Re: OpenPGP Card

2005-09-02 Thread Alon Bar-Lev
Benjamin Donnachie wrote: Alon Bar-Lev [EMAIL PROTECTED] wrote: I think that gpg should support PKCS#11 interface for smartcards, so that it can be used with all smartcards that support this standard. I've had a quick look at the PKCS#11 and I think that you may have a point! I

Re: PKCS#11 support for gpg-agent

2005-09-02 Thread Olaf Gellert
Alon Bar-Lev wrote: When PGP was invented there WAS NO standard to send and receive signed and encrypted messages, so PGP have implemented a proprietary method. Then, PGP tried to propose it as a standard... OpenPGP... But they have failed... It was not widely adopted... S/MIME was the

Re: OpenPGP Card

2005-09-02 Thread Alon Bar-Lev
Joerg Schmitz-Linneweber wrote: Hi Alon! I would like to see support for PKCS#11 too but... (won't elaborate on this now ;-) I will be glad if you will... It seems that I am the only one that don't understand gpg motivation. Regarding the open-ness of OpenGPG: Why do you (and Benjamin)

Re: OpenPGP Card

2005-09-02 Thread Werner Koch
On Fri, 02 Sep 2005 18:45:53 +0300, Alon Bar-Lev said: environment...) It provides a generic API to access cryptographic tokens. Most smartcard vendors, including IBM, provide PKCS#11 library that communicates with their card. Again: Feel free to provide one. The only thing you need is

Re: PKCS#11 support for gpg-agent

2005-09-02 Thread Alon Bar-Lev
Hello, You are wrong in this regard: PGP is widely adpopted (and what is your definition of the world?). And it makes perfectly sense to have both worlds. I won't argue with that... But the trend is not in favor of PGP. OpenPGP offers a completely different trust model which suits the needs

Re: PKCS#11 support for gpg-agent

2005-09-02 Thread Werner Koch
On Fri, 02 Sep 2005 15:30:29 +0300, Alon Bar-Lev said: Most pkcs#11 stuff is not GPL compatible. But it does not say that GPLed software cannot use PKCS#11 interface in order to access none GPLed tokens! Read the GPL again and you will see that this is not possible. I am sorry to read

Re: PKCS#11 support for gpg-agent

2005-09-02 Thread Werner Koch
On Fri, 02 Sep 2005 18:21:06 +0300, Alon Bar-Lev said: Yes... But why? What was the reason to work so hard in adding S/MIME? The answer for my opinion is that IT IS A STANDARD!!! I am sorry to correct you. No mental sane hacker would voluntary implement X.509 stupidity. The reason why we

Re: OpenPGP Card

2005-09-02 Thread Alon Bar-Lev
Werner Koch wrote: On Fri, 02 Sep 2005 18:45:53 +0300, Alon Bar-Lev said: environment...) It provides a generic API to access cryptographic tokens. Most smartcard vendors, including IBM, provide PKCS#11 library that communicates with their card. Again: Feel free to provide one. The only

GnuPG Large File Issues - Windows

2005-09-02 Thread Jeffrey Tadlock
I am hoping to use GnuPG to encrypt some database flat file backups. My initial testing worked great, no issues. However I have started testing with some slightly larger files - currently 5.7GB in size. I have tried it with the default compression on and with a '-z 0'. The gpg file gets

Re: OpenPGP Card

2005-09-02 Thread Werner Koch
On Fri, 02 Sep 2005 16:13:45 +0300, Alon Bar-Lev said: Finally someone who understand... I had no such luck with Werner Koch, who argues that OpenPGP card is standard... Well it is as much a standard as pkcs#15 is one. Who decides what a standard is? RSA Corporation defines standards known

Multiple signatures on a single file

2005-09-02 Thread Berend Tober
Is it possible to have multiple persons sign a single file? If so, how is this done? The particular scenario is currently this: Employees submit expense reports for business travel using a spread sheet. Current practise is the the employee fills out spread sheet via computer (or optionally

Re: PKCS#11 support for gpg-agent

2005-09-02 Thread Alon Bar-Lev
Thank you Olaf, I see your point regarding PKI, I am familiar with it. I want to focus the discussion for the smartcard support, this was my original issue and we then moved to a different discussion... I have a lot to say in that matter... but first I will study you documents to understand

Lost Private Key

2005-09-02 Thread Dan Mundy
How do i regain a lost private key? if i can't, how can i generate a revoke certificate for it? if i can't, can i delete it from the servers? what should i do? i need help! ___ Gnupg-users mailing list Gnupg-users@gnupg.org

Re: Signing MS-Excel spread sheets

2005-09-02 Thread Dan Mundy
Berend Tober wrote: I hate to admit that I still use MS-Excel rather than an open source spread sheet tool, but workplace requirements constrain my fate... Has anyone else managed a work-around for this flaw? (Aside from the obvious -- Stop using MS-Excel! -- because that is a failure I cannot

Re: Lost Private Key

2005-09-02 Thread Dan Mundy
Dan Mundy wrote: How do i regain a lost private key? if i can't, how can i generate a revoke certificate for it? if i can't, can i delete it from the servers? what should i do? i need help! nevermind... i found an old backed-up copy of my private key... sorry for the fuss. signature.asc

Re: Lost Private Key

2005-09-02 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Dan Mundy wrote: Dan Mundy wrote: How do i regain a lost private key? if i can't, how can i generate a revoke certificate for it? if i can't, can i delete it from the servers? what should i do? i need help! nevermind... i found an old

Re: Lost Private Key

2005-09-02 Thread John Clizbe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dan Mundy wrote: Dan Mundy wrote: How do i regain a lost private key? if i can't, how can i generate a revoke certificate for it? if i can't, can i delete it from the servers? what should i do? i need help! nevermind... i found an old

Re: Multiple signatures on a single file

2005-09-02 Thread Alphax
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Berend Tober wrote: Is it possible to have multiple persons sign a single file? If so, how is this done? The particular scenario is currently this: Employees submit expense reports for business travel using a spread sheet. Current practise