Re: gpg-preset-passphrase: caching passphrase failed: Forbidden

2024-12-11 Thread Werner Koch via Gnupg-users
rbidden You are using a remote connection - that is your agent is running on another machine via ssh forwarding of the local socket. For security reasons certain commands are not allowed. Go to the machine where the agent is running and run gpg-preset-passphrase over there. See also https://wiki.

gpg-preset-passphrase: caching passphrase failed: Forbidden

2024-12-10 Thread Elliott de Launay via Gnupg-users
Hi there, I'm having a hard time finding resources to help me troubleshoot the following error > gpg-preset-passphrase: problem setting the gpg-agent options > gpg-preset-passphrase: caching passphrase failed: Forbidden when I try to preset password via: $ /usr/lib/gnupg2/gpg-preset

Re: Detecting a misremembered passphrase in gpg-agent

2024-06-13 Thread ael via Gnupg-users
On Thu, Jun 13, 2024 at 02:09:15PM -0400, Jack via Gnupg-users wrote: > On 2024.06.13 06:57, ael via Gnupg-users wrote: > > Further thoughts on detecting a mistaken passphrase entry when > > encrypting. I have looked at both > > man gpg-agent and info [...snip..] > I&

Re: Detecting a misremembered passphrase in gpg-agent

2024-06-13 Thread Jack via Gnupg-users
On 2024.06.13 06:57, ael via Gnupg-users wrote: Further thoughts on detecting a mistaken passphrase entry when encrypting. I have looked at both man gpg-agent and info and I could not immediately see anything to help, but I quickly became lost in the overwhelming volume of the entries :-) So

Detecting a misremembered passphrase in gpg-agent

2024-06-13 Thread ael via Gnupg-users
I wrote just now: "Further thoughts on detecting a mistaken passphrase entry when encrypting. I have looked at both man gpg-agent and info and I could not immediately see anything to help, but I quickly became lost in the overwhelming volume of the entries :-) So perhaps there is some

Detecting a misremembered passphrase in gpg-agent

2024-06-13 Thread ael via Gnupg-users
Further thoughts on detecting a mistaken passphrase entry when encrypting. I have looked at both man gpg-agent and info and I could not immediately see anything to help, but I quickly became lost in the overwhelming volume of the entries :-) So perhaps there is something there that I have

Re: Lost GPG private key passphrase

2024-04-27 Thread sngh via Gnupg-users
On Sun, Apr 14, 2024 at 4:55 PM Daniele Nicolodi via Gnupg-users < gnupg-users@gnupg.org> wrote: > I have an oldish GPG key for which I have lost the passphrase. I have a > very good idea of what the passphrase is constructed but there are some > characters substitution that I must

Lost GPG private key passphrase

2024-04-14 Thread Daniele Nicolodi via Gnupg-users
Hello, I have an oldish GPG key for which I have lost the passphrase. I have a very good idea of what the passphrase is constructed but there are some characters substitution that I must have used back then really escape my memory now. I think that a tool like John the Ripper could make easy

Re: How can I have gpg pause to receive its passphrase, before it starts outputing decrypt to stdout?

2024-03-23 Thread Bee via Gnupg-users
On Mon, Mar 18, 2024 at 9:58 AM Werner Koch via Gnupg-users wrote: > > On Sat, 16 Mar 2024 21:26, B.S. said: > > ... (Windows 10) [DOS] cmd ... [*NOT* powershell] > > ... cygwin gpg ... > > [Do not use a Cygwin build of gpg - this is not supported. Use a > standard build for WIndows.] Thanks kin

Re: How can I have gpg pause to receive its passphrase, before it starts outputing decrypt to stdout?

2024-03-21 Thread Jakob Bohm via Gnupg-users
On 2024-03-19 00:01, Bee via Gnupg-users wrote: However if you known the passphrase, you can pass it to gpg directly using --passphrase-file and --pinentry-mode=loopback. I figured, but am trying to avoid having the passphrase land on disk at all. Due to the way a pipe works there is not

Re: How can I have gpg pause to receive its passphrase, before it starts outputing decrypt to stdout?

2024-03-18 Thread Jacob Bachmeyer via Gnupg-users
Bee via Gnupg-users wrote: However if you known the passphrase, you can pass it to gpg directly using --passphrase-file and --pinentry-mode=loopback. I figured, but am trying to avoid having the passphrase land on disk at all. Could you set up a RAM disk for this? (I think Windows

Re: How can I have gpg pause to receive its passphrase, before it starts outputing decrypt to stdout?

2024-03-18 Thread Bee via Gnupg-users
> However if you known the passphrase, you can pass it to gpg directly using > --passphrase-file and --pinentry-mode=loopback. I figured, but am trying to avoid having the passphrase land on disk at all. > Due to the way a pipe works there is not much you can do here. Except (I would

Re: How can I have gpg pause to receive its passphrase, before it starts outputing decrypt to stdout?

2024-03-18 Thread Bee via Gnupg-users
> However if you known the passphrase, you can pass it to gpg directly using > --passphrase-file and --pinentry-mode=loopback. I figured, but am trying to avoid having the passphrase land on disk at all. > Due to the way a pipe works there is not much you can do here. Except (I would

Re: How can I have gpg pause to receive its passphrase, before it starts outputing decrypt to stdout?

2024-03-18 Thread Werner Koch via Gnupg-users
On Sat, 16 Mar 2024 21:26, B.S. said: > ... (Windows 10) [DOS] cmd ... [*NOT* powershell] > ... cygwin gpg ... [Do not use a Cygwin build of gpg - this is not supported. Use a standard build for WIndows.] > How can I have gpg pause to receive its passphrase, before it starts > outpu

How can I have gpg pause to receive its passphrase, before it starts outputing decrypt to stdout?

2024-03-16 Thread B.S. via Gnupg-users
... (Windows 10) [DOS] cmd ... [*NOT* powershell] ... cygwin gpg ... How can I have gpg pause to receive its passphrase, before it starts outputing decrypt to stdout? e.g. gpg -c < secretdata.json.pgp | jq | less - less is happening before gpg has 'readlined' the passphrase, a

Re: symmetric passphrase with remote (extra, restricted) gpg-agent

2024-02-26 Thread Werner Koch via Gnupg-users
Hi! sorry, for the wrong order of the messages, I simply forgot to sent them yesterday. Salam-Shalom, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein openpgp-digital-signature.asc Description: PGP signature _

Re: symmetric passphrase with remote (extra, restricted) gpg-agent

2024-02-26 Thread Werner Koch via Gnupg-users
On Fri, 23 Feb 2024 22:59, Marcin Wrochna said: > However, I cannot make `gpg --symmetric` encryption work on the remote, > as it tells me getting a passphrase is "Forbidden". Right. It does not sund like a good idea to give the server access to your local password store (in g

Re: symmetric passphrase with remote (extra, restricted) gpg-agent

2024-02-26 Thread Werner Koch via Gnupg-users
don't allow an empty passpharse in this mode. */ + /* We don't allow an empty passphrase in this mode. */ if (!is_generated && check_passphrase_constraints (ctrl, pi->pin,

symmetric passphrase with remote (extra, restricted) gpg-agent

2024-02-23 Thread Marcin Wrochna via Gnupg-users
esktop and even uses it with the local nitrokey card. However, I cannot make `gpg --symmetric` encryption work on the remote, as it tells me getting a passphrase is "Forbidden". Is it possible at all? I can't find any documentation about what is actually 'restricted'

Re: gpg-preset-passphrase and extra agent socket

2023-03-27 Thread xeyrion--- via Gnupg-users
On Mon, Mar 27, 2023 at 5:58 AM Werner Koch wrote: > You are right. I forgot about this. > > You need to wait for the next version or apply the attached patch and > run gpg-preset-passphrase with the option --restricted to address the > other cache. > Great, thanks for confir

Re: gpg-preset-passphrase and extra agent socket

2023-03-27 Thread Werner Koch via Gnupg-users
d patch and run gpg-preset-passphrase with the option --restricted to address the other cache. Shalom-Salam, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein From ab35d756d86438db124fa68aa633fe528ff8be50 Mon Sep 17 00:00:00 2001 Fr

Re: gpg-preset-passphrase and extra agent socket

2023-03-25 Thread xeyrion--- via Gnupg-users
On Fri, Mar 24, 2023 at 5:20 AM Werner Koch wrote: > On Wed, 22 Mar 2023 16:16, xeyrion--- said: > > > Forwarding normal socket (instead of extra socket) makes the prompt go > > away. Is there a way to preset passphrase for extra socket as well? > > The caching behavio

Re: gpg-preset-passphrase and extra agent socket

2023-03-24 Thread Werner Koch via Gnupg-users
On Wed, 22 Mar 2023 16:16, xeyrion--- said: > Forwarding normal socket (instead of extra socket) makes the prompt go > away. Is there a way to preset passphrase for extra socket as well? The caching behavior does not depend on the connection type. Thus this should not be an issue. I assu

gpg-preset-passphrase and extra agent socket

2023-03-22 Thread xeyrion--- via Gnupg-users
Hello, I am trying to set up agent forwarding as per https://wiki.gnupg.org/AgentForwarding. Everything is generally working, but the remote gpg is prompting for passphrases despite gpg-preset-passphrase having been used against local agent. Forwarding normal socket (instead of extra socket

gpg-preset-passphrase and extra agent socket

2023-03-22 Thread xeyrion--- via Gnupg-users
I am trying to set up agent forwarding as per https://wiki.gnupg.org/AgentForwarding. Everything is generally working, but the remote gpg is prompting for passphrases despite gpg-preset-passphrase having been used against local gpg agent. Forwarding normal socket (instead of extra socket) makes

Re: Confusion about gpg-preset-passphrase

2023-03-03 Thread Efe İzbudak via Gnupg-users
On 23/03/03 03:09PM, Ingo Klöcker wrote: > On Freitag, 3. März 2023 13:09:09 CET efeizbudak via Gnupg-users wrote: > > So I'm trying to use gpg-preset-passphrase but for some reason I keep > > having to enter the passphrase all the same. I run > > > > /usr/libexe

Re: Confusion about gpg-preset-passphrase

2023-03-03 Thread Ingo Klöcker
On Freitag, 3. März 2023 13:09:09 CET efeizbudak via Gnupg-users wrote: > So I'm trying to use gpg-preset-passphrase but for some reason I keep > having to enter the passphrase all the same. I run > > /usr/libexec/gpg-preset-passphrase --preset $KEYGRIP Works for me (with the cu

Confusion about gpg-preset-passphrase

2023-03-03 Thread efeizbudak via Gnupg-users
Hi all, So I'm trying to use gpg-preset-passphrase but for some reason I keep having to enter the passphrase all the same. I run /usr/libexec/gpg-preset-passphrase --preset $KEYGRIP and then paste the passphrase (I've also tried this with the keygrip for the [E] subkey as opposed

Re: gpg --list-packets asks for passphrase

2022-09-22 Thread Werner Koch via Gnupg-users
On Wed, 21 Sep 2022 07:06, Fourhundred Thecat said: > Why am I prompted for passphrase? So that --list-packets can show you the encrypted content with all the inetresting packets. Hit cancel and you are done. Please note that the output of --list-packets is strictly for debugging purposes

gpg --list-packets asks for passphrase

2022-09-20 Thread Fourhundred Thecat via Gnupg-users
Hello, when I do: "gpg --list-packets file.gpg" on public key encrypted file, I am asked for passphrase. I am asking gpg to display info about encrypted message, not to decrypt it. Why am I prompted for passphrase? thank you, ___ G

Re: Change Passphrase in Batch Mode

2022-03-17 Thread Daniel Kilimnik via Gnupg-users
Thanks, that does work, but is is also possible to set an empty passphrase i.e. remove the passphrase with this method? Best, Daniel Am Do., 17. März 2022 um 10:26 Uhr schrieb Werner Koch : > On Wed, 16 Mar 2022 09:26, Daniel Kilimnik said: > > > mode. With --pinentry-mode loopback

Re: Change Passphrase in Batch Mode

2022-03-17 Thread Werner Koch via Gnupg-users
On Wed, 16 Mar 2022 09:26, Daniel Kilimnik said: > mode. With --pinentry-mode loopback --passphrase-fd 0 activated. It asks > for my current passphrase, but then exits with a success. --passphrase-fd works only if a password is request but not if two passwords are quested (the old one a

Change Passphrase in Batch Mode

2022-03-16 Thread Daniel Kilimnik via Gnupg-users
Hey, I am trying to change a passphrase of my gpg keys as part of a script. I saw the --change-passphrase option, but I could not get it to work in batch mode. With --pinentry-mode loopback --passphrase-fd 0 activated. It asks for my current passphrase, but then exits with a success. The whole

Re: how to add a passphrase to a keypair

2021-10-07 Thread anonymous via Gnupg-users
or the original (blank) password, and only > for the new password? That is correct. It will only prompt to "enter new passphrase" if the key does not already have password protection. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http

Re: how to add a passphrase to a keypair

2021-10-07 Thread Jack via Gnupg-users
e. > because pinentry does not accept a blank passphrase, and it still prompts for one even if it doesn't actually need it. That prompt is a sure sign that the key is now protected with a password. I may follow up on this later, but are you saying that if there is no password on the k

Re: how to add a passphrase to a keypair

2021-10-06 Thread anonymous via Gnupg-users
On Sunday, October 3rd, 2021 at 7:54 AM, Jack via Gnupg-users wrote: > The key was created many years ago with gpg > version 1 and was definitely created without a passphrase. One of many problems with having no password protection for a key is there is nothing to stop someone who has

Re: how to add a passphrase to a keypair

2021-10-03 Thread Jack via Gnupg-users
On 10/3/21 12:53, Robert J. Hansen via Gnupg-users wrote: gpg -k and gpg -K both show my main key. I compiled a copy of gpg1 (not installed to the system) to try to use locally, since it doesn't enforce the use of a passphrase for the secret key.  Unfortunately, without secring.gpg, it do

Re: how to add a passphrase to a keypair

2021-10-03 Thread Robert J. Hansen via Gnupg-users
gpg -k and gpg -K both show my main key.  I compiled a copy of gpg1 (not installed to the system) to try to use locally, since it doesn't enforce the use of a passphrase for the secret key.  Unfortunately, without secring.gpg, it doesn't see the secret key at all. I haven't tri

Re: how to add a passphrase to a keypair

2021-10-03 Thread Jack via Gnupg-users
On 10/2/21 22:51, raf via Gnupg-users wrote: On Sun, Oct 03, 2021 at 01:40:03PM +1100, raf wrote: On Sat, Oct 02, 2021 at 07:12:45PM -0400, Jack via Gnupg-users wrote: Is it possible to add a passphrase to a secret key originally created without one? If so, please tell me how. I'

Re: how to add a passphrase to a keypair

2021-10-02 Thread raf via Gnupg-users
On Sun, Oct 03, 2021 at 01:40:03PM +1100, raf wrote: > On Sat, Oct 02, 2021 at 07:12:45PM -0400, Jack via Gnupg-users > wrote: > > > Is it possible to add a passphrase to a secret key originally created > > without one? If so, please tell me how. I'll be happy wi

Re: how to add a passphrase to a keypair

2021-10-02 Thread raf via Gnupg-users
On Sat, Oct 02, 2021 at 07:12:45PM -0400, Jack via Gnupg-users wrote: > Is it possible to add a passphrase to a secret key originally created > without one? If so, please tell me how. I'll be happy with either > instructions or pointer to the fine manual I either missed or m

how to add a passphrase to a keypair

2021-10-02 Thread Jack via Gnupg-users
Is it possible to add a passphrase to a secret key originally created without one? If so, please tell me how. I'll be happy with either instructions or pointer to the fine manual I either missed or misread. I have tried lots of variations. Attempts using gpg-agent fail because pin

Does it make sense to pipe yescrypt/Argon2id as passphrase for gpg?

2021-08-13 Thread Philippe Cerfon via Gnupg-users
Dear list members. I would like to use gpg's symmetric encryption feature but with passphrase hashing from either yescrypt or Argon2id. Neither of them seem to be natively supported, so I wondered whether the following would actually work out as I have it in mind. To my understanding

Re: GPG NEVER asks for a passphrase

2021-05-29 Thread Ángel
On 2021-05-27 at 10:44 -0500, Steven Dudley via Gnupg-users wrote: > When I encrypt to my NEW key, my *.gpg file is created, I double > click on it, GPG NEVER asks for a passphrase, it just decrypts the > file. > > What is wrong? Starting with the basics: Does your new key have

Re: GPG NEVER asks for a passphrase

2021-05-28 Thread Bernhard Reiter
this is still security supported?) > When I right click on a file and send to GPG Tools, pick my OLD DEFAULT > (being phased out) email, GPG runs and a *.gpg file is created. I double > click on it, I'm asked for a passphrase, I enter it, and my file is > decrypted. > >

GPG NEVER asks for a passphrase

2021-05-27 Thread Steven Dudley via Gnupg-users
it. When I right click on a file and send to GPG Tools, pick my OLD DEFAULT (being phased out) email, GPG runs and a *.gpg file is created. I double click on it, I'm asked for a passphrase, I enter it, and my file is decrypted. When I encrypt to my NEW key, my *.gpg file is created, I d

Re: pinentry will not ask me for passphrase

2021-02-17 Thread Ondřej Synáček via Gnupg-users
On Wed Feb 17, 2021 at 11:37 AM CET, Werner Koch wrote: > FWIW: We do not provide a pinentry under that name. This must be a > homebrew specific change which unfortunately is not reflected by the > version number. I looked up `pinentry-mac` via Homebrew website[1] to see who is the maintainer or w

Re: pinentry will not ask me for passphrase

2021-02-17 Thread Werner Koch via Gnupg-users
On Mon, 15 Feb 2021 16:23, Ondřej Synáček said: > pinentry-mac (pinentry) 1.1.0 > Copyright (C) 2016 g10 Code GmbH FWIW: We do not provide a pinentry under that name. This must be a homebrew specific change which unfortunately is not reflected by the version number. The latest pinentry is 1.1.1

Re: pinentry will not ask me for passphrase

2021-02-15 Thread Ondřej Synáček via Gnupg-users
O WARRANTY, to the extent permitted by law. ``` I think that is the latest version, right? I still do not understand how specifying `pinentry-program` just overrides passphrase entirely. That's pretty dangerous I think. Or maybe I'm just misunderstood the

Re: pinentry will not ask me for passphrase

2021-02-15 Thread Lukas Pitschl
Hi Ondřej, > I’m not sure what happened in past day or so but when I set > `pinentry-program` in my > `gpg-agent.conf` to value `pinentry-mac`, Are you using the full path in your gpg-agent.conf? `pinentry-program /usr/local/bin/pinentry-mac` You might also try calling `/usr/local/bin/pinentry-

pinentry will not ask me for passphrase

2021-02-14 Thread Ondřej Synáček via Gnupg-users
` in my `gpg-agent.conf` to value `pinentry-mac`, I’m never asked for passphrase anymore. It definitely used to work. I have tried restarting `gpg-agent` but I had not luck. If I delete `pinentry-program` from the config, I’m asked for passphrase. I believe if no `pinentry-program` is provided

Re: Protecting your private key - passphrase

2020-12-24 Thread Stefan Claas via Gnupg-users
On Tue, Dec 15, 2020 at 5:04 PM Stefan Claas wrote: > Did some calculations with these simple example mini-passphrases above > compared to diceware sixword word passphrases and decided to rename > my programs to passphrase hasher, so that people do not follow these > simple examples

Re: Protecting your private key - passphrase

2020-12-15 Thread Stefan Claas via Gnupg-users
On Thu, Dec 10, 2020 at 4:11 PM Stefan Claas wrote: > > Hi all, > > while playing with hashcat, diceware passphrases and entropy > checkers I thought why not try to create a little program that > you can input your passphrase and it gets converted to a random > chars str

Re: Protecting your private key - passphrase

2020-12-14 Thread Stefan Claas via Gnupg-users
On 2020-12-14 12:26, Robert J. Hansen via Gnupg-users wrote: >> People who have difficulties to create a long passphrase and >> remembering those, when using differrent ones for different use cases. > > Then why aren't you using PBKDF2 or Argon2? > > If you're w

Re: Protecting your private key - passphrase

2020-12-14 Thread Robert J. Hansen via Gnupg-users
People who have difficulties to create a long passphrase and remembering those, when using differrent ones for different use cases. Then why aren't you using PBKDF2 or Argon2? If you're writing a key derivation app -- use a key derivation function. Had I used PBKDF2 for my lit

Re: Protecting your private key - passphrase

2020-12-14 Thread Robert J. Hansen via Gnupg-users
you are one hundred percent correct that the output of my programs are *not* random and that they do not generate random output like a CSPRNG does. I'm not going to discuss this with you further. It's clear you don't know what you're doing, and I trust that's been made clear to the mailing li

Re: Protecting your private key - passphrase

2020-12-14 Thread Werner Koch via Gnupg-users
Hi! Let me also add that the private key protection mechanism of OpenPGP does not work like we would do it these days. Thus my suggestion has always been: If you need to convey a private key over a public channel do not rely on the passphrase protection [1] but wrap the backuped key in a proper

Re: Protecting your private key - passphrase

2020-12-14 Thread Stefan Claas via Gnupg-users
Robert, you are one hundred percent correct that the output of my programs are *not* random and that they do not generate random output like a CSPRNG does. So, once again, I appologize for my wrong wording and should had better used garbled looking output, compared to a regular users passphrase

Re: Protecting your private key - passphrase

2020-12-14 Thread Stefan Claas via Gnupg-users
am is not only for GnuPG usage > > Please explain to me who might benefit from this. People who have difficulties to create a long passphrase and remembering those, when using differrent ones for different use cases. > > Seriously. If people want CSPRNG output, this is not CSPRNG

Re: Protecting your private key - passphrase

2020-12-13 Thread Robert J. Hansen via Gnupg-users
> I guess you have not read my initial posting ... otherwise you would > think different and would not say so ... Stefan, I read your original posting and I completely concur with Ingo. > The program is not only for GnuPG usage Please explain to me who might benefit from this. Seriously. If pe

Re: Protecting your private key - passphrase

2020-12-13 Thread Robert J. Hansen via Gnupg-users
ms are not rooted in mathematics. Ingo's criticism is bang-on accurate. > > checkers I thought why not try to create a little program that > > you can input your passphrase and it gets converted to a random > > chars string (40 chars), based either on sha256+base91 or >

Re: Protecting your private key - passphrase

2020-12-13 Thread Stefan Claas via Gnupg-users
27;m sorry, but in my opinion this is snake oil. > > If you think that you can increase entropy ("randomness") by hashing a > passphrase a user came up with, then you should really take a basic course on > information theory. I guess you have not read my initial posting ... ot

Re: Protecting your private key - passphrase

2020-12-13 Thread Ingo Klöcker
ase entropy ("randomness") by hashing a passphrase a user came up with, then you should really take a basic course on information theory. If the user comes up with an easy-to-guess passphrase and runs it through your program, then s:he will get a hashed easy-to-guess passphrase with a li

Re: Protecting your private key - passphrase

2020-12-13 Thread Stefan Claas via Gnupg-users
and entropy > checkers I thought why not try to create a little program that > you can input your passphrase and it gets converted to a random > chars string (40 chars), based either on sha256+base91 or > ripemd-160 output. > > The idea here is to use phrases which makes no sense but &g

Protecting your private key - passphrase

2020-12-10 Thread Stefan Claas via Gnupg-users
Hi all, while playing with hashcat, diceware passphrases and entropy checkers I thought why not try to create a little program that you can input your passphrase and it gets converted to a random chars string (40 chars), based either on sha256+base91 or ripemd-160 output. The idea here is to use

gpg prompts me thrice for my passphrase - how to resolve it

2020-11-29 Thread Thomas Glanzmann via Gnupg-users
Hello, I sometimes use a yubikey, there gpg-agent only asks me once for my pin, however if I have my key on the disk, gpg-agent asks me three times: - once for local gpg -d test.gpg - once for gpg-agent functioning as ssh-agent - once for remote gpg -d test.gpg Now I wonde

Re: caching of passphrase is not working in windows , gpg agent version 2.2.23

2020-11-25 Thread Ingo Klöcker
On Dienstag, 24. November 2020 09:30:18 CET surender singh pawar via Gnupg- users wrote: > Thanks for quick reply i did the following command only to put > passphrase in cache ( missed id while writing mail ) got id from gpg > --list-secret-keys > gpg-preset-passphrase -vcP &qu

Re: caching of passphrase is not working in windows , gpg agent version 2.2.23

2020-11-24 Thread surender singh pawar via Gnupg-users
Thanks for quick reply i did the following command only to put passphrase in cache ( missed id while writing mail ) got id from gpg --list-secret-keys gpg-preset-passphrase -vcP "$pgpPassphrase" *00112233445566778898aabvccddeeff * How can I confirm if a passphrase set in the cache ?

Re: caching of passphrase is not working in windows , gpg agent version 2.2.23

2020-11-23 Thread Werner Koch via Gnupg-users
gpgconf --launch gpg-agent > "$gpgPath\bin\gpg-preset-passphrase.exe" -v -c -P "$pgpPassphrase" You need to add the keygrip to the invocation; from the man page: gpg-preset-passphrase [options] [command] cacheid cacheid is either a 40 character keygrip of hexadec

caching of passphrase is not working in windows , gpg agent version 2.2.23

2020-11-23 Thread surender singh pawar via Gnupg-users
Hi folks, I am kind of stuck on this, hence reaching out to you guyz. GPG is prompting for passphrase even though passphrase cached in gpg-agent <https://stackoverflow.com/questions/64939717/gpg-is-promting-for-passphrase-even-though-passphrase-cache-is-set-in-gpg-agent> (windows) Fol

gpg does not ask for a passphrase anymore

2020-11-22 Thread Giuliano Franchetti
it without asking the passphrase. I do not know what happened as before it always asked the passphrase but now not anymore. Is anybody having a suggestion on how to make gpg to ask the passphrase again? Many thanks Giuliano

Re: Ask for passphrase once, but require confirmation each time a key is used?

2020-11-21 Thread dalz via Gnupg-users
Thanks, that could be an option - but not a cheap one it seems. I'm also considering writing a pinentry program that does what I want, however the last attempt ended in nothing but frustration... -- dalz ___ Gnupg-users mailing list Gnupg-users@gnupg.or

Re: Ask for passphrase once, but require confirmation each time a key is used?

2020-11-21 Thread Franck Routier (perso)
like to know when something wants to > decrypt > a file. I could configure gpg-agent to not cache the key and ask for > the > passphrase each time, but that is very annoying with a long > passphrase, > so I was wondering if there was any other way to accomplish that. > What I

Re: Ask for passphrase once, but require confirmation each time a key is used?

2020-11-20 Thread dalz via Gnupg-users
I do use a password manager (https://www.passwordstore.org/), but it stores passwords in pgp-encrypted files - I'd have to insert the passphrase to get the passphrase :) -- dalz ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnup

Re: Ask for passphrase once, but require confirmation each time a key is used?

2020-11-19 Thread MFPA via Gnupg-users
Hi On Thursday 19 November 2020 at 9:08:25 PM, in , dalz via Gnupg-users wrote:- > I could configure gpg-agent to not cache the > key and ask for the > passphrase each time, but that is very annoying with > a long passphrase If you use a password manager, the length of your passph

Ask for passphrase once, but require confirmation each time a key is used?

2020-11-19 Thread dalz via Gnupg-users
The motivation is that I'd like to know when something wants to decrypt a file. I could configure gpg-agent to not cache the key and ask for the passphrase each time, but that is very annoying with a long passphrase, so I was wondering if there was any other way to accomplish that. Wha

Re: how to suppress new "insecure passphrase" warning

2020-09-21 Thread Werner Koch via Gnupg-users
On Thu, 17 Sep 2020 11:27, Alan Bram said: > configuration, there was an already-running agent that I had to kill first > in order to get it to reread the config. Just for the reecords: gpgconf --reload gpg-agent would have been sufficent but "gpgconf --kill gpg-agent: works of course also.

Re: how to suppress new "insecure passphrase" warning

2020-09-17 Thread raf via Gnupg-users
Alan Bram via Gnupg-users wrote: > I have been using gnupg for a few years now, with no change in the way I > invoke it. Recently (I guess my package manager updated to a new version: > 2.2.23) it started injecting a warning about "insecure passphrase" and > suggesting tha

Re: how to suppress new "insecure passphrase" warning

2020-09-17 Thread Alan Bram via Gnupg-users
On Thu, Sep 17, 2020 at 10:52 AM Alan Bram wrote: > On Thu, Sep 17, 2020 at 8:56 AM Phil Pennock > wrote: > >> >> Set min-passphrase-nonalpha in ~/.gnupg/gpg-agent.conf -- the default is >> 1, but I think that you can set it to 0. >> > > I tried that,

Re: how to suppress new "insecure passphrase" warning

2020-09-17 Thread Alan Bram via Gnupg-users
On Thu, Sep 17, 2020 at 8:56 AM Phil Pennock wrote: > > Set min-passphrase-nonalpha in ~/.gnupg/gpg-agent.conf -- the default is > 1, but I think that you can set it to 0. > I tried that, but it doesn't seem to have any effect. Then, as an experiment, I tried setting it to 2,

Re: how to suppress new "insecure passphrase" warning

2020-09-17 Thread Werner Koch via Gnupg-users
On Wed, 16 Sep 2020 15:03, Alan Bram said: > I have been using gnupg for a few years now, with no change in the way I > invoke it. Recently (I guess my package manager updated to a new version: > 2.2.23) it started injecting a warning about "insecure passphrase" and > sugg

Re: how to suppress new "insecure passphrase" warning

2020-09-17 Thread Martin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello Ryan, Thursday, September 17, 2020, 4:42:24 PM, you wrote: > -Ryan McGinnis > http://www.bigstormpicture.com > PGP Fingerprint: 5C73 8727 EE58 786A 777C 4F1D B5AA 3FA3 486E D7AD BTW your public key is not on keys.openpgp.org - -- Best regar

Re: how to suppress new "insecure passphrase" warning

2020-09-17 Thread Phil Pennock via Gnupg-users
On 2020-09-16 at 15:03 -0700, Alan Bram via Gnupg-users wrote: > I have been using gnupg for a few years now, with no change in the way I > invoke it. Recently (I guess my package manager updated to a new version: > 2.2.23) it started injecting a warning about "insecure p

Re: how to suppress new "insecure passphrase" warning

2020-09-17 Thread julie hayden via Gnupg-users
ersion: > 2.2.23) it started injecting a warning about "insecure passphrase" and > suggesting that I ought to include a digit or special character. > > I don't want to do that. I have a strong passphrase that was generated via > Diceware. It's simply a few w

Re: how to suppress new "insecure passphrase" warning

2020-09-17 Thread Ryan McGinnis via Gnupg-users
Wonder if someone saw this email and uploaded it -- it shows up when I search! :) Best, -Ryan McGinnis http://www.bigstormpicture.com PGP Fingerprint: 5C73 8727 EE58 786A 777C 4F1D B5AA 3FA3 486E D7AD ‐‐‐ Original Message ‐‐‐ On Thursday, September 17, 2020 10:25 AM, Martin wrote: >

Re: how to suppress new "insecure passphrase" warning

2020-09-17 Thread Stefan Claas
Alan Bram via Gnupg-users wrote: > I have been using gnupg for a few years now, with no change in the way I > invoke it. Recently (I guess my package manager updated to a new version: > 2.2.23) it started injecting a warning about "insecure passphrase" and > suggesting tha

Re: how to suppress new "insecure passphrase" warning

2020-09-17 Thread Ryan McGinnis via Gnupg-users
(BTW -- not to be pedantic, but if by "a few" words you mean "three", then you don't have a good passphrase -- six words is kinda minimum with diceware to get a decent amount of entropy) -Ryan McGinnis http://www.bigstormpicture.com PGP Fingerprint: 5C73 8727 EE58 786A

how to suppress new "insecure passphrase" warning

2020-09-17 Thread Alan Bram via Gnupg-users
I have been using gnupg for a few years now, with no change in the way I invoke it. Recently (I guess my package manager updated to a new version: 2.2.23) it started injecting a warning about "insecure passphrase" and suggesting that I ought to include a digit or special character. I

Re: "encrypted with 1 passphrase"

2020-07-31 Thread vedaal via Gnupg-users
>On 2020-07-29 at 10:20 -0700, Ayoub Misherghi via Gnupg-users >wrote: >> A gpg says "encrypted with 1 passphrase". Are there situations >where a message gets encrypted with multiple passphrases? = Not exactly, but there are situations where GnuPG c

Re: "encrypted with 1 passphrase"

2020-07-31 Thread Ángel
On 2020-07-29 at 10:20 -0700, Ayoub Misherghi via Gnupg-users wrote: > A gpg says "encrypted with 1 passphrase". Are there situations where a > message > > gets encrypted with multiple passphrases? GnuPG seems to only support encrypting with a single passphrase, but the O

"encrypted with 1 passphrase"

2020-07-29 Thread Ayoub Misherghi via Gnupg-users
A gpg says "encrypted with 1 passphrase". Are there situations where a message gets encrypted with multiple passphrases? ayoub@vboxpwfl:~/testdir$ ls textfile ayoub@vboxpwfl:~/testdir$ gpg --passphrase onetwothree --symmetric textfile ayoub@vboxpwfl:~/testdir$ ls textfile    te

RE: Passphrase Pop up

2020-07-28 Thread Ian Maclauchlan
ian.maclauch...@smartstream-stp.com www.smartstream-stp.com -Original Message- From: Werner Koch Sent: 27 July 2020 11:13 To: Dmitry Alexandrov Cc: Ian Maclauchlan ; gnupg-users@gnupg.org Subject: Re: Passphrase Pop up On Mon, 27 Jul 2020 02:41, Dmitry Alexandrov said: > GnuPG versio

Re: Passphrase Pop up

2020-07-27 Thread Werner Koch via Gnupg-users
On Mon, 27 Jul 2020 02:41, Dmitry Alexandrov said: > GnuPG version 3 does not exist yet. The stable release is 2.2.21. The OP probably meant Gpg4win 3.1.12 which is our Windows installer featuring GnuPG 2.2.21, Kleoptra, and our Outlook plugin. Shalom-Salam, Werner -- Die Gedanken sind f

No single-page manual on gnupg.org (was: Passphrase Pop up)

2020-07-26 Thread Dmitry Alexandrov
Dmitry Alexandrov wrote: > — (info "(gnupg) GPG Esoteric Options") Or on the WWW. Which reminds me... Dear Werner (or anyone else who can edit the website), it would really help those, who do not use Emacs (i

Re: Passphrase Pop up

2020-07-26 Thread Dmitry Alexandrov
u mean GnuPG 2.1.12. (Why not the latest, by the way?) > Since then the command line > > type passphrase.txt | gpg --passphrase-fd 0 --no-tty --batch -o exp.txt -d > extract_ *.txt.pgp > > has stopped working as the passphrase window keeps popping up. > Can someone please help

Re: Passphrase Pop up

2020-07-26 Thread Philihp Busby via Gnupg-users
If this is run as a scheduled task and with the passphrase kept in a text file, perhaps just remove the passphrase? On 2020-07-25T07:30:50+ Ian Maclauchlan wrote 8.1K bytes: > Hi there we recently upgrade our Windows server from 2008 to 2019 and Gnu to > 3.1.12 > > Si

Passphrase Pop up

2020-07-26 Thread Ian Maclauchlan
Hi there we recently upgrade our Windows server from 2008 to 2019 and Gnu to 3.1.12 Since then the command line type passphrase.txt | gpg --passphrase-fd 0 --no-tty --batch -o exp.txt -d extract_ *.txt.pgp has stopped working as the passphrase window keeps popping up. we run this as a

Re: Have gpg-preset-passphrase always required a keygrip? (was: Newbie question.)

2020-07-13 Thread raf via Gnupg-users
Dmitry Alexandrov wrote: > Peter Lebbing wrote: > > You can actually unlock keys the way GnuPG intends to do that with: > > > > $ my-unlocker | /usr/lib/gnupg/gpg-preset-passphrase --preset > > > > You can find the keygrip for your keys with: > > >

Have gpg-preset-passphrase always required a keygrip? (was: Newbie question.)

2020-07-13 Thread Dmitry Alexandrov
Peter Lebbing wrote: > You can actually unlock keys the way GnuPG intends to do that with: > > $ my-unlocker | /usr/lib/gnupg/gpg-preset-passphrase --preset > > You can find the keygrip for your keys with: > > $ gpg --with-keygrip --list-secret-keys > > You do need i

Use the same passphrase for PGP and SSH keys and get prompted only once by gpg-agent

2020-06-25 Thread Daniel Haid
> I've successfully set it up, now whenever I restart gpg-agent (e.g. on > reboot), it will ask for the passphrase twice, once for the GPG keys, > once for the SSH keys, even though they are the same passphrases. I need a solution for this same problem. > You may now wonder

  1   2   3   4   5   6   7   8   9   >