David Shaw wrote:
> On Wed, Dec 27, 2006 at 01:25:34PM -0500, [EMAIL PROTECTED] wrote:
>> is it possible to construct a gnupg signature that is the same each
>> time
>> for the same file (and same signing key and hash ) ?
>>
>> would like to do something like this for use as a truecrypt keyfile:
>
On Thu, Dec 28, 2006 at 11:34:18PM +1030, Alphax wrote:
> > DSA signatures contain random data, so even if you hacked around the
> > timestamp problem, the signature would not match. RSA signatures do
> > not contain random data.
> >
>
> Err, I thought it was the other way around, which is why
>Message: 6
>Date: Thu, 28 Dec 2006 00:30:43 -0500
>From: David Shaw <[EMAIL PROTECTED]>
>Subject: Re: gnupg clearsigning question
>DSA signatures contain random data, so even if you hacked around
>the
>timestamp problem, the signature would not match. RSA signatures
>do
>not contain random da
[EMAIL PROTECTED] wrote:
>the issue is the 'keyfile'
[...]
Sounds rather complex. I've just started to encrypt my USB flashdrives with
TrueCrypt (main advantage is that it works both on Linux and windows) but
have choosen to use "normal" password-encrypted volumes. What is the
advantage of keyfi
Johan Wevers johanw at vulcan.xs4all.nl
Thu Dec 28 18:30:27 CET 2006 wrote:
> What is the advantage of keyfiles?
it is a way of decrypting
(allowing the truecrypt volume to be mounted)
without using a passphrase,
possibly avoiding issues of keyloggers, passphrase capturing,
and concerns about me
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA224
Was Thu, 28 Dec 2006, at 10:14:53 -0500,
when [EMAIL PROTECTED] wrote:
> (1) the simplest:
> just encrypt the keyfile, and decrypt it when necessary
> (the problem is that this calls attention to itself, by having an
> encrypted file present
I recently had to revoke a uid and when I did I was asked to give a
short notation about why I was revoking it. I'm curious as to how one
views those notations. I tried using the following command:
gpg --list-sigs --list-options\
show-unusable-uids,show-notations,show-sig-subpackets 7b4abdb3
but
On Thu, Dec 28, 2006 at 03:22:55PM -0600, Luke Powell wrote:
> I recently had to revoke a uid and when I did I was asked to give a
> short notation about why I was revoking it. I'm curious as to how one
> views those notations. I tried using the following command:
>
> gpg --list-sigs --list-option
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Can I use a USB instead of a Smart Card?
Thanks, Tom
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFFlGLc21btHJTHnM0RAtOaAJ95k4hyVXfVsSZ5B8TYAqBq+EIsZgCfUzBR
tu4zD9J5
I wasn't able to encrypt to someone even though their key is on my keyring. I
get a message that no valid and trusted key could be found for the recipient.
The key isn't revoked, not expired, and my signature is on his key. Can
anyone explain this?
Mandriva 2007, Kmail 1.9.4, gnupg-1.4.5-1.2mdv
10 matches
Mail list logo