Re: Developing JavaCard applet

2013-05-03 Thread Branko Majic
On Sun, 21 Apr 2013 10:49:19 +0200 NdK ndk.cla...@gmail.com wrote: Hello all. I'm planninng to start work on a OpenGPGCard TNG ( :) ) that allows: - exportable keys only towards user-certified devices - support for 2048 bit keys -- more if HW allows it - storage for many (thought at least

Re: Developing JavaCard applet

2013-05-03 Thread NdK
Il 03/05/2013 09:53, Branko Majic ha scritto: I'm planninng to start work on a OpenGPGCard TNG ( :) ) that allows: - exportable keys only towards user-certified devices - support for 2048 bit keys -- more if HW allows it - storage for many (thought at least 18 to allow 1 key per year till

Re: Developing JavaCard applet

2013-05-03 Thread Branko Majic
On Fri, 03 May 2013 10:18:12 +0200 NdK ndk.cla...@gmail.com wrote: I can volunteer to test it out once you have some workable code - I have a couple of Oberthur cards that are collecting the dust :) How much memory do they have? I think that less than 64K won't be enough... But you could

Re: determine encryption key without trying to decrypt

2013-05-03 Thread kwadronaut
Hi, Quoting Hauke Laging mailinglis...@hauke-laging.de: how can I determine the key(s) for which a file has been encrypted without gpg trying to decrypt the file? I don't understand why --list-packets tries to decrypt it anyway. --batch and --no-tty do not solve the problem. Because of the

Suggest please

2013-05-03 Thread Lema KB
hi guys i am just beginning using gpg/pgp, so my apologies in advance for my confusions. i've read and tried several times to encrypt csv files with a private-key, and to decrypt them back with public key. actually, these different csv files should be encrypted by several different users, and

Re: Suggest please

2013-05-03 Thread Lema KB
Hi Werner let's say, user_1 created public-private-key_1. then senders should encrypt it with public-key_1 but for all user_1, user_2, etc. with which private key will user_2, user_3,.. decrypt this file.csv, which is encrypted with public-key_1? thanks in advance On Fri, May 3, 2013 at

Re: Suggest please

2013-05-03 Thread Henry Hertz Hobbit
On 05/03/2013 08:45 AM, Lema KB wrote: SNIP Werner is of course correct but since you need to do a send to userid_1, userid_2, and userid_3 you will need the public key for all three of the recipients. You need the public key for each person you want to send a public key enciphered (encrypted)

Re: Suggest please

2013-05-03 Thread David Smith
On 05/03/13 12:58, Lema KB wrote: Hi Werner let's say, user_1 created public-private-key_1. then senders should encrypt it with public-key_1 but for all user_1, user_2, etc. with which private key will user_2, user_3,.. decrypt this file.csv, which is encrypted with public-key_1? No.

Re: Suggest please

2013-05-03 Thread Lema KB
or can it be solved through binding PGP with Active Directory? How do i do that, can you pls give any link? thanks in advance On Fri, May 3, 2013 at 1:58 PM, Lema KB kibl...@gmail.com wrote: Hi Werner let's say, user_1 created public-private-key_1. then senders should encrypt it with

Re: Suggest please

2013-05-03 Thread Lema KB
It is not appropriate for us to have several public-private-keys. Can GnuPG be downloaded on a virtual machine so, that, if one user on VM generates a pair-key, this pair-key will be also the keys of other user of this VM? So they all will be able to decrypt files using one private-key..? How to

Re: Suggest please

2013-05-03 Thread NdK
Il 03/05/2013 14:29, Lema KB ha scritto: It is not appropriate for us to have several public-private-keys. Then probably you don't need encryption at all. Or you only need symmetric encryption (same key used both for enc and dec). Can GnuPG be downloaded on a virtual machine so, that, if one

Re: Suggest please

2013-05-03 Thread Lema KB
hi Diego We need encryption, because the files are sent via Email from other organisations. These files are then decrypted internally, that's why all/several Win-Users of us. On Fri, May 3, 2013 at 2:51 PM, NdK ndk.cla...@gmail.com wrote: Il 03/05/2013 14:29, Lema KB ha scritto: It is

Re: Suggest please

2013-05-03 Thread NdK
Il 03/05/2013 14:58, Lema KB ha scritto: We need encryption, because the files are sent via Email from other organisations. These files are then decrypted internally, that's why all/several Win-Users of us. Then you could setup a (different!) machine with a mail robot that receives those

Re: Suggest please

2013-05-03 Thread Lema KB
i've made this robot: it receives mail, decrypts files with my private-key, and saves them in a folder. But, someone should click on run.. This is me only. i need, that some others will be able to run it also. But it doesn't decrypt files, as the priv-key for decryption is mine. On Fri, May 3,

Re: Suggest please

2013-05-03 Thread Lema KB
hi Henry can a symmetric cipher be/use also public-private-keys? On Fri, May 3, 2013 at 3:44 PM, Henry Hertz Hobbit hhhob...@securemecca.net wrote: On 05/03/2013 08:45 AM, Lema KB wrote: is it possible to do it in any other way, but using also priv-pub-key? i am like stuck.. Yes, I

Re: Suggest please

2013-05-03 Thread David Smith
On 05/03/13 15:02, Lema KB wrote: can a symmetric cipher be/use also public-private-keys? No. The whole point of public/private cryptography is to use asymmetric ciphers. (caveat: actually, this is an over-simplification. In reality, gpg DOES use symmetric ciphers, but in a way that makes it

Re: Suggest please

2013-05-03 Thread Werner Koch
On Fri, 3 May 2013 14:29, kibl...@gmail.com said: It is not appropriate for us to have several public-private-keys. Although I don't consider this a good idea: You may give a copy of the private key to all persons who need to decrypt the files. In general such a group owned private key is not

Re: Suggest please

2013-05-03 Thread NdK
Il 03/05/2013 15:44, Lema KB ha scritto: i've made this robot: it receives mail, decrypts files with my private-key, and saves them in a folder. But, someone should click on run.. This is me only. i need, that some others will be able to run it also. But it doesn't decrypt files, as the

Re: Suggest please

2013-05-03 Thread NdK
Il 03/05/2013 14:51, NdK ha scritto: Submission can be handled with a correct ACL (in *nix it could be rwxrwx-wx on a folder: only members of the group will be able to read the files in it, but every user can put his file there -- we used this method for lab projects). Just to be more

Re: Suggest please

2013-05-03 Thread Henry Hertz Hobbit
First, a restriction on who can access folder restricted to just a group on 'nix should probably be: drwxrwx--- (chmod 770 dir - all group members can write) drwxr-x--- (chmod 750 dir - only owner can write) http://www.securemecca.com/public/ChmodTable.txt On OpenVMS you can and the

Re: 2.0.20 beta available

2013-05-03 Thread Abel Luck
Pete Stephenson: On 5/2/2013 8:06 PM, Abel Luck wrote: Is it planned to support --delete-secret-keys? Do existing versions not support --delete-secret-keys? Oh, it must be not implemented in just 2.1 (git master). I just assumed it wasn't implemented in 2.0 either. I wonder why it was

Libgcrypt (hopefully not OT)

2013-05-03 Thread Bob (Robert) Cavanaugh
Hi All, I am using Libgcrypt 1.5.2 with gcc v 4.5.3 on Cygwin to use the MPI functions. Can you please provide some guidance on how to handle signed and negative MPIs? I cannot seem to get a negative MPI, which is causing problems with other computations (specifically gcry_mpi_invm never

Re: Suggest please

2013-05-03 Thread Henry Hertz Hobbit
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 05/03/2013 08:43 PM, Henry Hertz Hobbit wrote: SNIP First, I think public key encryption is apropos for what you are doing if privacy is a concern. The way you approached it without telling us you are on Windows until later on indicates privacy