred to here is GnuPG-specific. In November Vincent, please stop spreading wrong facts. That is not a GnuPG specific but an agreed upon format by the participants of the OpenPGP WG and implemented by all ma

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-04 Thread Tobias Leupold via Gnupg-users
want to participate in a religious war. I just want to use encryption ... I'll file a Gentoo bug about this and see what the devs/maintainers say. Cheers, Tobias ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-04 Thread Vincent Breitmoser via Gnupg-users
Hey list, OpenKeychain maintainer here. As Werner chose to omit some details here that seem pertinent, I will add: No, it is not because you are delaying the deployment of new and a much faster algorithm mode. The packet format referred to here is GnuPG-specific. In November 2023, GnuPG

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-04 Thread Vincent Breitmoser via Gnupg-users
rs - V ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-04 Thread Tobias Leupold via Gnupg-users
> Ah... That question leads to an awkward discussion these days. There > was a IETF standards process that led to the OCB mode now supported by > GnuPG and others. GnuPG (and others) implemented it before the new > standard was officially released (there seemed to be consensus). That

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-04 Thread Bruce Walzer
On Mon, Mar 04, 2024 at 12:03:41PM +0100, Tobias Leupold via Gnupg-users wrote: [...] > After some research, I found > > https://github.com/open-keychain/open-keychain/issues/2886 , > > describing this exact issue. That would be the cipher block mode proliferation issue.

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-04 Thread Tobias Leupold via Gnupg-users
Hi Werner, thanks for the clarification! > All the major implementers (Ribose RNP, GnuPG, BouncyCastle, OpenPGP.js) > took great care to first deploy the software with support for the new > mode before actually creating keys with a preference for that mode [1]. > Unfortunately a sm

Re: Your message to Gnupg-users awaits moderator approval

2024-03-04 Thread Matěj Cepl
On Mon Mar 4, 2024 at 2:19 PM CET, gnupg-users-owner wrote: > Your mail to 'Gnupg-users' with the subject > > Re: [gpg-agent] Empty OPTION xauthority= > > Is being held until the list moderator can review it for approval. > > The reason it is being held: > &g

Re: Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-04 Thread Werner Koch via Gnupg-users
On Mon, 4 Mar 2024 12:03, Tobias Leupold said: > So: Is it wise and/or necessary to disable that for new GnuPG generated keys, > for the sake of interoperability? Or will the others catch up and implement No, it is not because you are delaying the deployment of new and a much faster alg

Should one really disable AEAD for recent GnuPG created PGP keys?

2024-03-04 Thread Tobias Leupold via Gnupg-users
Hi all :-) Apparently, there are some problems with the new defaults that are set when one creates a PGP key using a recent version of GnuPG (2.4). I ran into this after generating a new ECC/ED25519 key to replace my "old" RSA one. The problem showed up when I re-encrypted my pas

[Announce] GnuPG for OS X 2.4.4

2024-01-26 Thread Ralph Seichter via Gnupg-users
GnuPG for OS X / macOS release 2.4.4 is now available for download via https://sourceforge.net/p/gpgosx/docu/Download/ . The disk image signature key is available via public keyservers, and it can also be downloaded from https://www.seichter.de/pgp/gpgosx-signing.asc . pub ed25519

[Announce] GnuPG 2.4.4 released

2024-01-25 Thread Werner Koch via Gnupg-users
Hello! We are pleased to announce the availability of a new stable GnuPG release: version 2.4.4. This version fixes a couple of bugs, comes with some new features. A smartcard related security bug is also fixed and a tool to check for this flaw is provided. See below for details. What is

Re: gnupg + TPM 2.0 support request

2023-12-25 Thread sergio borghese via Gnupg-users
, if I get this right, I just need to get the latest master and rebuild > the gnupg sw. Is this correct? > Will try and send an update to the ML to share the results with everyone > > Ciao e grazie > Sergio > > On Mon, Dec 11, 2023 at 1:33 AM NIIBE Yutaka wrote: > >> Hel

Re: --list-keys fails with missing .gnupg directory and --no-options

2023-12-21 Thread Werner Koch via Gnupg-users
Hi! Right, no-options also inhibits the homedir creation: --no-options Shortcut for --options /dev/null. This option is detected before an attempt to open an option file. Using this op‐ tion will also prevent the creation of a ‘~/.gnupg

--list-keys fails with missing .gnupg directory and --no-options

2023-12-21 Thread Jeff Bailey
Hi! I'm trying to make a script resilient against a bad gnupg.conf file, so I tried passing --no-options to it. However, it then caused the command to fail on machines where gnupg had never been run, so ~/.gnupg didn't exist yet with the following error: gpg: Fatal: /home/jbai

GnuPG over web

2023-12-17 Thread Pasha
Hi all, I created an example of GnuPG over web. No browser plugin needed, but WebSocket support required.    user    -- public key > |  webserver v    user    <-HTT

Re: gnupg + TPM 2.0 support request

2023-12-11 Thread sergio borghese via Gnupg-users
Hi Niibe, Thanks a lot for the info and help So, if I get this right, I just need to get the latest master and rebuild the gnupg sw. Is this correct? Will try and send an update to the ML to share the results with everyone Ciao e grazie Sergio On Mon, Dec 11, 2023 at 1:33 AM NIIBE Yutaka wrote

  1   2   3   4   5   6   7   8   9   10   >