Re: How do I flush a bad symmetric password from gpg-agent?

2009-08-19 Thread Werner Koch
On Tue, 18 Aug 2009 20:28, do...@dougbarton.us said: Today I mis-typed a passphrase for a symmetrically encrypted file and was surprised to discover that gpg-agent had stored the bad passphrase and would not let me access the file. I have occasionally in the past This is a new and probably

gpg-agent wants to go online

2009-08-19 Thread Aaron
Hi, everybody! I've recently switched over (by way of gpg4win) to GPG 2.0.12 and there's one thing I'm wondering: When I start gpg, my firewall asks me if I want to allow gpg-agent to connect to the network. Being one of those strange people who prefer it when his programs aren't online

Practical Advice for those using AES256 cipher?

2009-08-19 Thread Kevin Hilton
Although I usually get a wide range of responses, is there any practical advice an end-user should take away from the recent AES256 attacks as described here:http://www.schneier.com/blog/archives/2009/07/another_new_aes.html? Should I continue to use AES256 (double AES) or default to single AES

Re: Practical Advice for those using AES256 cipher?

2009-08-19 Thread Werner Koch
On Wed, 19 Aug 2009 15:28, kevhil...@gmail.com said: the article interesting (not sure if I understood a lot of the blog comments), is there any practical advice I should take away from it as it relates to GnuPG? Don't care about it. It is no threat to use AES 256 or AES 128. The remarkable

Re: Practical Advice for those using AES256 cipher?

2009-08-19 Thread Joseph Oreste Bruni
The successful attacks were on reduced-round versions of the algorithm, not on the current implementations. The article was mostly informative for crypto geeks as a state-of-the-art. The practical advice for end-users would be to stick with the defaults for now. Joe On Wednesday, August

Re: Practical Advice for those using AES256 cipher?

2009-08-19 Thread David Shaw
On Aug 19, 2009, at 9:28 AM, Kevin Hilton wrote: Although I usually get a wide range of responses, is there any practical advice an end-user should take away from the recent AES256 attacks as described here:http://www.schneier.com/blog/archives/2009/07/another_new_aes.html? Should I continue to

Re: Practical Advice for those using AES256 cipher?

2009-08-19 Thread Robert J. Hansen
Kevin Hilton wrote: Although I usually get a wide range of responses, is there any practical advice an end-user should take away from the recent AES256 attacks as described here? To repeat my usual advice: Unless you know what you're doing and why, stick with the defaults. The AES256

Re: Practical Advice for those using AES256 cipher?

2009-08-19 Thread Henk M. de Bruijn
Werner Koch schreef: ...snipped I am sure others will start a new debate now what to do, but I consider such a debate more or less academic. Grin ;-) -- Henk M. de Bruijn Mozilla Thunderbird 2.0.0.22 (20090605) with

Re: How do I flush a bad symmetric password from gpg-agent?

2009-08-19 Thread Doug Barton
Werner Koch wrote: On Tue, 18 Aug 2009 20:28, do...@dougbarton.us said: Today I mis-typed a passphrase for a symmetrically encrypted file and was surprised to discover that gpg-agent had stored the bad passphrase and would not let me access the file. I have occasionally in the past This

Re: How do I flush a bad symmetric password from gpg-agent?

2009-08-19 Thread Daiki Ueno
In 4a8c5344.4060701__17863.5451746688$1250713354$gmane$...@dougbarton.us Doug Barton do...@dougbarton.us wrote: Today I mis-typed a passphrase for a symmetrically encrypted file and was surprised to discover that gpg-agent had stored the bad passphrase and would not let me access the