Re: very short plaintexts symmetrically encrypted

2010-01-12 Thread Werner Koch
On Mon, 11 Jan 2010 13:06:03 -0500, lists.gnupg-us...@mephisto.fastmail.net wrote: Forgive me, but how is a MitM attack possible against a symmetric cypher using a shared, secret key? For example by swapping messages. Two messages are sent on two out-of-band events one which says Yes and the

Re: Web of Trust itself is the problem

2010-01-12 Thread Roscoe
While the ontopicness of my comment is a bit questionable I don't think I've gotten an encrypted email in the last 12 months, but I still use gpg every day. All Debian and (I imagine, or at least hope) Debian derivatives such as Ubuntu incorporate digital signing of software. I think

Re: Web of Trust itself is the problem

2010-01-12 Thread Mark H. Wood
On Sun, Jan 10, 2010 at 11:37:12PM -0500, Robert J. Hansen wrote: A few years ago a fellow grad student of mine, Peter Likarish, developed a really cool anti-phishing technology. [but test subjects didn't react to the warning] Peter's hypothesis was that Flash ads are to blame. Users have

Re: Web of Trust itself is the problem

2010-01-12 Thread Jean-David Beyer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark H. Wood wrote: | | Still, it's another technology-intractable problem. If people cared, | they would train themselves to look for trouble indicators, like | scanning the dashboard from time to time for problems with speed, | fuel, temperature,

Re: Use DINSIG SmartCard

2010-01-12 Thread fava64
Hello Werner, That probably means that your card does not follow the DIN V 66291-1 (aka DINSIG) as implemented by scdaemon. In fact, the customer support wrote me that mail: We are not sure why this tool is recognizing the card as a DINSIG card, but we are quite sure the card is not a DINSIG

Re: Web of Trust itself is the problem

2010-01-12 Thread Mario Castelán Castro
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 January 12th 2010 in gnupg-users@gnupg.org thread Web of Trust itself is the problem Actually I was quoting Robert Holtzman, not Robert J. Hansen, sorry for not including the full name. I have no time now to read those texts because my holidays

problem importing key to card

2010-01-12 Thread Stefan Xenon
Hi! Using an OpenPGP Card version 2 and importing a RSA 2048 bit key does not work for me. I followed the description at http://www.gnupg.org/howtos/card-howto/en/ch05.html#id2523191 moo:~ tk$ gpg2 --edit-key F1AE8111 gpg (GnuPG/MacGPG2) 2.0.12; Copyright (C) 2009 Free Software Foundation, Inc.

Changing trust in GPGME

2010-01-12 Thread Piotr Bratkowski
#ifdef HAVE_CONFIG_H #include config.h #endif #include stdlib.h #include stdio.h #include string.h #include gpgme.h Hello, I have this code. And when I see output owner_trust = 4, but in gpg from system I get 0. Do I need to somehow save this changes?? #include t-support.h int main (int