Hi Bernhard,
It seems that the problem was caused by "sudo su": For some reason
on Linux Redhad 8, "sodu su" does not behave as in the earlier version.
There is no difference between "sudo su - XYZ" and "sudo su XYZ".
Actually, I failed to generate the key pair when I l
Hello Shaoping Xie,
> gpg: public key decryption failed: Permission denied
if your keypair has a passphrase set,
did an interactive pinentry come up?
(If you want to run unattended, one method is to not set a passphrase
and secure the system accordingly.)
> I was puzzled at the output from “gpg
Good Morning Everyone,
I have recently been working on a new Linux system with GPG 2.2.20.
I have had no problem generating the key pair. Then I have used the new public
key to encrypt a file without problem.
However, the decryption attempt has failed due to no secret key error.
Werner Koch:
> On Fri, 27 May 2011 10:48, jer...@jeromebaum.com said:
>
>> There is still a compression step by default though, right? I know gzip has
>
> Right. I forgot to mention that. Unless gpg figures that the data is
> already compressed, it will be compressed before encryption.
Or unl
On Fri, 27 May 2011 10:48, jer...@jeromebaum.com said:
> There is still a compression step by default though, right? I know gzip has
Right. I forgot to mention that. Unless gpg figures that the data is
already compressed, it will be compressed before encryption.
Salam-Shalom,
Werner
--
On Fri, May 27, 2011 at 10:09, Werner Koch wrote:
> On Fri, 27 May 2011 00:04, gro...@caseyljones.net said:
>
> > volume. The advantage of those is that a single bit error is likely to
> > only affect one file. If you archive the files before transferring
>
> FWIW, it is the same as with OpenPGP.
On Fri, 27 May 2011 00:04, gro...@caseyljones.net said:
> volume. The advantage of those is that a single bit error is likely to
> only affect one file. If you archive the files before transferring
FWIW, it is the same as with OpenPGP. The used CFB mode re-syncs after
soon after the bad block.
In the future, instead of GPG or OpenSSL I would suggest an encrypted
filesystem such as an encrypted folder or partition or Truecrypt volume.
The advantage of those is that a single bit error is likely to only
affect one file. If you archive the files before transferring them to
your encrypted
On Thu, May 19, 2011 at 11:46, Turbo Fredriksson wrote:
> On 17 maj 2011, at 14.52, Jerome Baum wrote:
>
> On Tue, May 17, 2011 at 14:16, Turbo Fredriksson wrote:
>
>> But the last part didn't end up at the 64 char limit the other lines have.
>> Instead, the last
>> char on that line is at posit
On 17 maj 2011, at 14.52, Jerome Baum wrote:
On Tue, May 17, 2011 at 14:16, Turbo Fredriksson
wrote:
But the last part didn't end up at the 64 char limit the other lines
have. Instead, the last
char on that line is at position 15. Would that be a problem?
It doesn't sound good but just go
On Tue, May 17, 2011 at 14:16, Turbo Fredriksson wrote:
> But the last part didn't end up at the 64 char limit the other lines have.
> Instead, the last
> char on that line is at position 15. Would that be a problem?
It doesn't sound good but just go ahead and try. How long does a single run
ta
On Tue, May 17, 2011 at 14:22, Turbo Fredriksson wrote:
> On 16 maj 2011, at 21.11, Jerome Baum wrote:
>
> On Mon, May 16, 2011 at 19:08, Turbo Fredriksson wrote:
>
>> I've locked at some encrypted FS's, but none of them where secure enough.
>>
>
> In what sense? Can you elaborate? See also my
On 16 maj 2011, at 18.35, Jerome Baum wrote:
So, start at the beginning of scrapped data (with a copy, of
course), fill in "A"s until you reach the 76 (or 80) limit, fill in
a line break, continue with "A"s, repeat until nothing left.
That was a lot more difficult than it sounded!! :)
I tr
On Tue, 17 May 2011 00:35, jer...@jeromebaum.com said:
> were made for different purposes and I think you're stretching GPG very far
> if you want to encrypt big streams of data. That's more something OpenSSL
As a Unix tool GPG is designed to work on arbitrary data lengths. The
problem is merele
On Tue, May 17, 2011 at 00:26, Faramir wrote:
> I don't have an knowledge about compression algos, so I assume you are
> right. However, we can disable GPG's compression to avoid that problem.
> What is the advantage of encrypting data with OpenSSL over GPG?
>
More control over what's happening
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
El 16-05-2011 12:35, Jerome Baum escribió:
...
> In the worst case, you may be looking at loosing everything from the
> corruption point onwards, assuming some kind of stream compression. This
> is IIRC the default for GnuPG when it encrypts. Otherwi
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Hi
On Monday 16 May 2011 at 1:04:33 PM, in
, Turbo
Fredriksson wrote:
> Build a man a fire, and he will be warm for the
> night. Set a man on fire and he will be warm for the
> rest of his life.
Priceless (-:
- --
Best regards
MFPA
On Mon, May 16, 2011 at 17:32, Turbo Fredriksson wrote:
> Now, I tried to just remove the binary chars, but that ended up with a line
> which is shorter than the others which I doubt will work (it would take me
> almost a day to find out - slow USB1 disks), so any idea on how to proceed
> would b
On 16 maj 2011, at 15.46, Jerome Baum wrote:On Mon, May 16, 2011 at 14:04, Turbo Fredriksson wrote: I now managed to find the problematic line(s).archive1.02805470206000 d0 00 ad de d0 00 ad de d0 00 ad de d0 00 ad de 5470207000 d1 00 ad de d1 00 ad de d1 00 ad de d1 00 ad deThes
On Mon, May 16, 2011 at 14:04, Turbo Fredriksson wrote:
> I now managed to find the problematic line(s).
>
> archive1.0280
> 5470206000 d0 00 ad de d0 00 ad de d0 00 ad de d0 00 ad de
> 5470207000 d1 00 ad de d1 00 ad de d1 00 ad de d1 00 ad de
>
> These are the only lines I've found so far...
>
I now managed to find the problematic line(s).
archive1.0280
5470206000 d0 00 ad de d0 00 ad de d0 00 ad de d0 00 ad de
5470207000 d1 00 ad de d1 00 ad de d1 00 ad de d1 00 ad de
These are the only lines I've found so far...
Now, what does this mean?! :)
--
Build a man a fire, and he will be
On Fri, May 13, 2011 at 12:42, Turbo Fredriksson wrote:
> On 13 maj 2011, at 12.08, Jerome Baum wrote:
>
> 1. What character is D0, 00, AD and DE? What can I look for
>>> (to try to diagnose the problem/file)
>>>
>>
> You can look for D0, 00, AD and DE.
>
>
> Doh! I assumed that these where some
it rot.
To be honnest, I've heard about that before, but in my 20 years with
Linux/Unix,
I never, ever encountered it :). Data is always the same as the one
you put there.
Exept:
1. FS errors (noticable one way or the other)
2. Disk errors (also noticable one way or the
On Fri, May 13, 2011 at 11:55, Turbo Fredriksson wrote:
> *bump*
>
> Begin forwarded message:
>
>
> But this last one gave me a problem when trying to unpack
>> it:
>>
>>gpg: invalid radix64 character D0 skipped
>>gpg: invalid radix64 character 00 skipped
>>gpg: invalid ra
*bump*
Begin forwarded message:
I needed to move lots of data from one site to another across
europe. I got a huge disk and archived all data onto that using
something like (simplified):
find | cpio -o | gpg -e | split - /disk/archive.
To extract the data again, it's just as simple:
I needed to move lots of data from one site to another across
europe. I got a huge disk and archived all data onto that using
something like (simplified):
find | cpio -o | gpg -e | split - /disk/archive.
To extract the data again, it's just as simple:
cat `find /disk/archive.* |
Bo Berglund wrote:
> On Sat, 19 Aug 2006 16:46:07 +0200, Ismael Valladolid Torres
> <[EMAIL PROTECTED]> wrote:
>
>>John Clizbe escribe:
>>> Just copy the keyring files.
>>
>>I store my private keyring and a public keyring containing only my
>>public key on a pendrive, then in your gpg.conf:
>>
>>k
> I am a smartcard programmer. Sure an OpenPGP card is just a standard
> smartcard with special elementary files in its filesystem. Could I
> make my own OpenPGP card from a common smartcard given I know its
> administrative codes?
Yup, that's what the "Open" in "OpenPGP Smartcard" means :) I'm n
PROTECTED] On Behalf Of Werner Koch
Sent: Tuesday, August 22, 2006 11:47 AM
To: [EMAIL PROTECTED]
Cc: gnupg-users@gnupg.org
Subject: Re: GnuPG (GPG) Problem
On Tue, 22 Aug 2006 07:21, Bo Berglund said:
> Settings\) it is located in a subdir \Application Data\gnupg
> and mine is completely em
On Tue, 22 Aug 2006 07:21, Bo Berglund said:
> Settings\) it is located in a subdir \Application Data\gnupg
> and mine is completely empty of any active lines. Seems like it is not
That is just fine.
> in use at all (because if it were every line should not be commented
> out). Maybe the Windows
On Mon, 21 Aug 2006 12:50:05 +0200, "Henk M. de Bruijn"
<[EMAIL PROTECTED]> wrote:
>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA512
>
>On Sun, 20 Aug 2006 09:40:45 +0200GMT (20-8-2006, 9:40 +0200, where I
>live), Bo Berglund wrote:
>
>...
>
>> I wonder about the gpg.conf file:
>> Is it used at al
Alphax wrote:
> I don't use a flash drive or a smartcard, for the following reasons:
... and in a follow-up to my own follow-up, apparently Rainbow got
bought out by SafeNet. The iKey is still available and the specs
haven't changed from the last I used them some years ago. They're handy
little
Alphax wrote
> - Flash drives are too prone to failures at bizzare moments
> - Smartcards are largely experimental and don't have the instant
> usability of a USB stick
A few years ago Rainbow Technologies came out with a device they called
the iKey. Smartcard with a USB connector, about the same
Robert J. Hansen wrote:
> Janusz A. Urbanowicz wrote:
>> You can't read a private key from the smartcard, but you can read it
>> from the flashdrive. SC is a crypto processor + storage, flashdrive
>> only storage.
>
> All of which is true. However, the bit to which I was replying was:
>
> "A sm
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
On Sun, 20 Aug 2006 09:40:45 +0200GMT (20-8-2006, 9:40 +0200, where I
live), Bo Berglund wrote:
...
> I wonder about the gpg.conf file:
> Is it used at all in Windows?
> I looked at my own one at "C:\Documents and
> Settings\\Application Data\gnupg
Janusz A. Urbanowicz wrote:
> You can't read a private key from the smartcard, but you can read it
> from the flashdrive. SC is a crypto processor + storage, flashdrive
> only storage.
All of which is true. However, the bit to which I was replying was:
"A smartcard is very convenient as far as
On Sun, Aug 20, 2006 at 09:18:13AM -0500, Robert J. Hansen wrote:
> Ismael Valladolid Torres wrote:
> > A smartcard is very convenient as far as it's a multi application
> > device, so you can store much other info apart from GnuPG keys,
> > i.e. Mozilla passwords or such.
>
> ... I'm sorry, I'm s
Bo Berglund escribe:
> So how does one do this on Windows
I use Cygwin's gnupg so gpg.conf is at ~/.gnupg/gpg.conf just as usual
on a UNIX computer.
Below my gpg.conf, these are lines used on both Linux and Windows:
default-cert-check-level 3
default-recipient-self
keyserver pgp.rediris.es
k
Ismael Valladolid Torres wrote:
> A smartcard is very convenient as far as it's a multi application
> device, so you can store much other info apart from GnuPG keys,
> i.e. Mozilla passwords or such.
... I'm sorry, I'm scratching my head over here trying to figure out how
a flash drive doesn't als
Robert J. Hansen escribe:
> Speaking for myself, I have doubts about the long-term security of
> RSA/1024. I much prefer RSA/2048 instead. Thus, the OpenPGP card fails
> to meet my own security policy... whereas storing a copy of my private
> key on my USB dongle, with a high-security passphrase,
Jonathan Rockway escribe:
> I would recommend that you don't do that. What if you lose the drive?
> Then your private key is compromised. Do you have a revocation
> certificate in a safe location? If not, you can't even tell anyone that
> your private key has been compromised! Not good!
Sure!
On Sat, 19 Aug 2006 16:46:07 +0200, Ismael Valladolid Torres
<[EMAIL PROTECTED]> wrote:
>John Clizbe escribe:
>> Just copy the keyring files.
>
>I store my private keyring and a public keyring containing only my
>public key on a pendrive, then in your gpg.conf:
>
>keyring /path/to/pendrive/pubring
On Sat, Aug 19, 2006 at 02:37:28PM -0500, Robert J. Hansen wrote:
> > The OpenPGP smartcard is a much safer option, since it will not give
> > up the private key (even if you have the password), and will lock
> > itself after 3 incorrect password attempts. (And after 3 incorrect
> > Admin PIN at
Jonathan Rockway wrote:
> I would recommend that you don't do that. What if you lose the
> drive? Then your private key is compromised.
Let's not use the word 'compromised'. Let's call it 'loss of control'.
If I leave my wallet on my desktop for an hour while I go to a meeting,
are my credit c
I would recommend that you don't do that. What if you lose the drive?
Then your private key is compromised. Do you have a revocation
certificate in a safe location? If not, you can't even tell anyone that
your private key has been compromised! Not good!
The OpenPGP smartcard is a much safer o
John Clizbe escribe:
> Just copy the keyring files.
I store my private keyring and a public keyring containing only my
public key on a pendrive, then in your gpg.conf:
keyring /path/to/pendrive/pubring.gpg
secret-keyring /path/to/pendrive/secring.gpg
Using several different computers it works li
John wOnk3r wrote:
> Hi,
>
> I have a problem. I have 2 computers and I set one up with GnuPG(GPG) with a
> key. I use Thunderbird to send and receive encrypted email with no problems.
> The second computer is not set with any key. I want to setup the second
> computer with with the "Same" emai
Hi,
I have a problem. I have 2 computers and I set one up with GnuPG(GPG) with a
key. I use Thunderbird to send and receive encrypted email with no problems.
The second computer is not set with any key. I want to setup the second
computer with with the "Same" email like the first computer with
48 matches
Mail list logo