Re: Protecting signing key

2005-08-03 Thread Peter Pentchev
On Tue, Aug 02, 2005 at 05:48:39PM -0500, Ryan Malayter wrote: [snip] > That said, everything I've read indicates that the encrypting file > system (EFS) in Windows 2000+ is reasonably well implemented. However, > the user's password is still the weak link, as it is used to protect > the private ke

Re: Protecting signing key]

2005-08-03 Thread Roscoe
ision from there. I use dm-crypt for what its worth, though I wouldn't have any problems with using loop-aes instead. On 8/3/05, Kara <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > > Reference: > > Subject: Re: Protec

Re: Protecting signing key

2005-08-02 Thread Werner Koch
On Tue, 02 Aug 2005 23:23:59 +, cdr said: > One solution (free, with full source) can be found here: > http://www.truecrypt.org/ Unfortunately only free as in free beer. You are not allowed to change anything unless you send the changes back. Shalom-Salam, Werner ___

Re: Protecting signing key]

2005-08-02 Thread Graham
On Wednesday 03 Aug 2005 3:05 am, Kara wrote: > What would be an equally good equivalent > for those of us using a Linux distro? What distro and what kernel are you using? -- Graham ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnup

Re: Protecting signing key]

2005-08-02 Thread Zeljko Vrba
Kara wrote: What would be an equally good equivalent for those of us using a Linux distro? You can use loop-aes, I think it's included in 2.6 kernels. I would recommend BestCrypt from www.jetico.com. It is not free software, but fully-functional evaluation version for download is available (so

Re: Protecting signing key]

2005-08-02 Thread Kara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Reference: Subject: Re: Protecting signing key Date: Tue, 02 Aug 2005 23:23:59 + From: cdr <[EMAIL PROTECTED]> To: gnupg-users@gnupg.org > One solution (free, with full source) can be found here: > http://www.t

Re: Protecting signing key

2005-08-02 Thread cdr
Ryan Malayter wrote: Windows doesn't have whole-disk encryption yet, only per-file and per-folder encryption. That said, everything I've read indicates that the encrypting file system (EFS) in Windows 2000+ is reasonably well implemented. It is imprudent to trust operating system vendors in g

Re: Protecting signing key

2005-08-02 Thread Ryan Malayter
On 8/2/05, Johan Wevers <[EMAIL PROTECTED]> wrote: > As long as you're not as stupid to use the built-in functions. I've > heard stories that the FBI was very happy when they confiscated a > laptop from alledged Al Quaida members protected only by that - didn't > seem difficult to crack for them. A

Re: Protecting signing key

2005-08-02 Thread Johan Wevers
Alphax wrote: >As for the encrypted file systems... Windows supports whole disk >encryption in various forms as well. As long as you're not as stupid to use the built-in functions. I've heard stories that the FBI was very happy when they confiscated a laptop from alledged Al Quaida members protec

Re: Protecting signing key

2005-08-02 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 S K wrote: > Hi, > > I plan to make myself a signing key and keep it > offline and as securely as possible. Well, you could try Tinfoil Hat Linux (http://tinfoilhat.shmoo.com/)... run it on a computer with an LCD screen (laptops are best) - in

Protecting signing key

2005-08-01 Thread S K
Hi, I plan to make myself a signing key and keep it offline and as securely as possible. How do you guys keep your signing key secure? - Do you put it on a USB stick and encrypt the file system? - Do you use Knoppix MIB (http://www.bouissou.net/knoppix-mib/doc-html/Knoppix-Mib.html)? - Any other