Re: GnuPG 2.1 and Mailpile (LWN comments) about GPGME

2014-11-13 Thread Bernhard Reiter
On Wednesday 12 November 2014 at 21:55:10, Nicholas Cole wrote: >  The --with-colons > --command-fd --status-fd interface has been remarkably stable. True, Werner went a long way to keep it stable. > The stability and utility of this interface is one of my favourite > aspects of the gnupg project

gnome-keyring problem section in the wiki (Re: gnupg privicy assistant - card manager.)

2014-11-13 Thread Bernhard Reiter
On Monday 01 September 2014 at 08:37:45, Werner Koch wrote: > On Sun, 31 Aug 2014 16:00, paul.le...@quadensemble.com said: > > I'd like to use the card manager function, but whenever I invoke it the > > application returns the error "Error accessing the card", and the > > status bar reports "Checki

Re: GnuPG 2.1 and Mailpile (LWN comments) about GPGME

2014-11-13 Thread Werner Koch
On Thu, 13 Nov 2014 10:08, bernh...@intevation.de said: > job there. Gpgme needs to get more popular, probably improved along the way, > but it also would help to make the crypto-experience with GnuPG a lot better > for developers and users alike. Actually I see 88 Debian projects depending on

Re: GnuPG 2.1 and Mailpile (LWN comments) about GPGME

2014-11-13 Thread Bernhard Reiter
On Thursday 13 November 2014 at 11:54:57, Werner Koch wrote: > A good step forwad would be the integration of lnaguage bindings into > the gpgme package.  That should make it easier to use it from languages > other than C, C++ (, and CL).   Because of possible dependencies, they should end up in d

Re: GnuPG 2.1 and Mailpile (LWN comments) about GPGME

2014-11-13 Thread Robert J. Hansen
A good step forward would be the integration of language bindings into the gpgme package. Not to beat a broken drum, but making it easier to use GPGME from a Microsoft environment would also be nice. MSVC++ needs a .lib file for each DLL you're going to link against, and GPGME/Win32 doesn't shi

Re: Detached signature ambiguity

2014-11-13 Thread Werner Koch
On Fri, 7 Nov 2014 22:21, si...@sinic.name said: > I've attached an exemplary signature file (named gnupg-2.1.0.tar.bz2.sig > for your convenience) that demonstrates the problem: Thanks that was useful for testsing. What I did is: commit 69384568f66a48eff3968bb1714aa13925580e9f (HEAD, refs/hea

Re: GnuPG 2.1 and Mailpile (LWN comments) about GPGME

2014-11-13 Thread Werner Koch
On Thu, 13 Nov 2014 16:02, r...@sixdemonbag.org said: > Not to beat a broken drum, but making it easier to use GPGME from a > Microsoft environment would also be nice. MSVC++ needs a .lib file for > each DLL you're going to link against, and GPGME/Win32 doesn't ship with Looking at the Gpg4win s

Re: Detached signature ambiguity

2014-11-13 Thread Daniel Kahn Gillmor
On 11/13/2014 07:01 AM, Werner Koch wrote: > gpg: Make the use of "--verify FILE" for detached sigs harder. thanks for doing this, Werner. > Now waiting which tools or scripts will break. I checked a few > (including dpkg) and they do the Right Thing. i'm glad to hear this. > Shall this be

Re: Detached signature ambiguity

2014-11-13 Thread Doug Barton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 11/13/14 9:22 AM, Daniel Kahn Gillmor wrote: | On 11/13/2014 07:01 AM, Werner Koch wrote: |> gpg: Make the use of "--verify FILE" for detached sigs harder. | | thanks for doing this, Werner. | |> Now waiting which tools or scripts will break. I

gpg4usb: Portable GUI for GnuPG

2014-11-13 Thread Wolfgang Frisch
Please consider adding gpg4usb to the GnuPG website. https://www.gnupg.org/related_software/frontends.html >gpg4usb is a very easy to use and small portable editor to encrypt and >decrypt any text-message or -file you want. >Our aim is, to give anyone the possibility to send and receive secure >e

Re: gpg4usb: Portable GUI for GnuPG

2014-11-13 Thread Robert J. Hansen
gpg4usb is a very easy to use and small portable editor to encrypt and decrypt any text-message or -file you want. I mean no offense, but this seems like a really bad idea. Putting it on CD-ROM might be a pretty cool idea, but USB is just ... scary. According to Vint Cerf, roughly one in fiv

Help needed

2014-11-13 Thread da...@gbenet.com
Hi All, Background: I exported my keys to a USB stick. Then I copied my .gnupg to a new Linux laptop. Then I imported my keys. I thought that I would be fine. But I get the following error when signing my mail: "Key 0xAAd8C47D not found or not valid. The (sub-)key might have expired." The key

Re: Help needed

2014-11-13 Thread Hauke Laging
Am Do 13.11.2014, 22:33:31 schrieb da...@gbenet.com: > I exported my keys to a USB stick. Then I copied my .gnupg to a new > Linux laptop. Then I imported my keys. I thought that I would be > fine. It is unclear to me what exactly you are talking about. The terms "export" and "import" usually re

Re: Help needed

2014-11-13 Thread Doug Barton
On 11/13/14 2:33 PM, da...@gbenet.com wrote: Hi All, Background: I exported my keys to a USB stick. Then I copied my .gnupg to a new Linux laptop. Then I imported my keys. I thought that I would be fine. Why did you perform the second step? Just copy ~/.gnupg to the new system, delete random

Re: GnuPG 2.1 and Mailpile (LWN comments) about GPGME

2014-11-13 Thread Robert J. Hansen
On 11/13/2014 12:17 PM, Werner Koch wrote: > Did you want to test a beta installer? Sure, I'm up for that. > Any volunteer to maintain one? Can't. I'm a forensics researcher who's received some USG funding; in the eyes of a lot of people, especially post-Dual_EC_DRBG, I'd be suspect. It's best

Re: Help needed

2014-11-13 Thread da...@gbenet.com
On 13/11/14 22:42, Hauke Laging wrote: > Am Do 13.11.2014, 22:33:31 schrieb da...@gbenet.com: > >> I exported my keys to a USB stick. Then I copied my .gnupg to a new >> Linux laptop. Then I imported my keys. I thought that I would be >> fine. > > It is unclear to me what exactly you are talking

Re: Help needed

2014-11-13 Thread da...@gbenet.com
On 13/11/14 22:42, Doug Barton wrote: > On 11/13/14 2:33 PM, da...@gbenet.com wrote: >> Hi All, >> >> Background: >> >> I exported my keys to a USB stick. Then I copied my .gnupg to a new >> Linux laptop. Then I imported my keys. I thought that I would be >> fine. > > Why did you perform the secon

Re: Help needed

2014-11-13 Thread Doug Barton
On 11/13/14 3:59 PM, da...@gbenet.com wrote: On 13/11/14 22:42, Doug Barton wrote: On 11/13/14 2:33 PM, da...@gbenet.com wrote: Hi All, Background: I exported my keys to a USB stick. Then I copied my .gnupg to a new Linux laptop. Then I imported my keys. I thought that I would be fine. Why

Re: Help needed

2014-11-13 Thread da...@gbenet.com
On 14/11/14 00:55, Doug Barton wrote: > On 11/13/14 3:59 PM, da...@gbenet.com wrote: >> On 13/11/14 22:42, Doug Barton wrote: >>> On 11/13/14 2:33 PM, da...@gbenet.com wrote: Hi All, Background: I exported my keys to a USB stick. Then I copied my .gnupg to a new Linux

Fermi estimates

2014-11-13 Thread Robert J. Hansen
A while ago Hauke asked if the statement in the FAQ about a brute-forcer leaving the Earth uninhabitable was correct. I said it was, but I didn't break out the math. Now that I have a few minutes to breathe, here's the full answer. It's a Fermi estimate, which means it's not going to be perfectl

Re: Fermi estimates

2014-11-13 Thread Robert J. Hansen
Whoops! > so 10**30 years. The universe is about 10 billion years old, or > 10**13 years, so ... our brute-force key cracker takes 10**17 times > longer than the age of the universe in order to brute-force a 128-bit > key. 10 billion is 10**10, so it takes 10**20 times the age of the universe. Bu

Re: Help needed

2014-11-13 Thread da...@gbenet.com
On 14/11/14 00:55, Doug Barton wrote: > On 11/13/14 3:59 PM, da...@gbenet.com wrote: >> On 13/11/14 22:42, Doug Barton wrote: >>> On 11/13/14 2:33 PM, da...@gbenet.com wrote: Hi All, Background: I exported my keys to a USB stick. Then I copied my .gnupg to a new Linux

Re: Help needed

2014-11-13 Thread Daniel Kahn Gillmor
Hi David-- You sound frustrated. hopefully we can help you figure things out. Some of the details of what's happened on your machine(s) sound unclear to me, and we'll be able to help you better with more precise information. On 11/13/2014 04:31 PM, da...@gbenet.com wrote: > Even when I use a ba

GnuPG 2.1.0 Merging secret key

2014-11-13 Thread Mustrum
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, >My guess would be the option "--try-secret-key name" where "name" might be the >subkey's new ID followed by an exclamation mark. Nope I got the error "no secret key available". I'm wondering : what is the planned usage for that feature ? -