CAMELLIA...

2009-09-05 Thread Laurent Jumet
-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160

Hello !

Is CAMELLIA actually part of OpenPGP?
Are S11, S12  S13 assigned definitively?

Is BZIP2 definitively excluded, or is it an option when compiling? In the 
latter case, why don't compiling with it?

- -- 
Laurent Jumet
  KeyID: 0xCFAF704C
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)

iHEEAREDADEFAkqiB5cqGGh0dHA6Ly93d3cucG9pbnRkZWNoYXQubmV0LzB4Q0ZB
RjcwNEMuYXNjAAoJEPUdbaDPr3BMxNwAoPzyKqX23adRgQ77To0YXF1IGQysAKCU
ZAdi2Wdr2p5FYZmvuL75EizrbQ==
=DX/3
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Gnupg 2.0.13 under Linux

2009-09-05 Thread Charly Avital
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Compiled GnuPG 2.0.13 from source, in Linux/Ubuntu 9.04 64bits, running
under VMware on an Apple MacBook Intel Core 2 Duo running MacOS 10.5.8
(Leopard)

$ gpg2 --version
gpg (GnuPG) 2.0.13
libgcrypt 1.4.4
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Home: ~/.gnupg
Supported algorithms:
Pubkey: RSA, ELG, DSA
Cipher: 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH, CAMELLIA128,
CAMELLIA192, CAMELLIA256
Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
Compression: Uncompressed, ZIP, ZLIB


Thank you.

Charly



-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.13 (GNU/Linux)
Comment: GnuPG for Privacy
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBCAAGBQJKohTJAAoJEM3GMi2FW4PvOfkH+wd3AxxkACUiPVpeMUHnWLgC
eTKNcT9YTDdd0X0Y9TcqiAH/CUiJ6qBRgKHL+aiuM1xaItA6t1nBNoJx9/vKZ2Da
C3lyoA6QTOvfAiYFbp39xXWaMecfqel9tq9iWjNLEK31v5NbU+SyN5eKcHfjPTYr
koI1tYJW7nsRln/LNdbJn016zqp9GX24zVdCEFUJdSQ2hCucY8Pqd11jMbxMO9vS
pOLhRLwycjbmhlBxHqjN7Io3N8CX7GANk0SNW0Uj4BH7xb02Wkuo6XMKjFh/ot7P
I8Jd590M801xUePhmcbF9wY87p8aH5SDZbOzZcG0UqDUF91ZNDuutbt0djFSH3c=
=O3mk
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: [Announce] GnuPG 2.0.13 released

2009-09-05 Thread Werner Koch
On Fri,  4 Sep 2009 20:11, h...@online.no said:

 Both 32 and 64 bit pth is installed, and pointing configure to the libs 
 using --with-pth-prefix=PFX doesn't help either.

The devolpment package is missing; i.e. the file pth.h .


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Auschnahme regelt ein Bundeschgesetz.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


CAMELLIA

2009-09-05 Thread Laurent Jumet
-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160

Hello !

I found information about CAMELLIA.
According to this info, I suppose I can assume that CAMELLIA is part of 
OpenPGP *and* S11, S12  S13 are from now on, owned by CAMELLIA.

=== Begin Windows Clipboard ===
Network Working GroupD. Shaw
Request for Comments: 5581 June 2009
Updates: 4880
Category: Informational


 The Camellia Cipher in OpenPGP

Status of This Memo

   This memo provides information for the Internet community.  It does
   not specify an Internet standard of any kind.  Distribution of this
   memo is unlimited.

Copyright Notice

   Copyright (c) 2009 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents in effect on the date of
   publication of this document (http://trustee.ietf.org/license-info).
   Please review these documents carefully, as they describe your rights
   and restrictions with respect to this document.

Abstract

   This document presents the necessary information to use the Camellia
   symmetric block cipher in the OpenPGP protocol.

Table of Contents

   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . . . 2
   2.  Requirements Notation . . . . . . . . . . . . . . . . . . . . . 2
   3.  Camellia  . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
   4.  Security Considerations . . . . . . . . . . . . . . . . . . . . 2
   5.  IANA Considerations . . . . . . . . . . . . . . . . . . . . . . 3
   6.  Normative References  . . . . . . . . . . . . . . . . . . . . . 3













Shaw Informational  [Page 1]

RFC 5581 The Camellia Cipher in OpenPGPJune 2009


1.  Introduction

   The OpenPGP protocol [RFC4880] can support many different symmetric
   ciphers.  This document presents the necessary information to use the
   Camellia [RFC3713] symmetric cipher in the OpenPGP protocol.

2.  Requirements Notation

   The key words MUST, MUST NOT, REQUIRED, SHALL, SHALL NOT,
   SHOULD, SHOULD NOT, RECOMMENDED, MAY, and OPTIONAL in this
   document are to be interpreted as described in [RFC2119].

3.  Camellia

   Camellia is specified in [RFC3713].  It is a 128-bit symmetric block
   cipher (as are AES and Twofish in OpenPGP) that supports 128-bit,
   192-bit, and 256-bit keys.  This document defines the use of Camellia
   in OpenPGP.

 +-++
 | Camellia Key Length | OpenPGP Symmetric-Key Algorithm Number |
 +-++
 | 128 |   11   |
 | 192 |   12   |
 | 256 |   13   |
 +-++

   OpenPGP applications MAY implement Camellia.  If implemented,
   Camellia may be used in any place in OpenPGP where a symmetric cipher
   is usable, and it is subject to the same usage requirements (such as
   its presence in the Preferred Symmetric Algorithms signature
   subpacket) as the other symmetric ciphers in OpenPGP.

   While the OpenPGP algorithm preferences system prevents
   interoperability problems with public key encrypted messages, if
   Camellia (or any other optional cipher) is used for encrypting
   private keys, there could be interoperability problems when migrating
   a private key from one system to another.  A similar issue can arise
   when using an optional cipher for symmetrically encrypted messages,
   as this OpenPGP message type does not use the algorithm preferences
   system.  Those using optional ciphers in this manner should take care
   they are using a cipher that their intended recipient can decrypt.

4.  Security Considerations

   At publication time, there are no known weak keys for Camellia, and
   the Camellia algorithm is believed to be strong.  However, as with
   any technology involving cryptography, implementers should check the



Shaw Informational  [Page 2]

RFC 5581 The Camellia Cipher in OpenPGPJune 2009


   current literature, as well as the Camellia home page at
   http://info.isl.ntt.co.jp/camellia/ to determine if Camellia has been
   found to be vulnerable to attack.

5.  IANA Considerations

   IANA assigned three algorithm numbers from the registry of OpenPGP
   Symmetric-Key Algorithms that was created by [RFC4880].

6.  Normative References

   [RFC2119]  Bradner, S., Key words for use in RFCs to Indicate
  Requirement Levels, BCP 14, RFC 2119, March 1997.

   [RFC3713]  Matsui, M., Nakajima, J., and S. Moriai, A Description of
 

Re: BZIP2

2009-09-05 Thread Werner Koch
On Fri,  4 Sep 2009 21:21, bark...@gmail.com said:
 What is the reason for the Windows build of 1.4.10 (both the pulled and
 fixed binaries) not supporting BZIP2?

I was not aware that bzip was in gnupg-w32cli-1.4.9 .  It is all a
matter of the build environment; i.e. if the the bzib2 library was
installed for Windows.  I am on vacation for the next two weeks so there
is no chance that you get a new official package until then.

Anyway, I strongly suggest to use gpg4win:  If you just need gpg, you
may download

  ftp://ftp.gpg4win.org/gpg4win/gpg4win-light-2.0.0.exe
  ftp://ftp.gpg4win.org/gpg4win/gpg4win-light-2.0.0.exe.sig

and select only the GnuPG component.  This installs GnuPG 2.0.12 with
enough patches to enable the new OpenPGP cards.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Auschnahme regelt ein Bundeschgesetz.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: BZIP2

2009-09-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Werner Koch wrote:

   ftp://ftp.gpg4win.org/gpg4win/gpg4win-light-2.0.0.exe
   ftp://ftp.gpg4win.org/gpg4win/gpg4win-light-2.0.0.exe.sig
 
 and select only the GnuPG component.

If anyone tries this suggestion I would be interested to learn if it is
compatible with GPGshell.

TIA

JOHN ;)
Timestamp: Saturday 05 Sep 2009, 06:20  --400 (Eastern Daylight Time)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10-svn5068: (MingW32)
Comment: Public Key at:  http://tinyurl.com/8cpho
Comment: Gossamer Spider Web of Trust: http://www.gswot.org
Comment: Personal Web Page:  http://tinyurl.com/yzhbhx

iQEcBAEBCgAGBQJKojt8AAoJEBCGy9eAtCsPn9IH/1adLG5ewWiu9csl+u6fPECZ
JGXQw0tJ27Pkz8cNXRCxbOGpd0apyH6E7aTFsTmuodT6MkaFIylToqLXXYhs4MgL
nNldo642TfgxfnJy/hryuUdeevXkSr2rb67u0nP7wggVCsGRZBStV0Oko/hyD0GP
O6aHCqtsjuww+iLB1SvBr19DJPjkej0gJIHyCSjaOCMuaiem6gSJgzUvO6s3MHGD
6TChaODWWUtsnKlN4sdRG3ZhYCl2LUUesdq52dc9vyImCukrEi+g3lCoLay2yMS0
GQQIBRsCb6IxvnRonJE8yF7WE1MUBta9m6JkdDeymEP7piLazZ1axMoJzzsJT5A=
=aCcZ
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: BZIP2

2009-09-05 Thread Henk M. de Bruijn
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Sat, 05 Sep 2009, at 06:20:48 [GMT -0400] (which was 12:20 where I
live) John W. Moore wrote:

 Werner Koch wrote:

   ftp://ftp.gpg4win.org/gpg4win/gpg4win-light-2.0.0.exe
   ftp://ftp.gpg4win.org/gpg4win/gpg4win-light-2.0.0.exe.sig

 and select only the GnuPG component.

 If anyone tries this suggestion I would be interested to learn if it is
 compatible with GPGshell.

Hi John,

It is in the way that I use GPGshell as my keymanager :-)
However with Vista I did not manage to get GPGtray to work.
Not with 1.4.9/10 and not with 2.0.12.

- --
Met vriendelijke groet,
Henk M. de Bruijn
_
The Bat! Natural Email System 4.2.10.9 on Microsoft® Windows Vista™
Home Premium Versie 6.0.6001 Service Pack 1 Build 6001
Intel(R) Core(TM)2 Quad CPU Q8200 @ 2.33GHz, 2330 MHz 64bits
AntispamSniper for The Bat! Pro 3.2.1.1
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.12 (MingW32)

iQEcBAEBCAAGBQJKokUYAAoJEBHuy+60ZN0P+8cH/Rf0/4lI6Gt5n5tiWZB62V03
AfrPZpu2SCy2ABc+LaqHsFGItd1jz7weLzadqdGXju8sfMJQkTAgi9+nD1Ke42pY
S1ld7aOb/a1P/wqa9XmjoXcBpU3epb1a3YFR7lQrVhJJ5YBlb33FVOedfxl7uS4C
9MndqpGQJ6qyDInd464aw6w43EEfNAwIIEcMlQiBazQNOxdiO9ZhO9ZWYfQBqw+3
gEiRhuMvKmk6TVNYHqQltFe9vWoJaQAbJWH3frK6NLgnumEaDwzaEr34iBPLQw2N
Q/f4QbBXP+l8efBlupmE7utoGETEYMmiS7y75bLSic4XlPyKsBnowTwDchoR5i0=
=wFth
-END PGP SIGNATURE-


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: CAMELLIA

2009-09-05 Thread David Shaw

On Sep 5, 2009, at 5:25 AM, Laurent Jumet wrote:


   I found information about CAMELLIA.
   According to this info, I suppose I can assume that CAMELLIA is  
part of

OpenPGP *and* S11, S12  S13 are from now on, owned by CAMELLIA.


Yes, and GnuPG 1.4.10 and 2.0.12 (if libgcrypt is recent enough)  
supports it.


David


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: BZIP2

2009-09-05 Thread Faramir
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

John W. Moore III escribió:
 Werner Koch wrote:
 
   ftp://ftp.gpg4win.org/gpg4win/gpg4win-light-2.0.0.exe
   ftp://ftp.gpg4win.org/gpg4win/gpg4win-light-2.0.0.exe.sig
 
 and select only the GnuPG component.
 
 If anyone tries this suggestion I would be interested to learn if it is
 compatible with GPGshell.

  I tried a previous version of GPG4Win, installing just gpg1, and it
worked fine with GPGShell, but it had a problem with copy2usb tool,
*_if_* I remember correctly... I should test it again.

  Best Regards
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBCAAGBQJKomwoAAoJEMV4f6PvczxAm3QH/3WbYwIsgnIGNAtJP6vOpaFE
L9TEAC+NXcR6Z/ZuKVm1IXvjA4eQTEvyNJr4w8AayTrKTDyuikXNbc21qAjW3t3G
vJFyQ7zj7/4IgmLcQEwUwk+mfDrpSP6dvsotkt43a9+E73FXW+ld0d1J41p7RmAM
BB14eXlDExDYIo5QOr8ocPsBpD69ZEzVYte/YwVYL9lHXt5K/ZatOHGtML2uqJtG
xlh80Pvuks5lOKXlG2E7qSmVLYszrb41E5wm1VzQw+FCA2nDnnGY1gUnyPK05WWN
ZWU5xbC443YdqkCVWJ11xLTW1NHkHcUigBOjk0xvFMtD1vYFmviulTZP5SwFQ4A=
=nfCk
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: encrypting compression algorithms

2009-09-05 Thread David Shaw

On Sep 4, 2009, at 12:53 PM, M.B.Jr. wrote:


when symmetrically encrypting a file, e.g.:

$ gpg --output file.ods.gpg --symmetric file.ods

the command above generates a gpg extension encrypted AND compressed
file, is that correct?


Unless you've disabled compression in your gpg.conf file, yes, it is  
both encrypted and compressed.



How do I know which compression algorithm was used?


Unless you've overridden the default, it is ZIP.


How can I force any other available algorithm?


personal-compress-preferences (algo)

And (algo) can be uncompressed, zip, zlib, or bzip2.  Note  
that bzip2 is only available if your GPG was built with the bzip2  
library.


David


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: BZIP2

2009-09-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Sean Rima wrote:

 Just removed 1.4.10, installed just the gpg section and restarted
 GPGshell under Vista and it works fine

Since Werner and the literature state that it is Ok to install both
side-by-side is it really necessary to uninstall the 1.4.x version?  =-O

JOHN ;)
Timestamp: Saturday 05 Sep 2009, 12:50  --400 (Eastern Daylight Time)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10-svn5068: (MingW32)
Comment: Public Key at:  http://tinyurl.com/8cpho
Comment: Gossamer Spider Web of Trust: http://www.gswot.org
Comment: Personal Web Page:  http://tinyurl.com/yzhbhx

iQEcBAEBCgAGBQJKopb1AAoJEBCGy9eAtCsPNdQH/j/R/D8XyFtYBeXRCs5CB3Xb
VWE9FCrpJyiJj3wnPdlxA4ADCexXvA+CTycV9jntexGwYdX8vNQZb5QYLut4Rvjn
WRz4T6NP2h4aJQS/iOy7PuNXqJ8+z0bg952Xt2JmPAiQzRHo3b5NFWbHV6XtnQM2
QXW9P00TIxPZMsfKy8cqkyrtPb7rPy4BLeqMZyOq/WoVcbNeEJhsUwq8FQN67T9n
GuWSddGN7SBOuvaroYJx618/jTefLzSSh5jvXoTQoqOh1VUXEq3A5r40UQqI1QXX
W19+icIDFuUXNZVHpx/BqKKCtolqY2RS5J8vJUcwAIKnamfS+aQn3TLJvPB445I=
=kMAj
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Yet another 1.4.10 build for Windows

2009-09-05 Thread Laurent Jumet

Hello Werner !

Werner Koch w...@gnupg.org wrote:

 I had some spare time while waiting for the server of the German tax
 administration to return our monthly declaration.  The result is another
 build for Windows.  Yes, again with BZIP2 support.

  ftp://ftp.gnupg.org/gcrypt/binary/gnupg-w32cli-1.4.10b.exe
  ftp://ftp.gnupg.org/gcrypt/binary/gnupg-w32cli-1.4.10b.exe.sig

Thanks !
Seems to work.

-- 
Laurent Jumet
  KeyID: 0xCFAF704C

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Yet another 1.4.10 build for Windows

2009-09-05 Thread Werner Koch
Hi,

I had some spare time while waiting for the server of the German tax
administration to return our monthly declaration.  The result is another
build for Windows.  Yes, again with BZIP2 support.

 ftp://ftp.gnupg.org/gcrypt/binary/gnupg-w32cli-1.4.10b.exe
 ftp://ftp.gnupg.org/gcrypt/binary/gnupg-w32cli-1.4.10b.exe.sig

b86624303f2e29ade92dcfae672fe75ba9df3931  gnupg-w32cli-1.4.10b.exe


Hope this helps.

  
Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Auschnahme regelt ein Bundeschgesetz.


pgpRSy4M69uv2.pgp
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Yet another 1.4.10 build for Windows

2009-09-05 Thread Faramir
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Werner Koch escribió:
 Hi,
 
 I had some spare time while waiting for the server of the German tax
 administration to return our monthly declaration.  The result is another
 build for Windows.  Yes, again with BZIP2 support.

  Thanks, that is greatly appreciated ;)

  Best Regards, and I hope you enjoy your vacations
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBCAAGBQJKotKtAAoJEMV4f6PvczxAs08H/1H6MwCHRTD5LKlKUemmH+dm
Ryg/3JYs6aazBlY0E0Uo29ZA259WrNnHx+Fhd89kStv4TVtA5inW9qhY0Mu9uahY
TBFvnPjqOEqWfVesnSTsItApe6M/Jv3MR3xJ3p5SFmBnOKkf5R26DrAFuGnCLyUV
U+Y0VZ5EVF8TognVNc1ONRJRZQzYLKfLmcTp7ylSMU7KkohJBv4ngKfF/vUdUTJh
/kVt6QvHGDdjRHJ5+1ePxUBt8M6FXd8r8v6btadvgYzuNVDY8d8UBtodljpZpeYb
bGiaqtx6YjUjK4Oc53rF5HdNWbLhjcYIj5KmmXPbu4EzqLnLoPH4MHz6Do2BocA=
=3ind
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: encrypting compression algorithms

2009-09-05 Thread M.B.Jr.
Hi David, thank you.


On Sat, Sep 5, 2009 at 1:11 PM, David Shawds...@jabberwocky.com wrote:
 On Sep 4, 2009, at 12:53 PM, M.B.Jr. wrote:

 How do I know which compression algorithm was used?

 Unless you've overridden the default, it is ZIP.



Ok but in this point, my doubt is about some command to check whether
a gpg extension file is compressed and in case it is, which
algorithm was used. Like (just an example):

$ gpg --check-compression file.gpg

Is there something like that?



Regards,





Marcio Barbado, Jr.

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: encrypting compression algorithms

2009-09-05 Thread David Shaw

On Sep 5, 2009, at 8:59 PM, M.B.Jr. wrote:


Hi David, thank you.


On Sat, Sep 5, 2009 at 1:11 PM, David Shawds...@jabberwocky.com  
wrote:

On Sep 4, 2009, at 12:53 PM, M.B.Jr. wrote:


How do I know which compression algorithm was used?


Unless you've overridden the default, it is ZIP.




Ok but in this point, my doubt is about some command to check whether
a gpg extension file is compressed and in case it is, which
algorithm was used. Like (just an example):

$ gpg --check-compression file.gpg

Is there something like that?


Not really, but you could look at the debug output.  Try decrypting  
the file with -vv added to the command line.  If it is compressed,  
you'll see a line like :compressed packet: algo=1.  Algo 1 is ZIP,  
algo 2 is ZLIB, algo 3 is BZIP2.


David


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users