Re: First steps with GPG, am I off to a good start?

2013-10-11 Thread Robin Kipp
Hi Robert, many thanks for your reply! Am 11.10.2013 um 03:35 schrieb Robert J. Hansen r...@sixdemonbag.org: Leave off the 'expert' flag and just use the defaults. Seriously, the defaults are reasonable and don't need tweaking. :) I only put the --expert flag because I wanted to take

Re: First steps with GPG, am I off to a good start?

2013-10-11 Thread Robin Kipp
be nice to have a UID without email address but with a comment which explains the security of the key. Something like Robin Kipp (normal security level subkeys with offline mainkey) This is something I'm not really sure about, for the reasons that Daniel pointed out in his reply - putting

Re: First steps with GPG, am I off to a good start?

2013-10-11 Thread Robin Kipp
Hi Daniel, Am 11.10.2013 um 05:25 schrieb Daniel Kahn Gillmor d...@fifthhorseman.net: This is absolutely correct. You should not be re-using the same RSA key for two different usages if at all possible. See, for example https://www.schneier.com/paper-chosen-protocol.html Many thanks for

First steps with GPG, am I off to a good start?

2013-10-10 Thread Robin Kipp
Robin Kipp ro...@robin-kipp.net uid Robin Kipp mli...@robin-kipp.net uid Robin Kipp ro...@debspace.org sub 2048R/77DFFF08 2013-10-10 [expires: 2013-11-09] For secret keys: MacBook-Pro:~ robin$ gpg --list-secret-keys DC329876 sec# 2048R/DC329876 2013-10-10 uid

Re: [#JYM-378-41570]: Re: Why trust any software?

2013-08-05 Thread Robin Kipp
Hi Jean, no, I think you can be fairly certain that you never contacted any piracy department. If you look back through the last messages that have been going over the lest you'll find this has been going on for a while now, also for others posting to this list. Seems like their contact address

Re: Problem: cannot generate / copy keys larger than 1024bit on my OpenPGP-compatible card

2012-06-03 Thread Robin Kipp
Hi Werner, Am 03.06.2012 um 12:29 schrieb Werner Koch: What reader are you using? It is possible that your reader does not support extended length APDUs, which are required for v2 cards. Hmmm, very interesting. I'm using an OMNIKEY 6121 USB card reader, which I purchased along with my

Re: Problem: cannot generate / copy keys larger than 1024bit on my OpenPGP-compatible card

2012-06-03 Thread Robin Kipp
Hi, Am 03.06.2012 um 16:46 schrieb Branko Majic: Well, OmniKey is famous for not working with stock libccid and extended apdus. I had such problems with the OpenSC pkcs#11 and pcscd. Can you try smaller key sizes (never worked with OpenPGP, but it solved the issue for me - using 1k keys

Re: Problem: cannot generate / copy keys larger than 1024bit on my OpenPGP-compatible card

2012-06-03 Thread Robin Kipp
Hi Werner, Am 03.06.2012 um 16:45 schrieb Werner Koch: All OMNIKEY based readers don't work with Linux or other free OS when Extended Length APDUs are required. I did a few hacks to allow the internal ccid driver to _sometimes_ work. libccid (of libpcsclite) has a list of supported readers

Problem: cannot generate / copy keys larger than 1024bit on my OpenPGP-compatible card

2012-06-02 Thread Robin Kipp
Hello all, I'm trying to setup my OpenPGP-compatible SmartCard with 2048-bit subkeys, using GnuPG version 2.0.18. However, it seems that I currently can neither copy nor create keys larger than 1024bit on the SmartCard. When I try to generate a completely new set of keys on the card using gpg

Re: Problem: cannot generate / copy keys larger than 1024bit on my OpenPGP-compatible card

2012-06-02 Thread Robin Kipp
Hi Peter, Am 02.06.2012 um 18:17 schrieb Peter Lebbing: However, it seems that I currently can neither copy nor create keys larger than 1024bit on the SmartCard. Which exact OpenPGP-compatible card do you have? The v1.1 card only supports up to 1024 bit. The v2.0 card is capable of

Re: Testing GPG EMail encryption

2012-05-22 Thread Robin Kipp
Hello all, thanks a lot for that! Actually, I'm quite flattered by the amount of encrypted messages that came in over the last few minutes from all of you who wanted to help, I honestly wouldn't have expected so much feedback! I'll definitely reply to all of you who took the time and effort to