RE: GPG4Win 2.2.3 Smart card support

2015-03-10 Thread Saxena, Deepak
Hi Yutaka, I am trying to test file encryption with SafeNet smart cards. (CardOs/ Java and other tokens). I am getting error message: The card application is not yet supported. I have dll libraries for my tokens but I am new to GPG4Win. Can you please guide me the way to import the library or st

Re: AES-NI, symmetric key generation

2015-03-10 Thread Andre Heinecke
Hi, To answer your first question regarding gpg4win: On Monday, March 09, 2015 05:15:14 PM Maricel Gregoraschko wrote: > Hello All,I would first like to thank you for your effort and time > developing gnupgp.I have a couple of questions: 1. Does GnuGP (in > particular, the Windows binaries distri

Re: GPG4Win 2.2.3 Smart card support

2015-03-10 Thread Werner Koch
On Tue, 10 Mar 2015 08:14, deepak.sax...@safenet-inc.com said: > I am trying to test file encryption with SafeNet smart cards. (CardOs/ Java > and other tokens). > I am getting error message: The card application is not yet supported. You need to write an application which GnuPG knows about. Th

Re: Trezor - Could this be the model for a PGP crypto device?

2015-03-10 Thread Jonathan Schleifer
On Tue, 10 Mar 2015 13:35:27 +0900, NIIBE Yutaka wrote: > Confirmation push button would be a good idea, and I have been > considering how we can enhance the OpenPGPcard specification so that > we could do something like that for future implementation(s). Does this really need to be part of the

Re: gpg in a cybercafé

2015-03-10 Thread Jonathan Schleifer
On Thu, 05 Mar 2015 22:27:36 +, flapflap wrote: > The current version (1.3) of Tails comes with GnuPG 1.4.12. That's just not true. Not only is the gpg2 command available, but the change log even explicitly states that GnuPG 2 was added to improve smartcard support. -- Jonathan pgpMrNu2r

Re: AES-NI, symmetric key generation

2015-03-10 Thread Werner Koch
On Tue, 10 Mar 2015 10:05, aheine...@intevation.de said: >> Also is there any >> option to turn hardware acceleration on or off at runtime? You can globally disable certain hardware features: Create a file --8<---cut here---start->8--- # We do not want to use

Re: AES-NI, symmetric key generation

2015-03-10 Thread Pete Stephenson
On 3/9/2015 6:15 PM, Maricel Gregoraschko wrote: > Hello All, Hi! > 2. When using symmetric encryption and providing a passphrase, I > understand the actual encryption key is generated on the spot, used to > do the encryption, and then discarded from memory and not stored > anywhere, is that cor

Re: Suggestions for a Practical Scheme to Manage Multiple Identities?

2015-03-10 Thread Ville Määttä
On 10.03.15 04:41, NIIBE Yutaka wrote: >> So this is not a question about portable flash drives vs. smartcards per >> > se. I _think_ I understand those risks and trade-offs but if there is >> > something I'm missing then, of course, I'd like to know. > I had an experience that one of my family mem

GnuPG News for February 2015

2015-03-10 Thread Werner Koch
Hi! Find below the plain text version of https://gnupg.org/blog/20150310-gnupg-in-february.html Shalom-Salam, Werner 1 GnuPG News for February 2015 ══ Indeed, very exiting news this month: The financial crisis of The GnuPG Project is over. Due to an

Re: AES-NI, symmetric key generation

2015-03-10 Thread Maricel Gregoraschko
Pete,Very useful info about using --show-session-key to avoid revealing your private asymmetric key.In your example ("gpg --show-session-key < example.txt") , had you somehow set up gpg to use symmetric by default, rather than asymmetric + symmetric?If I explicitly pass --symmetric, --show-sessi

Re: AES-NI, symmetric key generation

2015-03-10 Thread Maricel Gregoraschko
> AES is an algorithm that produces deterministic results. Not really something  to backdoor like a RNG.  I admit I haven't looked at the AES-NI instruction set, but I've read that it could be easy for the CPU to reconstruct the key from a sequence of calls typical to AES encryption/decryption (I

Re: AES-NI, symmetric key generation

2015-03-10 Thread Maricel Gregoraschko
Thanks Werner.On Windows, you mean on each drive letter, in the root directory? (e.g. c:\hwf.deny, d:\hwf.deny, etc.?).Also would there be a way to make gpg display which hardware features are being used when encrypting/decrypting (to confirm that the deny file was correctly placed and actually

Re: AES-NI, symmetric key generation

2015-03-10 Thread vedaal
On 3/10/2015 at 4:19 PM, "Maricel Gregoraschko" wrote: >I agree, using key instead of passphrase doesn't enhance security >(assuming an attacker knows that the key was derived from a >passphrase and with what key derivation algorithm? I assume the >randomness/entropy of the key itself is high

Re: AES-NI, symmetric key generation

2015-03-10 Thread Werner Koch
On Tue, 10 Mar 2015 20:39, maricelgregorasc...@yahoo.com said: > Thanks Werner.On Windows, you mean on each drive letter, in the root > directory? (e.g. c:\hwf.deny, d:\hwf.deny, etc.?).Also would there be Yes, that was the idea. The file names should however be c:\etc\gcrypt\hwf.deny d:\etc

Re: AES-NI, symmetric key generation

2015-03-10 Thread Pete Stephenson
On 3/10/2015 8:28 PM, Maricel Gregoraschko wrote: > Pete, > Very useful info about using --show-session-key to avoid revealing your > private asymmetric key. No worries. > In your example ("gpg --show-session-key < example.txt") , had you > somehow set up gpg to use symmetric by default, rather t

Re: AES-NI, symmetric key generation

2015-03-10 Thread Werner Koch
On Tue, 10 Mar 2015 20:33, maricelgregorasc...@yahoo.com said: > I admit I haven't looked at the AES-NI instruction set, but I've read > that it could be easy for the CPU to reconstruct the key from a Possible. It is also easy to detect the instructions used for software based AES keyscheduling

Re: Trezor - Could this be the model for a PGP crypto device?

2015-03-10 Thread NIIBE Yutaka
On 03/10/2015 09:18 PM, Jonathan Schleifer wrote: > Does this really need to be part of the specification? For example, > the Gnuk could just delay signing / decryption / authentication > until the button has been pressed and return an error if it doesn't > get pressed within a certain amount of ti

[cygwin] gpg-agent with ssh support ?

2015-03-10 Thread Xavier Maillard
Hi all, On my workstation, I have installed cygwin and GPG4win which is bundled with a version of gpg-agent (cygwin comes whith oldies and no gpg-agent AFAICS). I enabled ssh support in the gpg-agent.conf file as usual and I clearly see the socket files for both GNUpg and SSH. When starting a cy