Paranoid People's User Group?

2010-10-13 Thread Dan Cowsill
Hi everyone, Almost-but-not-quite my first post to this list. I am very interested in encryption technologies, and PGP in particular. Of course, this is only a hobby and I don't have any trade secrets or international intrigues to protect, so that leaves me at a bit of a disadvantage when it com

Re: Confirmation for cached passphrases useful?

2010-10-14 Thread Dan Cowsill
On 13/10/2010 4:02 PM, MFPA wrote: > The user can type their password once per session into a text file and > paste it every time it is requested. This reduces the annoyance factor > and does not train the user to constantly re-type the passphrase. > I use a program called KeePass to keep track of

Changing secret key encryption algorithms

2010-10-21 Thread Dan Cowsill
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I was inspired by a thread on a friend's mishap with his secret key to look into the various ways that a GnuPG secret key can be encrypted prior to its storage on disk. On 20/10/2010 1:24 PM, Faramir wrote: > > Well, then the private key wa

Security considerations: CAST-128

2010-10-21 Thread Dan Cowsill
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I understand that there are *some* security considerations when using CAST-128 (CAST5, as used in GnuPG), but this is typical of many ciphers in use today. In particular, a paper[1] on the linear cryptanalysis of reduced round versions of CAST