Re: Error importing fetching key from wkd

2022-05-29 Thread Todd Zullinger via Gnupg-users
Hi,

Dirk Gottschalk via Gnupg-users wrote:
> A workaround for this is to download the SRPM, remove the
> line '--disable-brainpool' and rebuild the package.

Ahh, excellent.  That's a relatively recent change.  It's
available in the Fedora (and RHEL) libgcrypt-1.10 packages
which I believe are only in the freshly released Fedora 36
and RHEL 9.

Previous releases contained a 'hobbled' libgcrypt tarball
where the brainpool curves were removed entirely.  (That's
the usual practice for items which cannot be included for
legal reasons.)

It's good to see things are moving in the right direction,
at least.

-- 
Todd


signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Backing up your PGP key by hand

2022-05-29 Thread vedaal via Gnupg-users
On 5/26/2022 at 12:52 AM, "Robert J. Hansen via Gnupg-users"  wrote:
So, yeah.  I'm going to be solidly on the side of "no, really, paper
is
a magic technology, just be sure to talk with an archivist first to
ensure you're using the right kind of paper."

=

The other thing to consider is the Ink. 
In Ancient and Medieval times,  the ink was not standardized, and
varied in the quantity of the ingredients.  All were permanent but
some were too acidic and burned through the paper. Many monastery
manuscripts centuries old are still in very good condition.

Today there are "Bulletproof" permanent inks
(not resistant to real bullets, but resistant to water, alcohol,
bleach, soap, and known solvents.) 
https://www.jetpens.com/blog/Noodler-s-Fountain-Pen-Inks-A-Comprehensive-Guide/pt/902#bulletproof

The Noodler Eternal inks are available in a larger variety of
permanent colors, and are all fountain pen safe. 

https://noodlersink.com/product/19208-eternal-polar-blue/

Vedaal___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Error importing fetching key from wkd

2022-05-29 Thread Dirk Gottschalk via Gnupg-users
Hello Todd.

Am Samstag, dem 28.05.2022 um 16:14 -0400 schrieb Todd Zullinger via
Gnupg-users:
> Hi,
> 
> Werner Koch via Gnupg-users wrote:
> > On Wed, 25 May 2022 22:58, Dirk Gottschalk said:

[...]
> 

> > Note the Brainpool curves.  Seems that Redhat still patches them
> > out of
> > libgcrypt.
> 
> The question of whether these curves can be kept in Fedora
> was brought up on the fedora-legal list some time ago.  The
> most recent status update¹ from Fedora Project Leader
> Matthew Miller on January 28, 2022 says:
> 
>     So, these things move slowly, but this _is_ being
>     worked on. I'll let you know when I can.
> 
> That sounds midly hopeful.  With luck, the curves will be
> cleared for inclusion (at least eventually, even it not
> terribly soon).

A workaround for this is to download the SRPM, remove the line '--
disable-brainpool' and rebuild the package. 

Regards,
Dirk

-- 
Dirk Gottschalk

GPG key Fingerprint: 7C5B 9D53 EED5 C7B3 A291 D5AA 086B 3660 27E3 5D06
Keyoxide: https://keyoxide.org/7C5B9D53EED5C7B3A291D5AA086B366027E35D06


GitHub: https://github.com/Dirk1980ac



signature.asc
Description: This is a digitally signed message part
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Error importing fetching key from wkd

2022-05-29 Thread Dirk Gottschalk via Gnupg-users
Hello Werner.

Am Samstag, dem 28.05.2022 um 20:29 +0200 schrieb Werner Koch:
> On Wed, 25 May 2022 22:58, Dirk Gottschalk said:
> 
> > $ gpg --with-colons --list-config curve
> > cfg:curve:cv25519;ed25519;cv448;ed448;nistp256;nistp384;nistp521;se
> > cp25
> > 6k1
> 
> This should read
> 
> cfg:curve:cv25519;ed25519;cv448;ed448;nistp256;nistp384;nistp521;brai
> npoolP256r1;brainpoolP384r1;brainpoolP512r1;secp256k1
> 
> Note the Brainpool curves.  Seems that Redhat still patches them out
> of
> libgcrypt.

Yes, they really do '--disable-brainpool' in the .spec file. Thank you
very much for this hint.

I did a custom Rebuild of the package after modifying the .spec and now
everything woks as expected.


Kind regards,
Dirk

-- 
Dirk Gottschalk

GPG key Fingerprint: 7C5B 9D53 EED5 C7B3 A291 D5AA 086B 3660 27E3 5D06
Keyoxide: https://keyoxide.org/7C5B9D53EED5C7B3A291D5AA086B366027E35D06


GitHub: https://github.com/Dirk1980ac



signature.asc
Description: This is a digitally signed message part
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Error importing fetching key from wkd

2022-05-29 Thread Johan Wevers via Gnupg-users
On 2022-05-28 20:29, Werner Koch via Gnupg-users wrote:

> Note the Brainpool curves.  Seems that Redhat still patches them out of
> libgcrypt.

Why do they do that? BTW, when I search for brainpool I only find
definitions and RFC's, I seem unable to find why they are needed (or why
they would be peferred) over other curves.

-- 
ir. J.C.A. Wevers
PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Backing up your PGP key by hand

2022-05-29 Thread Johan Wevers via Gnupg-users
On 2022-05-25 22:22, Francesco Ariis wrote:

> Paper was first made in the Chinese Empire, around two millennia ago 
I see that that was indeed considered what we call paper today, unlike
the ancient Egyptian papyrus.

> Sheets made with high quality pulp survived to this day.

Some sheets survive. I'm sure some CDR's and some USB sticks will also
survive for many centuries, but most probably won't.

-- 
ir. J.C.A. Wevers
PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users