Re: Talking about Cryptodevices... which one?

2015-01-24 Thread Andreas Schwier
> Here we go. > > (a) OpenPGPcard compatible device > > With those devices which conform to OpenPGPcard specification, it is > possible to offer its users following features, using GnuPG and > related tools. > >(1) OpenPGP support >(2) SSH support thorough gpg-agent >(3) X.509 suppor

Re: Talking about Cryptodevices... which one?

2015-01-24 Thread Andreas Schwier
On 01/24/2015 12:05 AM, Matthias-Christian Ott wrote: > The same is true for the OpenPGP smart card or for almost any other > smart card available on the market. They could all contain a secret key > escrow mechanism and some probably do. Proprietary smart cards are hard > to audit and verify and a

GPA fails to verify certain .asc files

2015-01-24 Thread Philip Jackson
Using GPA 0.9.4 in linux. I downloaded a file and its signature as a .asc from a website that I have used many times. While looking at the spelling of the filename, I accidentally clicked on the signature file and launched GPA so decided to use it to verify the download. GPA gave me a 'bad' stat

Re: Talking about Cryptodevices... which one?

2015-01-24 Thread Peter Lebbing
On 24/01/15 17:57, Andreas Schwier wrote: > Can you provide any evidence for that claim or is this just paranoia ? One man's paranoia is another man's common sense, I suppose. Since those smartcards are pretty much exclusively used for security purposes, i.e., private key storage, they're a likely

Re: Talking about Cryptodevices... which one?

2015-01-24 Thread Hauke Laging
Am Sa 24.01.2015, 18:14:01 schrieb Andreas Schwier: > And I want a secure key escrow scheme where I can backup and > restore sensitive key material - functions the OpenPGPCard > specification does not provide for. The OpenPGP card does provide the opportunity to backup the on the card generated

Re: GPA fails to verify certain .asc files

2015-01-24 Thread Peter Lebbing
On 24/01/15 20:05, Philip Jackson wrote: > Using GPA 0.9.4 in linux. > > I downloaded a file and its signature as a .asc from a website that I have > used many times. While looking at the spelling of the filename, I > accidentally clicked on the signature file and launched GPA so decided to > use

Re: GPA fails to verify certain .asc files

2015-01-24 Thread Philip Jackson
On 24/01/15 20:25, Peter Lebbing wrote: > On 24/01/15 20:05, Philip Jackson wrote: >> Using GPA 0.9.4 in linux. >> >> I downloaded a file and its signature as a .asc from a website that I have >> used many times. While looking at the spelling of the filename, I >> accidentally clicked on the signa