Re: Choice of ECC curve on usb token

2018-06-29 Thread Phil Pennock
On 2018-06-29 at 18:07 +0200, Damien Cassou wrote: > NIIBE Yutaka writes: > > Why not Curve25519, if you use ECC? > > I'm not sure I want ECC after reading this: > https://crypto.stackexchange.com/a/60394/60027 Curve25519 is not NIST ECC. It is ECC. "ECC" = "Elliptic Curve Cryptography", it

Re: Pinentry: Inappropriate ioctl for device when getting smartcard PIN

2018-06-29 Thread Jacob Adams
On 06/27/2018 04:50 PM, Jacob Adams wrote: > I've got another pinentry problem unfortunately. > The tty is owned by the correct user this time and $GPG_TTY is set > correctly. > > I have two gpgme contexts, one for openpgp and another for assuan > commands to the smartcard. Pinentry triggered by

Generating NIST/Brainpool subkeys with GPGME

2018-06-29 Thread Jacob Adams
It appears that one cannot currently generate NIST or Brainpool subkeys with GPGME. Using GPG itself works fine with --expert, so am I missing an option or is this simply not possible yet? I've attached a simple test program and the output I get on my machine is below: ./eccsubkeys rsa1024 GPGME

Re: dirmngr cygwin resolv.conf

2018-06-29 Thread john doe
On 6/29/2018 6:40 PM, john doe wrote: On 6/29/2018 4:24 PM, Werner Koch wrote: On Thu, 28 Jun 2018 17:05, johndoe65...@mail.com said: dirmngr.conf: use-tor http-proxy socks5://localhost:9150 Nobody said that you should configure a proxy ;-) Dirmngr has integrated Tor support which will be

Re: Choice of ECC curve on usb token

2018-06-29 Thread Juergen Bruckner
Hello Damien, Am 2018-06-29 um 18:07 schrieb Damien Cassou: > Moreover, Nitrokey Storage only supports NIST and Brainpool, nothing > else. Im not fully sure but i guess for your purposes you would need Nitrokey Pro[1] best regards Juergen [1]

Re: dirmngr cygwin resolv.conf

2018-06-29 Thread john doe
On 6/29/2018 4:24 PM, Werner Koch wrote: On Thu, 28 Jun 2018 17:05, johndoe65...@mail.com said: dirmngr.conf: use-tor http-proxy socks5://localhost:9150 Nobody said that you should configure a proxy ;-) Dirmngr has integrated Tor support which will be used automatically when Tor or the Tor

Re: dirmngr cygwin resolv.conf

2018-06-29 Thread Werner Koch
On Thu, 28 Jun 2018 17:05, johndoe65...@mail.com said: > dirmngr.conf: > > use-tor > http-proxy socks5://localhost:9150 Nobody said that you should configure a proxy ;-) Dirmngr has integrated Tor support which will be used automatically when Tor or the Tor Browser is up and running. --use-tor

Re: Choice of ECC curve on usb token

2018-06-29 Thread Damien Cassou
NIIBE Yutaka writes: > Why not Curve25519, if you use ECC? I'm not sure I want ECC after reading this: https://crypto.stackexchange.com/a/60394/60027 Moreover, Nitrokey Storage only supports NIST and Brainpool, nothing else. > Quite interesting opinion. [...] thank you for the information.

gpg2 --refresh-keys does not talk to dirmngr?

2018-06-29 Thread Dirk Gottschalk via Gnupg-users
Hello. I have set up a local proxy server with a squid/privoxy/TOR chain and set it up in dirmngr.conf. Now, after deleting the keyserver line from gpg.conf, I found out that gpg2 seems not to talk to dirmngr when using gpg2 --refresh keys. Is there something I have to set up in one of the

Re: dirmngr cygwin resolv.conf

2018-06-29 Thread Dirk Gottschalk via Gnupg-users
Hello. Am Freitag, den 29.06.2018, 16:30 +0900 schrieb NIIBE Yutaka: > john doe wrote: > > Now, the next step is to configure dirmngr to do the same!: > > > > dirmngr.conf: > > > > use-tor > > http-proxy socks5://localhost:9150 > > Only "use-tor" is needed, then, dirmngr connects to

Re: dirmngr cygwin resolv.conf

2018-06-29 Thread NIIBE Yutaka
Hello, Sorry, my explanation was not accurate. In the Tor-mode of dirmngr, it uses the port 9050 at first. And there is some code to fallback to the port 9150. It's like: libdns_switch_port_p (gpg_error_t err) { if (tor_mode && gpg_err_code (err) == GPG_ERR_ECONNREFUSED

Re: Choice of ECC curve on usb token

2018-06-29 Thread NIIBE Yutaka
Hello, Why not Curve25519, if you use ECC? Damien Cassou wrote: > curves and (2) Bernstein’s Curve 25519 is hard to protect against side > channel attacks when being implemented in embedded devices. Quite interesting opinion. I wonder what kinds of side channel attacks are discussed there.

Re: dirmngr cygwin resolv.conf

2018-06-29 Thread john doe
On 6/29/2018 9:30 AM, NIIBE Yutaka wrote: john doe wrote: Now, the next step is to configure dirmngr to do the same!: dirmngr.conf: use-tor http-proxy socks5://localhost:9150 Only "use-tor" is needed, then, dirmngr connects to localhost:9150 for Tor. Looks like the issue isDNS name

Choice of ECC curve on usb token

2018-06-29 Thread Damien Cassou
Hi, I would like to get a usb token to secure my keys. My use case is protection of 3 GnuPG keys that I will be using 10 times per day at least. I plan to create a new key ring from scratch. Because ECC seems more future-oriented than RSA, this is what I chose to use. I'm wondering which usb

Re: dirmngr cygwin resolv.conf

2018-06-29 Thread NIIBE Yutaka
john doe wrote: > Now, the next step is to configure dirmngr to do the same!: > > dirmngr.conf: > > use-tor > http-proxy socks5://localhost:9150 Only "use-tor" is needed, then, dirmngr connects to localhost:9150 for Tor. -- ___ Gnupg-users mailing