Re: Smartcards and tokens

2016-12-18 Thread Peter Lebbing
On 18/12/16 01:56, Robert J. Hansen wrote: > Nope. OpenPGP requires each RSA encryption add at least eight random > bytes to the data pre-encryption in order to make even identical > messages encrypt to different ciphertexts. However, this randomness is added by the host, not by the smartcard. Th

Re: Fwd: tar, compress, split and then encrypt a list of files

2016-12-18 Thread Helmut Waitzmann
Guan Xin : > On Sun, Dec 18, 2016 at 12:27 AM, Helmut Waitzmann > wrote: >> >> As this problem is more one of split/dd/shell than of gpg, how >> about discussing this in the usenet group “comp.unix.shell” rather >> than in the “gnupg-users” mailinglist? >> > > Actually there is reason to discuss

Re: Implications of a common private keys directory in 2.1

2016-12-18 Thread Carola Grunwald
Stephan Beck wrote: >Carola Grunwald: >> Stephan Beck wrote: >>> Carola Grunwald: Peter Lebbing wrote: >> >> >> Removing all cached passphrases sounds great. But does that mean I have >> to invoke the agent directly using the Assuan protocol? And what would >> be the way to get a list of all

CCID token Serial numbers: same subkeys on multiple cards

2016-12-18 Thread Srinivas V
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, Here is my setup: 1 offline master key pair 4096 Certify only 4 Yuby keys, 2 gnuk tokens : same 2048 E, S, A subkeys on all tokens My problem is some programs depend on card number and not on the keys on the card. Example "OpenPGP Encryption a

Re: CCID token Serial numbers: same subkeys on multiple cards

2016-12-18 Thread Peter Lebbing
On 18/12/16 17:37, Srinivas V wrote: > Instead of me switching between gnupg home directories for the key I > have in hand, I would like to know if there is a way to add more than > one card number to the same sub key? As far as I am aware, that is not possible. HTH, Peter. -- I use the GNU Pr

gpg-agent 2.1.16 needs about 10s for initialization saying need_entropy before it completes its first op

2016-12-18 Thread Jan Kundrát
Hi, we're using gpgme's C++ bindings in Trojita [1], an IMAP e-mail client. After an update of gnupg from 2.1.15 to 2.1.16, gpg-agent appears to need more than 10s to initialize itself during startup -- or at least our very first decryptAndVerify() operation takes more than 10s. An initial re