Re: message digest for signed emails

2013-09-12 Thread Werner Koch
On Wed, 11 Sep 2013 11:27, s-...@gmx.net said: > IMHO mutt is just using gpg's CLI to sign the message. Depends on whether you use set crypt_use_gpgme Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. ___

Re: Confirmation of cipher?

2013-09-12 Thread Werner Koch
On Wed, 11 Sep 2013 22:46, j...@jack-brennan.com said: > When one signs a message GnuGPG will add "Hash:SHA1" or your preferred > hash at the start of the message. Only if you use --clearsign. This is here required so that we can implement one pass verification. We need to know in advance which

Re: Decrypt Issue

2013-09-12 Thread Paul R. Ramer
On 09/10/2013 06:41 AM, Diaz, John, A wrote: > Spoke too soon. The wrong path was part of the problem, but I’m still having > the issue: > > > Mainframe calls .bat file that calls C# application that calls second .bat > file to call GnuPG to decrypt a file. Once decrypted, other stuff happens,

Re: Is it possible to remove capabilities from an existing key?

2013-09-12 Thread Philip Jägenstedt
On Thu, Sep 12, 2013 at 12:16 AM, Hauke Laging wrote: > Am Mi 11.09.2013, 23:42:30 schrieb Philip Jägenstedt: >> My public key has the default capabilities sign and certify. I've seen >> that some people have only the certify capability in order to be able to >> keep the main key offline most of t

Re: Is it possible to remove capabilities from an existing key?

2013-09-12 Thread Hauke Laging
Am Do 12.09.2013, 14:53:29 schrieb Philip Jägenstedt: > what I'm actually considering is how to remove the > private master key from my laptop, so that if it's lost/stolen I only > need to revoke the subkeys. gpg --armor --export-secret-keys "$mykeyid" > key.secret-mainkey.asc gpg --armor --expor

Re: Why trust gpg4win?

2013-09-12 Thread Jan
Hello everybody, thank you for the many answers. Actually this thread should have been called "Save use of gnuPG for everybody". From what I've learned here so far I come to the following conclusions: 1. It should be to hard for the average user to configure windows such that it is a secure

OpenPGP presence on the web

2013-09-12 Thread Hauke Laging
Hello, I'd like to motivate you to do something (at least passively) I have started doing: There are some (both private and commercial) web sites which have a statement and link like this on their contact page: "And here you can download my PGP key." Most of them (at least of the German ones)

Re: Attacking an offline system

2013-09-12 Thread NdK
Il 12/09/2013 19:07, Peter Lebbing ha scritto: > The filesystem is also still there with this USB-via-serial-port thingy. And > on > the CD. Nope. W/ Vinculum module you send it commands like "open mickey.txt" and then "read 1024". The filesystem driver is in the module and your interface only re

Attacking an offline system (was: Why trust gpg4win?)

2013-09-12 Thread Peter Lebbing
On 12/09/13 15:55, Jan wrote: > Do you see any reasonable attack vectors? What do you think? The moment someone plugs in a mass storage device and we're talking about attacking his computer, I think of a manipulated file system, exploiting an error in the file system driver of the kernel (which ru

Re: Why trust gpg4win?

2013-09-12 Thread Marko Randjelovic
On Thu, 12 Sep 2013 15:55:24 +0200 "Jan" wrote: > 2.1 Most people have only one PC and windows as operating system, so > the linux/unix distribution should be installed on an USB device. > This device must not be plugged into the PC if windows is running, in > order to avoid a manipulation. Furthe

lsign produces exportable signatures when used for self-sigs

2013-09-12 Thread Daniel Kahn Gillmor
GnuPG is currently not able to create a non-exportable self-sig. If you try to do this, it gives an error: WARNING: the signature will not be marked as non-exportable. But: some people might never want their keys to be published to the public keyservers, or have some User IDs that they keep lo

Re: message digest for signed emails

2013-09-12 Thread Doug Barton
For the OP, try with and without spaces around the = sign as well. I have heard reports that can make a difference. So try all of the following: n...@exaxmple.com = key1 key2 key3 = key1 key2 key3 n...@exaxmple.com=key1 key2 key3 =key1 key2 key3 hth, Doug