Re: USB key form-factor smart-card readers with pinpads?

2014-01-06 Thread Werner Koch
On Sun, 5 Jan 2014 16:18, sam.ku...@uclmail.net said: The question is whether this is really helpful. Yes, it protects your PIN but it does not protect the use of your decryption key. Please could you elaborate? To make use of the decryption key the smartcard first requires that a VERIFY

Re: V3 key lookup

2014-01-06 Thread Werner Koch
On Sun, 5 Jan 2014 17:48, nicholas.c...@gmail.com said: Thanks Werner for making your error messages so clear. David did this and most other parts of the keyserver code. Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz.

Re: sign encrypted emails

2014-01-06 Thread Peter Lebbing
On 06/01/14 01:51, Hauke Laging wrote: Let me guess: Modifying the mail client so that it automatically removes the word not would be illegitimate because for some strange reason that would be solving social problems by technical means... I guess it boils down to the point that I just don't

no valid subkey

2014-01-06 Thread Erik Josefsson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear all, This might not be the best place for beginners to ask for help, but the reason I subscribed is that icedove says I have no valid subkey to my two registered email addresses:

Re: no valid subkey

2014-01-06 Thread Werner Koch
On Mon, 6 Jan 2014 11:09, erik.hjalmar.josefs...@gmail.com said: reason I subscribed is that icedove says I have no valid subkey to my two registered email addresses: Your encryption subkey expired a month ago. A pointer to a beginners how to fix this would be much appreciated. $ gpg

Re: no valid subkey

2014-01-06 Thread Hauke Laging
Am Mo 06.01.2014, 11:09:55 schrieb Erik Josefsson: Further, a friend told me that his key-manager won't let him encrypt to one of them. Not surprising: pub 4096R/0xB240C11D 2010-12-10 [expires: 2014-11-11] uid Erik Josefsson erik.josefs...@europarl.europa.eu uid Erik

Re: USB key form-factor smart-card readers with pinpads?

2014-01-06 Thread NdK
Il 06/01/2014 10:34, Werner Koch ha scritto: To make use of the decryption key the smartcard first requires that a VERIFY command is send to the card. This is what asks for the PIN. After a successful verification of the PIN the card allows the use of the PSO Decrypt command until a power

Re: USB key form-factor smart-card readers with pinpads?

2014-01-06 Thread Michel Messerschmidt
On Mon, Jan 06, 2014 at 10:34:06AM +0100, Werner Koch wrote: an attacking malware only needs to trick you info decrypt an arbitrary message and is then free to use the smartcard without having the reader ask you again for a PIN. Although these are important attacks to consider, PIN entry on

Re: no valid subkey

2014-01-06 Thread Michel Messerschmidt
As an additional hint how to find your encryption key (as opposed to signature or authentication keys), you need to look for keys with usage: E. In your case it is 0971954D: $ gpg2 --edit-key 0xB240C11D pub 4096R/B240C11D created: 2010-12-10 expires: 2014-11-11 usage: SC