Re: All CPU threads

2023-09-13 Thread Jacob Bachmeyer via Gnupg-users

Werner Koch wrote:

On Mon, 11 Sep 2023 22:29, Jacob Bachmeyer said:

  

So using threads to compute a blinded RSA operation would just about
recover the computational cost of blinding the calculation?  How would



No.  I gave this as an example where you could else see on how to speed
up things.  For example if you do not need to mitigate local
side-channel attacks.


OK, I get it now:  you were suggesting that there are easier trade-offs 
for similar performance gains.  Thanks.



-- Jacob


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: All CPU threads

2023-09-13 Thread Werner Koch via Gnupg-users
On Mon, 11 Sep 2023 22:29, Jacob Bachmeyer said:

> So using threads to compute a blinded RSA operation would just about
> recover the computational cost of blinding the calculation?  How would

No.  I gave this as an example where you could else see on how to speed
up things.  For example if you do not need to mitigate local
side-channel attacks.


Shalom-Salam,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service. - A. Einstein


openpgp-digital-signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Failed to export secret key

2023-09-13 Thread Werner Koch via Gnupg-users
Hi,

so everthing looks okay.  What I would now do is to strace pinentry;
Here is a wpinentry wrapper I have used in the past.

--8<---cut here---start->8---
#!/bin/sh

MYPINENTRY="/usr/local/bin/pinentry-qt"

locale >/tmp/pinentry.err
set >>/tmp/pinentry.err
exec strace -o /tmp/pinentry.trc -e read=0 $MYPINENTRY -v -d "$@" 
2>>/tmp/pinentry.err
#exec valgrind  $MYPINENTRY  -d "$@" 2>>/tmp/pinentry.err
--8<---cut here---end--->8---

Adjust to your needs and put

pinentry-program /home/foo/bin/pinentry-wrapper

into gpg-agent.conf.  gpgconf --kill gpg-agent and try again.


Salam-Shalom,

   Werner


-- 
The pioneers of a warless world are the youth that
refuse military service. - A. Einstein


openpgp-digital-signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


webmail and OpenPGP/MIME -> Mailvelope (Re: Signature)

2023-09-13 Thread Bernhard Reiter
Am Mittwoch 30 August 2023 16:32:26 schrieb Gilberto F da Silva via 
Gnupg-users:
>     It is getting harder and harder to use GnuPG with email as webmail
>     is used more and more.

  https://mailvelope.com
  https://github.com/mailvelope/mailvelope

enables OpenPGP in webmail
and if the webmail service is offering the necessary support,
you can do OpenPGP/MIME as well.

Mailvelope supports using GnuPG as crypto backend,
though it could be easier to set up.

Bernhard

-- 
https://intevation.de/~bernhard   +49 541 33 508 3-3
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer: Frank Koormann, Bernhard Reiter


signature.asc
Description: This is a digitally signed message part.
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Failed to export secret key

2023-09-13 Thread Bernhard Reiter
Am Freitag 08 September 2023 15:40:43 schrieb Alexander Leidinger via 
Gnupg-users:
> > You clicked on CANCEL or closed the window.
>
> No prompt at all in the console / ssh connection (and no graphics, so
> nothing to click on). So no manual cancelling from me.

There used to be pinentries issues with terminal size in the past
https://dev.gnupg.org/T5322
https://dev.gnupg.org/T4924

Maybe that helps with debugging. You could try a large terminal window.

Bernhard
-- 
https://intevation.de/~bernhard   +49 541 33 508 3-3
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer: Frank Koormann, Bernhard Reiter


signature.asc
Description: This is a digitally signed message part.
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


very large RSA key (Re: Sirs:)

2023-09-13 Thread Bernhard Reiter
Am Freitag 25 August 2023 18:37:15 schrieb xyz938 via Gnupg-users:
> Where do I change in the code to create a 32764 bit key?

Look where the --enable-large-rsa is implemented in the code,
see https://wiki.gnupg.org/LargeKeys for some discussion why using
a large RSA keypair is a bad idea.

Bernhard

-- 
https://intevation.de/~bernhard   +49 541 33 508 3-3
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer: Frank Koormann, Bernhard Reiter


signature.asc
Description: This is a digitally signed message part.
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: gpg --card-edit cuts secret keys

2023-09-13 Thread Eva Bolten via Gnupg-users
Hi Carsten,

On Sonntag, 10. September 2023 20:56:44 CEST Carsten Grohmann via Gnupg-users 
wrote:
> Is this an expected behaviour? Can I control it?

if you mean by truncated shadowed, then it is this bug:
https://dev.gnupg.org/T6386

It will fixed for the 2.2 branch in 2.2.42

The bug does not occur in the stable 2.4. branch which is the recommended 
branch to use.

Regards,

Eva






___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users