Re: PGP and Smartcards?

2005-07-22 Thread Werner Koch
On Thu, 21 Jul 2005 12:25:49 +0200, Felix E Klee said: * Can I use GnuPG for signing and decryption with a smart card and 2048 bit RSA keys? What limitations do I have to expect, if any? Cards able to to generate and use 2k RSA keys are not easily available. This will change in a year or

Re: no-ask-cert-expire during sign-key

2005-07-22 Thread David Shaw
On Wed, Jul 20, 2005 at 03:11:51PM +0200, Peter Palfrader wrote: Hi, gpg (1.4.1) always asks whether UID certifications should expire on the same day as the primary key: | [EMAIL PROTECTED]:~$ gpg --no-ask-cert-expire --sign-key 52C8180E | [..] | pub 1024D/52C8180E created: 2004-12-11

Re: PGP and Smartcards?

2005-07-22 Thread Werner Koch
On Fri, 22 Jul 2005 19:01:57 +0200, Felix E Klee said: OpenPGP cards with 2048 bit keys don't seem to be available at all. However, ordinary ISO 7816-4 compliant smart cards are available through online outlets. For example CryptoFlex and CyberFlex cards can be Good luck getting a secure and

Getting Started...

2005-07-22 Thread Michael Nguyen
So... I'm trying to get started, but I was wondering if the people here could give me some suggestions on what I need to do. The How-To's and guides seem to focus on using the GnuPG command line package, but what I'm trying to do is create a GnuPG aware application. Basically I want to write a

Re: PGP and Smartcards?

2005-07-22 Thread Zeljko Vrba
Werner Koch wrote: On Fri, 22 Jul 2005 19:01:57 +0200, Felix E Klee said: Uh, I guess this would cost me too much time. One solution, though, would be to buy a JavaCard and try to run and enhance the OpenPGP Java implementation that was started by Zeljko Vrba [3]. Java cards do have some

Re: Filename for digests

2005-07-22 Thread Oskar L.
Red Hat and others use a filename of MD5SUM, which is a clearsigned file containing the human readable MD5 hashes. I like your CHECKSUMS idea better since MD5 isn't the way to go any longer. David Naming a file containing hashes CHECKSUMS would not be a good idea, since a hash is not the

Re: PGP and Smartcards?

2005-07-22 Thread Felix E. Klee
At Fri, 22 Jul 2005 22:42:20 +0200, Zeljko Vrba wrote: Felix, if you wish to finish the applet yourself, I can help you a bit with the existing code, if you need help. Right at the moment, I also have time problems ;-). But I may be interested to do that in the near future. -- Felix E. Klee

Re: Filename for digests

2005-07-22 Thread David Shaw
On Sat, Jul 23, 2005 at 03:33:53AM +, Oskar L. wrote: Red Hat and others use a filename of MD5SUM, which is a clearsigned file containing the human readable MD5 hashes. I like your CHECKSUMS idea better since MD5 isn't the way to go any longer. Naming a file containing hashes

Re: Changing the email address on an existing key...how? Should I?

2005-07-22 Thread David Shaw
On Fri, Jul 22, 2005 at 05:52:07PM -0700, [EMAIL PROTECTED] wrote: Is it possible (or advisable) to change the email address on an existing pgp key? I'm using GnuPG 1.4.1 on Linux. The man pages do not show how to change or edit the mail address of an existing key. I've had the key(s) a