Re: GnuPG asks for confirmation...

2006-06-01 Thread Laurent Jumet
-BEGIN PGP MESSAGE-
Version: GnuPG v1.4.3 (MingW32)

owNCWmg2MUFZJlNZvE3tWgAByP/3+nYhAmBn//X//92YP+f/4RBBRo3MIoeA0kAA
i0oQQAJHZ3cZxcImkmFPGqaep5Q9TQ2piZPUNPUeoAGhoZAGQB6hoHqGQNPRP1Qi
aAphkp5DTJMmQaNAADRoABqp+TRGpiNI9INAGgaBpoAAAGgAAAan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=/6Aq
-END PGP MESSAGE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG asks for confirmation...

2006-06-01 Thread Laurent Jumet
-BEGIN PGP MESSAGE-
Version: GnuPG v1.4.3 (MingW32)

owNCWmg2MUFZJlNZLMzs4gABJn//+nIoAvQXV7X9/EYAP///4QTQSoJBJo7hAQKA
EAAYAogwAYltKwamplJtNJ7UmJ6gNMQ9IMEA0aNoIbUaAaaMGk9IYyDU0mBNAKZN
Gg0AAeoBoA00NBkAaCEp5I/VG0yhkNBoaA0yAGgAANB0L26igoXVF92F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=fCpG
-END PGP MESSAGE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Signing vs. encrypting was: Cipher v public key.

2006-06-01 Thread Janusz A. Urbanowicz
On Wed, May 31, 2006 at 01:59:37PM +0100, David Gray wrote:
 
 Will suggest to the customer that we use signed  encrypted
 transmissions.  The only Issue we then have is that they wish to be
 custodians of the private key,

There is no need for them, from the cryptography point of view. Using
public-key crypto they can send you encrypted stuff and you can send
them encrypted stuff and the second party can decrypt what they are
sent without knowing the sender's secret key - thats what pubkey
crypto is for. If they want to be sure that they can decrypt
everything, the encrypted data should be encrypted to both recipients'
pubkeys (thats perfectly possible using GPG/PGP).

 they are Looking into commerical methods for secure key
 distribution.
 
direct them to commercial solutions for quantum cryptography :-

 The other issue is the IT manager at the customer site is wary of Gnu
 software and is 
 Going to look at commerical offering, PGP I assume.  Apart from the lack 
 Of cost are there any other good reason I can give for using GPG? 

gpg integrates better with autimation and I really doubt that there is
current, supported PGP for anything else than windows and mac.

Alex


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Signing vs. encrypting was: Cipher v public key.

2006-06-01 Thread Todd Zullinger
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Janusz A. Urbanowicz wrote:
 gpg integrates better with autimation and I really doubt that there is
 current, supported PGP for anything else than windows and mac.

While I prefer gnupg to pgp myself, I did just happen to see a
reference to pgp command line today.  Here are the platforms it
supports:

 * Windows 2003
 * Windows XP SP1
 * Windows 2000 SP4
 * HP-UX 11i or above (PA-RISC only)
 * IBM AIX 5.2 or above
 * Red Hat Enterprise Linux 3.0 or above (x86 only)
 * Solaris 8 or above (SPARC only)
 * Mac OS X 10.3 or above

http://download.pgp.com/products/pdfs/PGP_CL902_DS_050825_F.pdf

Not a terribly small list, except when compared to what gnupg will run
on. :)

- -- 
ToddOpenPGP - KeyID: 0xD654075A | URL: www.pobox.com/~tmz/pgp
==
The man who is a pessimist before forty-eight knows too much; the man
who is an optimist after forty-eight knows too little.
-- Mark Twain

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: When crypto is outlawed bayl bhgynjf jvyy unir cevinpl.

iG0EARECAC0FAkR+t4gmGGh0dHA6Ly93d3cucG9ib3guY29tL350bXovcGdwL3Rt
ei5hc2MACgkQuv+09NZUB1pPxgCg+sDnINDLpwKXpLkqVpXEEDV4CmcAoOlQxtEo
YKcINHqaop0I87a/Iy82
=jdsS
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG asks for confirmation...

2006-06-01 Thread Laurent Jumet
Hello !

Sven Radde [EMAIL PROTECTED] wrote:

 But this is logical, isn't it?
 You don't trust a key (what's there to trust?). You trust the fact that
 *a certain key belongs to a certain user-id* and if new ids are added,
 you would have to think again if the owner of the key actually owns that
 id.

 Of course, he owns.
 It's impossible to add or revoque a UserID without the SecretKey.
 No matter if I add an UserID to my Key: it's the same Key.
 Trust is not about owning the key. It is about owning the *user-id* and
 in particular linking a user-id (= a real person) to a key.

 In other words: Who would prevent you from adding [EMAIL PROTECTED] as a
 user-id to your key? (Or, creating a new key with that user-id.)
 Still, as nobody would believe that my email-address belongs to your key
 (i.e. that new user-id on your key is not trusted by anyone), my emails
 would not get encrypted to your key. People would approach me (my
 user-id) for verification of the key's fingerprint and I could deny that
 the key belongs to me / my user-id.

You are right.
But what I noticed is this:

Let's suppose your Key has 4 UserID's and all fully trusted.
You add one UserID more Winston Churchill.
All 4 previous UserID's are compromised too, at the moment you added 
another one.
That's what *I think* I noticed.

-- 
Laurent Jumet
  KeyID: 0xCFAF704C

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


re: Signing vs. encrypting was: Cipher v public key

2006-06-01 Thread vedaal
Todd Zullinger tmz at pobox.com wrote on
Thu Jun 1 11:46:48 CEST 2006 :

 While I prefer gnupg to pgp myself, I did just happen to see a
 reference to pgp command line today

the cost is *astronomical*

have played around with it when it was released as a free
command line pgp 8.5 beta

has a few features unique to pgp,
which may or may not be of interest to the customers:

- ADK's

- split-key / shared-key capablilty
(this happens to be nice and useful
any chance for a 'feature request' :-)  ?  )

- platform-specific self-decrypting archives,
(a windows user can make an sda specifically for a mac or linux 
user,
but not an sda that works on both)
(this was added in 9.x)

other than that,
it is a very unforgiving and difficult command line to use,
radically different from 6.5.8 or 2.x

it is set up for 'no prompting'
so unless all the options are anticipated and entered in the 
original command,
it won't work

would absolutely *NOT* recommend it,
unless someone _must_ use a CLI with ADK capability


vedaal




Concerned about your privacy? Instantly send FREE secure email, no account 
required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Cannot decrypt this file for the life of me

2006-06-01 Thread webdevlv

I am a complete newbie to GPG so bare with.  I have a gpg encrypted file and
two .asc files...  file_sec.asc and file.asc (pubilc and secret key?  I have
no clue what the terminology is).  I also have a passphrase that needs to be
used.  I have been trying to get something on my windows machine running for
the past 3 days to try to get this file decrypted.  I have installed gnupg
(and added the location to gpg.exe in the PATH variable).  I have also
installed gpgshell and gpg4win, which includes winpt, and have tried
absolutely every combination and permutation of key import, decrypt, etc,
etc.

Plain and simple, I just need a file decrypted.  Do you know of a tutorial
or an easy procedure for this?

Your help with this issue is GREATLY appreciated.
--
View this message in context: 
http://www.nabble.com/Cannot+decrypt+this+file+for+the+life+of+me-t1719517.html#a4670580
Sent from the GnuPG - User forum at Nabble.com.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG asks for confirmation...

2006-06-01 Thread engage
Why is someone sending an encrypted message to this list?

On Wednesday 31 May 2006 09:12 pm, Alphax wrote:
-BEGIN PGP MESSAGE-
Version: GnuPG v1.4.4-svn4147:IDEA-TIGER192-DSA2 (MingW32)

owNCWmg2MUFZJlNZeXIg9QABDH/3mvZv7d3u1u7+6/9u9+fv7zbr3P+Y
et9XR/NAAbdzYbgyhoAA0aGgAAAB6gAAANBoAaDQAPUAAAD1AAAGgGgPKBo9TE09
T0nptUKqaep6npDQGgyD0gDQGjQA9TIAaGgaADIAaaaABpiAGgANABoyaAADTQNG
mgiqeRGwk0bUDIGTQaAAGgaAAABo0DQNAANAANAGgACKehBTAU/JTT1M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=pDFk
-END PGP MESSAGE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Gnupg-users Digest, Vol 33, Issue 2

2006-06-01 Thread Zach Himsel
Hello, All! I use Thunderbird with Enigmail. For some reason, enigmail
will not sign and/or encrypt my messages (even when I manually click
encrypt). My keys work fine, and I can decrypt and verify already
encrypted and signed messages, but I can't do it myself. I have to
manually sign the message with gnupg. I've used TB and enigmail
previously, and it worked then. Does anyone have this problem or know of
a solution?

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Cannot decrypt this file for the life of me

2006-06-01 Thread Charly Avital
Who encrypted the file, for whom, using what system?
Is it a text e-mail, or a stand-alone file?
If it is an encrypted text e-mail, can you post the actual encrypted
file? If not, can you URL a location where the actual file could be viewed?

I am not familiar with your system (I am a Mac user); extension .asc
applies usually to a plain text in ASCII format, that can be opened with
a text editor.

The two files you mention might be, as you indicate, your public and
secret keys (your key pair). If you open the file 'file.asc' with a text
editor, what are the headers and the footers? Is it something like:
-BEGIN PGP PUBLIC KEY BLOCK-
-END PGP PUBLIC KEY BLOCK-

If it is so, then that's your public key block, and the other one
'file_sec.asc' is your secret key block. You should be very careful with
the later, store it in a safe place, and *never* post it or publish it
in any way whatsoever.

You don't mention where those two files are located in your system. They
are your key pair (secret+public key). Do you know (can you see) the
contents of your keyring? That's where your keys are stored. Public
keys, yours and other people, are stored in the public keyring, secret
key or keys (yours only) are stored in the secret key ring.


Charly


webdevlv wrote the following on 6/1/06 5:59 PM:
[...]

 --
 View this message in context: 
 http://www.nabble.com/Cannot+decrypt+this+file+for+the+life+of+me-t1719517.html#a4670580
 Sent from the GnuPG - User forum at Nabble.com.

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users