Re: Which release should we be using?

2011-08-23 Thread Werner Koch
On Tue, 23 Aug 2011 03:47, papill...@gmail.com said: stored in a Keepass database that resides in a TrueCrypt container. It's protected well. My actual key is protected by a 62 character passphrase ... as long as the box is pwoered down. Hard disk encryption does not help if the box is up and

Re: gpgsm certificate validity

2011-08-23 Thread Werner Koch
On Mon, 22 Aug 2011 18:05, y...@yyy.id.lv said: So, order of certificate hashes, relative of certificate order in keyring, is critically important? No. You need to make sure to not use lines of more than ~255 characters. Check that your editor didn't reflow a comment block or similar.

Re: supersede key on key-server

2011-08-23 Thread Werner Koch
On Mon, 22 Aug 2011 18:44, mike_ac...@charter.net said: result of a search... it would need to first search for the key by whatever search text was provided, and then search for hits on the fingerprint... if there is a revoke cert then you want to return that. Keyservers store one copy of a

Re: Which release should we be using?

2011-08-23 Thread Anthony Papillion
On 08/23/2011 02:04 AM, Werner Koch wrote: On Tue, 23 Aug 2011 03:47, papill...@gmail.com said: Spying on X windows is pretty easy and thus Pinentry tries to make it harder. Werner, Since I've never used Pinentry, I'm obviously missing something here. While I'm aware that spying on X-Window

Re: gpgsm certificate validity

2011-08-23 Thread yyy
On 2011.08.23. 10:07, Werner Koch wrote: On Mon, 22 Aug 2011 18:05, y...@yyy.id.lv said: So, order of certificate hashes, relative of certificate order in keyring, is critically important? No. You need to make sure to not use lines of more than ~255 characters. Check that your editor

Re: gpgsm certificate validity

2011-08-23 Thread Werner Koch
On Tue, 23 Aug 2011 09:39, y...@yyy.id.lv said: For some certificates gpgsm asks during import, whether to trust them (and if confirmed, add entry to trustlist.txt automatically). Is it possible to make gpgsm to ask whether to trust it, for any certificate? It does that for all proper

Re: gpgme problem with claws mail

2011-08-23 Thread Werner Koch
On Mon, 22 Aug 2011 09:06, do...@dougbarton.us said: Any suggestions on how I can debug why gpgme is not recognizing that there is a signature in the message? That is not enough information to help you. To look at what gpgme is doing you may set an envvar before starting claws like here:

Re: gpgme problem with claws mail

2011-08-23 Thread Doug Barton
On Tue, 23 Aug 2011 10:02:30 +0200 Werner Koch w...@gnupg.org wrote: On Mon, 22 Aug 2011 09:06, do...@dougbarton.us said: Any suggestions on how I can debug why gpgme is not recognizing that there is a signature in the message? That is not enough information to help you. To look at

Re: gpgme problem with claws mail

2011-08-23 Thread Werner Koch
On Tue, 23 Aug 2011 11:09, do...@dougbarton.us said: Awesome, thanks! The problem turned out to be the fingerprint option in Right, fingerprint is a command and may thus not be combined with other commands. Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein

Re: gpgme problem with claws mail

2011-08-23 Thread Doug Barton
On 08/23/2011 02:44, Werner Koch wrote: On Tue, 23 Aug 2011 11:09, do...@dougbarton.us said: Awesome, thanks! The problem turned out to be the fingerprint option in Right, fingerprint is a command and may thus not be combined with other commands. Well sure, it makes sense when you say it

Re: Trying to convert from PGP on XP to a GUI on Win 7

2011-08-23 Thread MarshallAbrams
I have 64-bit Windows 7. But there may be a hope. Microsoft has an emulator/virtual machine called Windows XP Mode THAT runs many older Windows XP programs and that are not natively compatible with Windows 7. Do you know if Gpg4win will install GpgEX running in Windows XP Mode? Werner Koch

Re: Re: Which release should we be using?

2011-08-23 Thread Sven Radde
Hi! Am 20:59, schrieb Anthony Papillion: My passphrases are stored in a Keepass database that resides in a TrueCrypt container. It's protected well. My actual key is protected by a 62 character passphrase One could argue that this is equivalent to having a passphrase-less keyring within the

Smartcard PIN may be shorter than passphrase?

2011-08-23 Thread David Tomaschik
Would it be reasonable to say that you may use a significantly smaller PIN for your smartcard than would be required of a passphrase, since the smartcard locks itself after 3 tries? Since I don't use a reader with a pinpad, I must type my PIN in, and thus have about 8 alpha-numeric characters for

Re: Smartcard PIN may be shorter than passphrase?

2011-08-23 Thread Werner Koch
On Tue, 23 Aug 2011 15:12, da...@systemoverlord.com said: Would it be reasonable to say that you may use a significantly smaller PIN for your smartcard than would be required of a passphrase, since the smartcard locks itself after 3 tries? Yes. It is up to 6 tries because an attacker may also

Conflicting commands error?

2011-08-23 Thread MichaelQuigley
Hello, I use this syntax to sign files in a script--it works without problems, but when trying to manually sign a file, I'm receiving the following result: gpg --batch --armor -keyring /Publib/.../ARP_pubring.gpg --secret-keyring /Prodlib/.../ARP_secring.gpg --local-user 55EC3D41\! --output

Re: Conflicting commands error?

2011-08-23 Thread MichaelQuigley
Michael Quigley/TheWay wrote on 08/23/2011 09:51:59 AM: Hello, I use this syntax to sign files in a script--it works without problems, but when trying to manually sign a file, I'm receiving the following result: gpg --batch --armor -keyring /Publib/.../ARP_pubring.gpg --secret-

Re: Conflicting commands error?

2011-08-23 Thread Remco Rijnders
On Tue, Aug 23, 2011 at 11:15:27AM -0400, michaelquig...@theway.org wrote: gpg: conflicting commands $ I'm sure I'm overlooking something simple, but I'm just not seeing it today. Okay -- I found the dash in clear-sign--which should read clearsign. Of course I find it shortly after

Re: Conflicting commands error?

2011-08-23 Thread Michael Fladerer
On Tue Aug 23, 2011 at 09:51:59 -0400, michaelquig...@theway.org wrote: Hello, I use this syntax to sign files in a script--it works without problems, but when trying to manually sign a file, I'm receiving the following result: gpg --batch --armor -keyring /Publib/.../ARP_pubring.gpg

Re: Conflicting commands error?

2011-08-23 Thread Werner Koch
On Tue, 23 Aug 2011 15:51, michaelquig...@theway.org said: gpg --batch --armor -keyring /Publib/.../ARP_pubring.gpg This is the same as -k -e -y -r -i -n -g - thus you are asking for a key lising and encryption ... - Use two dashes. Back to the fingerprint

Re: Smartcard PIN may be shorter than passphrase?

2011-08-23 Thread David Tomaschik
On Tue, Aug 23, 2011 at 9:56 AM, Werner Koch w...@gnupg.org wrote: On Tue, 23 Aug 2011 15:12, da...@systemoverlord.com said: Would it be reasonable to say that you may use a significantly smaller PIN for your smartcard than would be required of a passphrase, since the smartcard locks itself

Re: Smartcard PIN may be shorter than passphrase?

2011-08-23 Thread Grant Olson
On 8/23/11 12:43 PM, David Tomaschik wrote: So even a 4-digit PIN would ensure a less than 1% chance of guessing the PIN. (Assuming that the user does not select obvious pins like birthdates, anniversaries, etc.) At 8 digits, the probability becomes something like 6*10^-8, if I do the

Re: OpenPGP parts and plain text in the same email

2011-08-23 Thread Ingo Klöcker
On Thursday 18 August 2011, Alex (via GPGTools) wrote: Hi there, On 18.08.2011, at 20:39, Ingo Klöcker wrote: why should it support something strange like a multipart/alternative message with a text/plain part and a PGP/MIME part. isn't this what the message This is an OpenPGP/MIME

Re: Extract numbers from a key // wrong pgpdump link :-(

2011-08-23 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 03-08-2011 9:40, ved...@nym.hush.com escribió: Sorry, wrong link extension, here is the correct one: http://www.pgpdump.net/ By the way, what would be required to run pgpdump locally? I guess there is no compiled version for windows...

Re: Extract numbers from a key // wrong pgpdump link :-(

2011-08-23 Thread David Tomaschik
On 08/23/2011 06:52 PM, Faramir wrote: El 03-08-2011 9:40, ved...@nym.hush.com escribió: Sorry, wrong link extension, here is the correct one: http://www.pgpdump.net/ By the way, what would be required to run pgpdump locally? I guess there is no compiled version for windows... Best

Re: Extract numbers from a key // wrong pgpdump link :-(

2011-08-23 Thread Robert J. Hansen
On 8/23/11 9:14 PM, David Tomaschik wrote: I don't see a windows binary, but it looks to be written in pure C with no external dependencies, so I would assume you could easily build it under Cygwin. Cygwin isn't necessary: it compiles just fine under plain MinGW. I've got a native Win32