[Announce] GnuPG 2.0.12 released

Hello! We are pleased to announce the availability of a new stable GnuPG-2 release: Version 2.0.12. The GNU Privacy Guard (GnuPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data, create digital signatures, help authenticating using Secure Shell and to pro

Hasard library and secure random pool

Hi, I wrote a library to generate random numbers called Hasard: http://bitbucket.org/haypo/hasard/wiki/Home It can use gcrypt to generate numbers using the different security levels: "gcrypt_nonce": gcry_create_nonce() "gcrypt_weak": gcry_randomize(GCRY_WEAK_RANDOM) "gcrypt_strong": gc

Re: Plaintext attack vulnerabilities?

On Tue, Jun 16, 2009 at 9:11 AM, Daniel Kahn Gillmor wrote: > On 06/16/2009 06:44 AM, Brian Mearns wrote: >> Are there any known vulnerabilities associated with an attacker who >> can provide plaintext and receive a signature for it? I'm planning a >> simple computer-auth system where a client send

Documentations bugs?

Hi, I think that gcrypt documentation contains some bugs. Extract (1): http://www.gnupg.org/documentation/manuals/gcrypt/Controlling-the-library.html GCRYCTL_USE_SECURE_RNDPOOL; Arguments: none This command tells the PRNG to store random numbers in secure memory. This command should be

Verify signature by specific key

I'm looking for an automated way to verify that a signature was made by a specific key. It's not sufficient to just verify that the signature is valid and known to my keyring, I want to confirm who it belongs to. I was hoping the -u option would work, but it doesn't seem to. The only work-arounds I

Re: Verify signature by specific key

On Jun 17, 2009, at 8:58 AM, Brian Mearns wrote: I'm looking for an automated way to verify that a signature was made by a specific key. It's not sufficient to just verify that the signature is valid and known to my keyring, I want to confirm who it belongs to. I was hoping the -u option would w

[Announce] Dirmngr 1.0.3 released

Hi! We are pleased to announce the availability of Dirmngr version 1.0.3. Dirmngr is a server for managing and downloading certificate revocation lists (CRLs) for X.509 certificates and for downloading the certificates themselves. Dirmngr also handles OCSP requests as an alternative to CRLs. Al