Re: OpenPGP Card

2005-09-07 Thread Werner Koch
On Tue, 06 Sep 2005 15:56:22 +0200, Zeljko Vrba said: 2. OpenPGP trust model isn't as 'strong' as X.509 (i.e. there aren't many trusted introducers) OpenPGP does not define any trust model. Instead it provides the mechanisms to implement any kind of trust modell on top of it. Salam-Shalom,

Re: OpenPGP Card

2005-09-08 Thread Werner Koch
On Wed, 07 Sep 2005 15:30:39 +0200, Zeljko Vrba said: 1. PKCS#11 2. MS CAPI 3. vendor's proprietary API 4. do not support the HW at all Pick your poison :) Werner has chosen 4. for GnuPG, contrary to wishes of GnuPG users. Not true. I simply do not have a 4758 or other tokens here.

Re: Open PGP cards and backup

2005-09-09 Thread Werner Koch
On Fri, 09 Sep 2005 12:48:07 +0200, Andreas Liebschner said: Apparently it successfully imports it, but however I still see the old card' s/n under General key info..:. In fact, I can't sign anything because I'm asked for the other card. (I obviousy save before quitting gpg) Well, this might

Re: gpg looking for strange additional key upon import

2005-09-12 Thread Werner Koch
On Sat, 10 Sep 2005 09:34:25 -0400, David Shaw said: Aha! I found the problem. It's actually a bug in the German translation. I was testing in English, so never saw it. I'll file a bug for that. Thanks for your help running this one down. I was sure that gettext points out such problems

Re: Importing keys

2005-09-14 Thread Werner Koch
On Wed, 14 Sep 2005 10:42:10 +0100, Bob Henson said: I can't find anything in the man page about key import file formats. Other than ascii files, can GnuPG import any other file formats and if so what? gpg knows about both OpenPGP defiend formats: Binary and ASCII armored. It will

Re: Windows Corp Implementations

2005-09-20 Thread Werner Koch
On Thu, 15 Sep 2005 01:46:37 -0700, Richard Sperry said: Next I was wondering what it would take to make the gpgexch have the ability to do the following: Rich Text (so I can paste out of word and what not) The successor of gpgexch is called GPGol. However I have not yet looked at the

Re: trouble decrypting AES256 symmetric encrypted file

2005-09-20 Thread Werner Koch
On Tue, 20 Sep 2005 03:25:02 -0400, Henry Hertz Hobbit said: That is much better than the 2 GB limit of EXT3. In reality, that There is no 2 GB limit for EXT3 nor for EXT2. Old applications, not properly making use of the off_t type and related functions might give that impression. Any

Re: Public-key encrypt/sign: providing Passphrase programmatically via Callbacks

2005-09-20 Thread Werner Koch
On Tue, 20 Sep 2005 04:51:40 -0700 (PDT), Vijay K N said: Appreciate if someone can clarify whether providing passphrase programmatically is supported for the above Sure it is. So see how it forms, check out GPGME or well just use GPGME to access gpg. Salam-Shalom, Werner

Re: trouble decrypting AES256 symmetric encrypted file

2005-09-20 Thread Werner Koch
On Tue, 20 Sep 2005 17:11:11 -0500, Ryan Malayter said: Werner, I can confirm that large file ( 4GB) support does not work on Win32 without using file redirection, at least in version 1.4.1. Did you make a change to enable 64-bit file sizes in a later version? I have not changed anything in

Re: OpenPGP Card useing sha256 failed !!

2005-09-20 Thread Werner Koch
On Tue, 20 Sep 2005 20:28:15 +0800, Po-Wen Chi said: If using SHA-1 will be carried out normally. But if appoint to use SHA-256 , will present wrong information . You can't use SHA256 with the OpenPGP card or any card I know of. The reason for this is that the card checks that the padding is

Re: Trouble decrypting AES256 symmetric encrypted file

2005-09-20 Thread Werner Koch
On Tue, 20 Sep 2005 17:24:44 -0500, Ryan Malayter said: Werner, do you use GetFileSize or GetFileSizeEx? There are also GetFileSize. However it should return an error if the file is too large and we then fall back ito streaming mode which means that we use OpenPGP's partial length header

Re: Key from smartcard to disk

2005-09-21 Thread Werner Koch
On Wed, 21 Sep 2005 11:49:25 +0200, Patrick Plattes said: this. Please tell me if my presumption is correct. The public key will be generated with the aid of the secret key and the secret key never Public and secret keys are generated at the same, thus they are called a key pair. leave the

Re: UbuntuLinux GPG Still Doesn't Work With Remailers

2005-09-27 Thread Werner Koch
On Mon, 26 Sep 2005 13:28:20 -0700 (PDT), Guitar Bench said: --- Peter Palfrader [EMAIL PROTECTED] wrote: gpg --textmode --cipher-algo 3DES file --recipient $foo --encrypt because those are the options used by Echolot, a remailer pinger. I spent several hours testing that command line and

Re: GPG Passphrase on the command line

2005-09-27 Thread Werner Koch
On Mon, 26 Sep 2005 19:20:02 +0200 (MET DST), Johan Wevers said: But typing the above line on the commandline has the same problems. That was just an example. You may use cat or if you feel lucky fortune. Salam-Shalom, Werner ___ Gnupg-users

Re: Q: List format with --with-colons option

2005-09-29 Thread Werner Koch
On Wed, 28 Sep 2005 19:39:22 +1200, Bernard said: I found that the --with-colons option returns the most details and appears to be more machine readable but I don't know what some fields mean. See doc/DETAILS. Please also consider using gpgme, this is a far easier way to access gpg. C++,

Re: session key curiosity ???

2005-09-29 Thread Werner Koch
On Wed, 28 Sep 2005 16:42:06 -0700, said: gpg --override-session-key 2:1568A79A26ABCB75C294AA07AB73C53A7D168F2B898F93BE c:\r\s.txt when retyping, i accidentally changed the last character to an F instead of an E and it *still* worked! should this be? Yes. With DES only the high 7

Re: Compilation errors...

2005-09-30 Thread Werner Koch
On Thu, 29 Sep 2005 11:59:44 -0700 (PDT), bob bobby said: `ASSUAN_NO_WAITPID' is undeclared. Am I comipiling this thing wrong, or do I need to tweak the You need to update the libassuan development package. You need version 0.6.10 which is the latest released on. You should also get a newer

Re: OpenPGP Card in SIM Size.

2005-10-04 Thread Werner Koch
On Mon, 03 Oct 2005 23:27:50 +0200, Jörn Bratzke said: is it possible to cut the OpenPGP Card to the size of a SIM Card without destroying it? Should be possible with a sharp tool. I have no experience, though. Shalom-Salam, Werner ___

Re: gpa / gpg-agent

2005-10-04 Thread Werner Koch
On Thu, 15 Sep 2005 19:12:00 -0400, Gary Graham said: I do not see any notes on how to run gpg-agent. I went thru the The manual describes how to install and use it. (info gnupg) Is this the right mailing list to discuss GPA? There are too many problems to mention before finding out if

[Announce] Libgcrypt 1.2.2 released

2005-10-05 Thread Werner Koch
Hello! We are pleased to announce the availability of Libgcrypt 1.2.2. Libgcrypt is a general purpose library of cryptographic building blocks. It is based on the code used in GnuPG. This is a bug fix release solving a weakness in the random number generator when used by forking servers.

Re: gpg-agent PIN cache

2005-10-06 Thread Werner Koch
On Wed, 5 Oct 2005 20:10:22 +0200, Joerg Schmitz-Linneweber said: But the problem is: The second time and ever on, pinentry comes up and asks for my PIN! Although I said cache ttl for ssh should be some hours... Does anyone know why gpg-agent/pinentry does so? Yes. We do a reset after each

Re: Decryption

2005-10-07 Thread Werner Koch
On Wed, 5 Oct 2005 15:01:51 -0400, Mcqueen, Voncile LT said: Please decrypt the following message for me: jmjmj gsmsg lrjgu csqyj quflr mfajg erdmc cmqlv lqyhg gawgq arpgq sblce jrlrj lnemc cyjqu flrmf ajqer d Thepi oneer sofaw arles sworl daret heyou ththa trefu semil itary servi

Re: Armor headers

2005-10-10 Thread Werner Koch
On Sat, 08 Oct 2005 23:20:03 +0930, Alphax said: Well, you can use --no-emit-version and --no-comments... Or use sed to modify or insert header lines. Shalom-Salam, Werner ___ Gnupg-users mailing list Gnupg-users@gnupg.org

Re: gpg2 vs. gpg and OpenPGP card

2005-10-10 Thread Werner Koch
On Mon, 10 Oct 2005 09:31:51 +0200, Wolfgang Rosenauer said: gpg --card-status is not my problem. That works. Does it show an authentication key? So I'm still not sure how to add the key from the card to the gpg-agent by using ssh-add. You don't need. If there is a card in the reader it

Re: Keyserver communications errors on Cygwin's GnuPG

2005-10-18 Thread Werner Koch
On Tue, 18 Oct 2005 10:49:22 +0200, Ismael Valladolid Torres said: Is this to be reported to GnuPG developers or to Cygwin developers? That seems to be a Cygwin problem. Salam-Shalom, Werner ___ Gnupg-users mailing list Gnupg-users@gnupg.org

Re: Emacs interface to gpg

2005-10-18 Thread Werner Koch
On Mon, 17 Oct 2005 14:11:36 -0700, Patrik Jonsson said: I just started using gpg and was looking around for an emacs mode to encrypt/decrypt files during load and save. There are a few vague references to crypt++, but they are all stale web sites and messages The standard these days is

Re: Gnupg-users Digest, Vol 25, Issue 16

2005-10-19 Thread Werner Koch
On Tue, 18 Oct 2005 09:33:11 -0500, Zhou, Mike said: Can GnuPG import X.509 certificate/pubkey ? Only the 1.9 branch of GnuPG supports S/MIME. You need to use gpgsm and not gpg then. Shalom-Salam, Werner ___ Gnupg-users mailing list

Re: Subkey revocation means losing signatures?

2005-10-20 Thread Werner Koch
On Wed, 19 Oct 2005 16:46:23 +0200, Realos said: I also thought of using the free-form UID for collecting signatures and the using it to sign my new UID. Please consider that many folks run an email challenge response for each user ID they are going to sign. Thus, you won't get a signature

Re: allowed commands on keys that keyservers handle correctly

2005-10-20 Thread Werner Koch
On Thu, 20 Oct 2005 12:15:24 +0200, Realos said: I did not spot any comprehensive documentation on the web about what kind of key-update different keyservers allow. They always merge keys. If I like to remove my signature from a certain key and/or uid, what is the best approach to that?

Re: Questions about the use with GnuPG and SmartCards

2005-10-20 Thread Werner Koch
On Thu, 20 Oct 2005 10:24:04 +0200, Christoph Anton Mitterer said: 1) Are there any security drawbacks when using smartcards compared with the normal store key on disc procedure? Depends on you needs. In general a smart card is better than a on-disk key. Some people claim that the 1024 bit

Re: Questions about the use with GnuPG and SmartCards

2005-10-20 Thread Werner Koch
On Thu, 20 Oct 2005 15:45:21 +0200, Ismael Valladolid Torres said: Any pointer to a complete spec on what data's expected to be on the card and on a external medium? I have access to personalise a smartcard with any dedicated or elementary file needed and I'd like to give it a try.

Re: handling S/MIME messages with gpgsm

2005-10-24 Thread Werner Koch
On Fri, 21 Oct 2005 15:03:46 +0200, Joost van Baal said: I am having troubles getting S/MIME emails (or CMS blobs) processed by GPGME. (Since GPGME uses libksba, it _should_ be able to handle these, I guess). Yes, it does. For instance, when creating a detached-signed S/MIME email message,

Re: Using a Smartcard with a class2 cardreader: Can I use the keypad?

2005-10-26 Thread Werner Koch
On Tue, 25 Oct 2005 21:37:06 +0200, Peter Engel said: I have a class-2 cardreader (meaning: with integreated keypad for entering the PIN). I found no clue yet wether GnuPG supports the integrated keypad for entering the PIN. (using GnuPG v.1.4.2) I am working on this. It has turned out to

Re: ECC

2005-10-31 Thread Werner Koch
On Mon, 31 Oct 2005 00:51:50 +0100, Christoph Anton Mitterer said: I know that, of course, but I think that perhaps we'll have no ECC the next 10 years or so,.. if noone makes the step,... There is no reason for ECC. Even chip cards are getting powerful enough not to need ECC for cost

Re: OpenPG/X.509 interoperability

2005-10-31 Thread Werner Koch
On Mon, 31 Oct 2005 00:36:13 +0100, Christoph Anton Mitterer said: This is perhaps a stupid question but how far are these two standards interoperable? They are not interoperable. Can X.509 certificates be used to sign/certificate OpenPGP UIDs? No. You can add a private extension to do

Re: OpenPG/X.509 interoperability

2005-11-01 Thread Werner Koch
On Mon, 31 Oct 2005 16:42:48 +0100, Christoph Anton Mitterer said: What do you mean by private extension? OpenPGP defines identifier ranges for private and experimental use. Salam-Shalom, Werner ___ Gnupg-users mailing list

Re: OpenPG/X.509 interoperability

2005-11-01 Thread Werner Koch
On Tue, 1 Nov 2005 19:56:25 +0100 (CET), Henning Hucke said: X.509 as well as OpenPGP are just package aroung the product. You can use the private and public keys themselfs to package them as OpenPGP or X.509. So this way you can have one and the same key pair to work in both worlds.

Re: using option --logger-fd in Win32

2005-11-04 Thread Werner Koch
On Thu, 3 Nov 2005 13:52:46 +0300, vitaly said: How can i write log output to file descriptor n and not to stderr? Please, give me example of use an option --logger-fd in Win OS. That is a matter of the shell. I don't now whether cmd.exe supports this. We use this gpgme heavily along with

Re: CVS or SVN

2005-11-07 Thread Werner Koch
On Sat, 5 Nov 2005 08:04:53 -0600, Stewart V Wright said: Can someone then please update the information on the web pages to be relevant to SVN as opposed to CVS (I'm assuming that you're not Yeah, we should really do this. However due to our fully automated content management system it is

Re: USB tokens instead of smartcards

2005-11-10 Thread Werner Koch
On Wed, 9 Nov 2005 22:55:29 +0100, Philipp Kern said: Yeah, I got that fact. So to clarify: A USB token with a supported smartcard in it. You may try to cut an OpenPGP card to ID-000 size. Shalom-Salam, Werner ___ Gnupg-users mailing list

Re: Problems with OpenPGP smart card

2005-11-21 Thread Werner Koch
On Thu, 17 Nov 2005 23:41:23 +0100, Karsten Strunk said: Is there anyone who had similar problems and could help me? Thanks very much! Keep on trying .-) Sometimes you will be lucky and a key gets generated. The problem is in pcsclite - it obviously does not handle long running operations

Re: [gpgol] download problem

2005-11-21 Thread Werner Koch
On Mon, 21 Nov 2005 11:26:36 -, Pedro Daniel Guedes Figueira said: I'm trying to download the gpgol plugin for outlook. The problem is that the link to ftp://ftp.g10code.com/ is not working. Just tested and it works fine. Make sure that you switch to passive ftp mode in case a firewall

Re: OpenPGP card

2005-11-24 Thread Werner Koch
On Wed, 23 Nov 2005 21:20:14 +0100, Bernhard Walle said: 1. After key creation on the card, I can enter a passphrase. I left it empty because I thought the PIN is sufficient. Is this usual? Thsi is for the backup of the encryption key. 2. Is it possible to read out the private key only

Re: Using TC Trustcenter.de certificates

2005-12-07 Thread Werner Koch
On Tue, 29 Nov 2005 16:26:38 +0100, Markus Plail said: Ok, thanks for the info, but is there a way to import p12 into gpg? I didn't get it to work and so worked around it by importing the p12 key No OpenPGP and X.509 are different formats. You can't import them. PGP uses a hack to encapsulate

Re: OpenPGP card and gpgme

2005-12-14 Thread Werner Koch
On Sat, 10 Dec 2005 15:24:17 +0100, Bernhard Walle said: I use a OpenPGP card for signing and encrypting mails together with Sylpheed Claws which uses gpgme. It works fine with two exceptions: - If the card is not inserted before the passphrase should be entered, Sylpheed hangs. So I

Re: GPGME signing problem

2005-12-14 Thread Werner Koch
On Tue, 13 Dec 2005 17:35:05 +0100, Milan Lehocky said: The passphrase callback function is never called.. - that is strange. I'm running SunOS 5.8. Please run in debug mode: $ GPGME_DEBUG=5:/tmp/mygpgme.log ./myapp (the file name is optional, it defaults to stderr) Shalom-Salam, Werner

Re: GPGME signing problem

2005-12-20 Thread Werner Koch
On Thu, 15 Dec 2005 17:46:05 +0100, Milan Lehocky said: fd 3: got `[GNUPG:] GET_HIDDEN passphrase.enter ' posix-io.c:340: gpgme:select on [ r3 r10 ] posix-io.c:386: select OK [ ] posix-io.c:340: gpgme:select on [ r3 r10 ] posix-io.c:386: select OK [ ] posix-io.c:340: gpgme:select on [ r3

[Announce] GnuPG 1.9.20 (S/MIME and gpg-agent) released

2005-12-20 Thread Werner Koch
projects. Happy hacking, Werner p.s. If you need to generate server of email certificates, you might want to read: http://www.fsfe.org/en/fellows/werner/weblog/creating_server_certificates_with_gnupg -- Werner Koch [EMAIL PROTECTED] The GnuPG Experts

Re: Create key's over 4096 bit ????

2005-12-22 Thread Werner Koch
On Wed, 21 Dec 2005 18:36:20 +0100, Christoph Anton Mitterer said: - And even from a cryptographic point of view this wouldn't make sense (as far as I know), as currently hashfunctions are the weak point of the whole system. The actual weak point is the missing bugfreeness of the

Re: gnupg in large scale at University

2005-12-24 Thread Werner Koch
On Fri, 23 Dec 2005 18:47:56 +0100, Thomas Widhalm said: I need a plugin for Outlook which support gpg/MIME and maybe inline gpg. (Not Gdata, this didn't work out) GPGol supports reaading PGP/MIME encrypted messages. The user interface is not very nice because it is only possible save

Re: using gpgsm

2005-12-24 Thread Werner Koch
On Wed, 21 Dec 2005 14:23:26 -0600, Aleksandar Milivojevic said: gpgsm: gpgsm: GPG_TTY has not been set - using maybe bogus default gpgsm: gpg-protect-tool: Secure memory is not locked into core gpgsm: gpg-protect-tool: gpg-agent is not available in this session You need to start gpg-agent

Re: PKA

2006-01-02 Thread Werner Koch
On Tue, 27 Dec 2005 03:44:29 +0300, Pawel Shajdo said: What is PKA? Just have found in manual unknown words... Public Key Association Yeah, I know that I should write a paper on this. There is only a simplepresentation on what PKA tries to solve

Re: Reimporting key into gpgsm

2006-01-02 Thread Werner Koch
On Tue, 27 Dec 2005 17:16:07 +0100, Thomas Widhalm said: simple one. I deleted my whole keyring.kbx file and imported all anew but the keyring.kbx only contains public keys (aka certificates). The private keys are in ~/.gnupg/private-keys-v1.d/. To locate the actual used private key you

Re: Smartcard questions

2006-01-02 Thread Werner Koch
On Sun, 01 Jan 2006 12:57:27 -0700, Kurt Fitzner said: 1) Is it possible to erase one? For example, if a set of three keys has been generated on the card, and if later that card is going to be used for one or two subkeys, can the unused keys on the card be erased? It would be nice to return

Re: Using of subkeys for encryption

2006-01-04 Thread Werner Koch
On Wed, 04 Jan 2006 09:39:44 +0100, Patrick Plattes said: sec 1024R/F7E086A6 2005-09-21 [expires: 2008-09-20] Card serial no. = 0001 04FB The key is on the card. Check whether the card works: gpg --card-status should list the key too. Salam-Shalom, Werner

Re: Using of subkeys for encryption

2006-01-04 Thread Werner Koch
On Wed, 04 Jan 2006 09:39:44 +0100, Patrick Plattes said: gpg: encrypted with 1024-bit RSA key, ID 37BDF910, created 2005-09-21 Patrick Plattes (Mr. Parity) [EMAIL PROTECTED] gpg: public key decryption failed: wrong secret key used I missed this message in my first reply. gpg:

Re: Random seed for symetric encryption

2006-01-17 Thread Werner Koch
On Tue, 17 Jan 2006 10:06:18 +0100, Nikolaus Rath said: Yes, exactly. About 2 GB in 14000 files. You are running several concurrent gpg processes? [6] The exact message again (I lost it) that GPG gives you when the random fails. I don't have the exact message here at the moment, but I'm

Re: only decrypting signed files?

2006-01-18 Thread Werner Koch
On Mon, 16 Jan 2006 16:19:47 +0100, websites said: Is it possible to tell gpg to only decrypt signed files? --skip-verify the problem: i get files which are encrypted and signed with gpg --sign --encrypt is there a way to decrypt the files and get an error message if the file is not

Re: Passphrase problem

2006-01-18 Thread Werner Koch
On Fri, 6 Jan 2006 23:41:13 +0100, Blanc Nicolas said: And I really don't know why... Maybe a problem with KDE ? the keyboard mapping ? Or a problem with charset ? gpg does not care about the charset for passphrases and thus if you have non-ascii in your passpharse and switch the

Re: GPGOL breaks Enigmail

2006-01-23 Thread Werner Koch
On Mon, 23 Jan 2006 09:25:18 +0100, Patrick Brunschwig said: Does GPGOL install gpg, or does it modify the path to the GnuPG home directory? Yes, it installs gpg into the same location as the new installer of gpg does. The HOMEDIR is the user specific directory. c:\Program files\gnu\gnupg\gpg

Re: Using other compression algos with GnuPG

2006-01-23 Thread Werner Koch
Hi! just a short note: The reason why we have compresion algorithms in OpenPGP are mainly out of tradition. On a Unix system the use of specialized tools is the way to go; e.g. gpg for encryption and bzip2 for compressing. If you want to compress your data with a different algorithm you may

Re: gnupg commandline // ? option to view passphrase while typing

2006-01-25 Thread Werner Koch
On Tue, 24 Jan 2006 15:33:03 -0500, said: if not, can it be considered as a future feature? I don't think that this option makes much sense. GUI frondends usually have a way to show the typing and nidhog gave an example on how to do this - also this will leave the passphrase in the shell's

Re: GPGOL breaks Enigmail

2006-01-25 Thread Werner Koch
On Mon, 23 Jan 2006 19:43:11 +, Bob Henson said: Anyway, thanks to everyone for the help. Now the only problem is to get rid of the bits of GPGOL left in Outlook - every time I run it I get an error message telling me it can't find the GPGOL .dll file - hardly surprising You need to

Re: Random seed for symetric encryption

2006-02-09 Thread Werner Koch
On Wed, 18 Jan 2006 10:13:57 +0100, Nikolaus Rath said: The solution is to take a file lock; I don't want to do this always but I see your problem and may be a new option can be used to lock reandom-seed access. I have just implemented that. It is in the current SVN (rev 3999); if you have

Re: Finally: Login via SSH authentication with OpenPGP smart card 100% Free Software PCMCIA reader

2006-02-12 Thread Werner Koch
Hi, just let me add that there are still a couple of problems with removing and re-inserting a card. I am working on this but a final solution will need a few more days of wall time. Shalom-Salam, Werner ___ Gnupg-users mailing list

Re: Finally: Login via SSH authentication with OpenPGP smart card 100% Free Software PCMCIA reader

2006-02-13 Thread Werner Koch
On Mon, 13 Feb 2006 10:15:08 +0100, Georg C F Greve said: Having a wildcard like ALL or * for CLEAR_PASSPHRASE might be good for scripting. kill -HUP $(echo $GPG_AGENT_INFO | awk -F: '{print $2}') or just pkill gpg-agent flushed the passphrase cache Shalom-Salam, Werner

Re: Finally: Login via SSH authentication with OpenPGP smart card 100% Free Software PCMCIA reader

2006-02-13 Thread Werner Koch
On Mon, 13 Feb 2006 13:04:24 +0200, Alon Bar-Lev said: Are you aware of the PKCS#11 for OpenSSH solution (http://marc.theaimsgroup.com/?l=openssh-unix-devm=113977188917865w=2)? Well, I know. However you know my point of view: pkcs#11 is a standard too complex to implement correctly and even

Re: gnupg cryptocard and cardman4040

2006-02-13 Thread Werner Koch
On Sun, 12 Feb 2006 23:33:22 +0100, Bjoern Schiessle said: Please insert the card and hit return or enter 'c' to cancel: gpg: pcsc_connect failed: unknown reader (0x8019) Stop pcscd and make sure that gpg has been build with libusb support. Using the option --debug-ccid-driver might be

[Announce] False positive signature verification in GnuPG

2006-02-15 Thread Werner Koch
://lists.gnupg.org/mailman/listinfo/gnupg-devel [2] http://www.gnupg.org/related_software/gpgme [3] http://www.gpg4win.org -- Werner Koch [EMAIL PROTECTED] The GnuPG Expertshttp://g10code.com Free Software Foundation Europe http

Re: Finally: Login via SSH authentication with OpenPGP smart card 100% Free Software PCMCIA reader

2006-02-17 Thread Werner Koch
On Mon, 13 Feb 2006 19:32:12 +0200, Alon Bar-Lev said: I know you have a licensing problem... I've been in touch No I don't have a licensing problem. What I am saying is that pcksc#11 is not needed in the Free Software world. If you want to enable OpenPGP card support for Mozilla it may be

Re: SmartCard and Keypad

2006-02-17 Thread Werner Koch
On Tue, 14 Feb 2006 18:20:46 +0100, Ralf Cordes said: is there a possibility to tell gpg to use the keypad of my Cardreader Not yet. I am working on it. The basic code is there but the user interface (pinentry) needs to be changes. for the Card-PIN? In this way everything would even be

Re: new version of gnupg signed with different key?

2006-02-17 Thread Werner Koch
On Fri, 17 Feb 2006 13:12:30 +0100, Joerg Schmitz-Linneweber said: Werner? What happend? I saw it's tagged as a (dist sig) [EMAIL PROTECTED] but why did you changed your policy? [Are you on ham radio btw. :-) ?] The new key is as the old one signed by my real key 5b0358a2 and that one is

[Announce] GnuPG does not detect injection of unsigned data

2006-03-09 Thread Werner Koch
released yesterday and should by now be available on all mirrors. [1] http://lists.gnupg.org/mailman/listinfo/gnupg-devel [2] http://www.gnupg.org/related_software/gpgme [3] http://www.gpg4win.org -- Werner Koch [EMAIL PROTECTED] The GnuPG Experts

Re: [Announce] GnuPG does not detect injection of unsigned data

2006-03-21 Thread Werner Koch
On Fri, 10 Mar 2006 19:40:54 +0100, Jan Luehr said: well, this takes me to a difficult question: How much more are to come? (Have you begun a code audit? How long will it take then?) Common wisdoms tells that it is pretty ineffective for a developer to audit his own code. Despite that

Re: /dev/tty error

2006-03-21 Thread Werner Koch
On Tue, 21 Mar 2006 11:13:20 +, Daniel Carrera said: This is a Linux box (Red Hat I think). Do you know what this error means? What can I do to fix it? You need to give more information. Very likely you are running gpg without a TTY associated; there are enough mails with the same

Re: Problem decrypting large file.

2006-03-21 Thread Werner Koch
On Tue, 21 Mar 2006 06:32:44 -0500, Peter C Chapin said: the workaround described in the September posts was shown to possibly not work in the October posts and no resolution was discussed. Am I to conclude that gpg simply can't reliably encrypt multi-gigabyte files on It definitely can. The

Re: batch mode lack of randomness FreeBSD

2006-03-21 Thread Werner Koch
On Thu, 16 Mar 2006 01:10:25 -0500 (EST), Stef Caunter said: I've started a child process that continually writes to a disk file during the --gen-key --batch job... That won't help much. A better thing is find /usr -type f | xargs cat dev/null Is this just the way it is on FreeBSD

[Announce] GPA 0.7.3 released

2006-03-21 Thread Werner Koch
gpa-0.7.2-0.7.3.diff.bz2 Noteworthy changes in version 0.7.3 (2006-03-21) * Minor fixes. No console Windows under W32 anymore. No more garbage in names of new keys. Shalom-Salam, Werner -- Werner Koch

Re: SCM SPR 532 cardreader pinpad

2006-03-27 Thread Werner Koch
On Mon, 27 Mar 2006 17:56:35 +0200, Peter Lebbing said: I must say the way it's phrased in the HOWTO is strange. The SPR 532 is described with pinpad may be used, and the Kobil KAAN Advanced with That should indicated that I have code to support it. The keyboard is not yet supported by

Re: [gpgol] gpgol not working with Outlook 2002]

2006-03-28 Thread Werner Koch
On Thu, 16 Mar 2006 06:29:51 -0800, Roger Fischer said: I downloaded gpgol-0.9.3 and tried it on my system Way too old. You should use the one included in the gpg4win installer: http://www.gpg4win.org. There will very soon be a new release which features PGP/MIME signature verification. If

Re: Retrieving public key from smartcard

2006-03-30 Thread Werner Koch
On Thu, 30 Mar 2006 01:18:40 +0200 (MEST), saschainlondon said: How is it possible to retrieve the public key from the card and set up GnuPG to work with this card that is already set up (I do not want to create a new key pair!) The public key is not on the card due to space issue. You

Re: Retrieving public key from smartcard

2006-03-31 Thread Werner Koch
On Fri, 31 Mar 2006 00:45:10 +0200 (MEST), saschainlondon said: Isn't it possible to create the public key again with the card? (Assume I didn't send the public key to anywhere/anyone and have only my smartcard!) No. For example my key is a bit larger than 64k and that is far too much to

[Announce] GnuPG 1.4.3 released

2006-04-03 Thread Werner Koch
on the mailing lists. Happy Hacking, The GnuPG Team (David, Werner and the other contributors) -- Werner Koch [EMAIL PROTECTED] The GnuPG Expertshttp://g10code.com Free Software Foundation Europe http

Re: gpg-zip?

2006-04-05 Thread Werner Koch
On Tue, 4 Apr 2006 23:47:35 -0700 (PDT), Bjørk said: I've searched the manual and the installation path for gnupg for Windows and I can't find the program or find it mentioned in the manual. Why isn't it included in the Windows version? Because it won't work with Windows. It requires a

[Announce] Gpg4win 1.0.0 released

2006-04-07 Thread Werner Koch
hacking, Jan, Marcus, Timo and Werner -- Werner Koch [EMAIL PROTECTED] The GnuPG Expertshttp://g10code.com Free Software Foundation Europe http://fsfeurope.org Join the Fellowship and protect your Freedom

Re: fetching DE415B0E from sks ([don't know]: invalid packet (ctb=2d))

2006-04-07 Thread Werner Koch
On Fri, 7 Apr 2006 17:53:43 +0200, Peter Palfrader said: I think a --refresh should always try to refresh all keys. As it is in this case - with a key with evil packets on the keyserver - I'm stuck in a situation where gpg --refresh-keys only updates half of my Actually, keyservers should

Re: auto-key-locate pka (gpg version 1.4.3)

2006-04-09 Thread Werner Koch
On Sun, 09 Apr 2006 08:33:39 +0200, Dominique Leuenberger said: That's very bad, as I downloaded the official binaries from gnupg.org. Will there be a different version that supports this new feature? I We don't support DNS queries under Windows right now. Windows does not provide the usual

Re: [Announce] Gpg4win 1.0.0 released

2006-04-10 Thread Werner Koch
On Sun, 09 Apr 2006 19:52:17 +0200, Thomas Hühn said: Is there no current man page included or did I just overlook it? I just checked and indded the page is missing. With the old installer (at ftp.gnupg.org/gcrypt/binary/) the man page is Doc/gpg.man I'll add the man page to the next release

Re: auto-key-locate pka (gpg version 1.4.3)

2006-04-10 Thread Werner Koch
On Mon, 10 Apr 2006 15:19:31 +0930, Alphax said: Will that also include undocumented features like --enarmor? Undocumented? Hmmm. It is not very useful in practise but it has been there for many years. You can expect that it will stay with us. We need it for our regression tests.

Re: More questions about: gpg: WARNING: message was not integrity protected

2006-04-10 Thread Werner Koch
On Sun, 9 Apr 2006 20:12:33 -0400, David Shaw said: AES256 is vastly stronger than most people need in practice. Heck, CAST5 is vastly stronger than most people need in practice. Even so, For some application there is one point which makes AES stronger that CAST5 or similar: AES works on 128

Re: auto-key-locate pka (gpg version 1.4.3)

2006-04-10 Thread Werner Koch
On Mon, 10 Apr 2006 13:37:57 +0100, Adam Funk said: Isn't that an undocumented option too? I've just tried gpg --help |grep dump and man gpg with a search for dump, and they both find nothing. Yes, this is indeed not documented. It stems from some experiments with auto command line

Re: setting the url field of a OpenPGP fails when using gpg-agent

2006-04-11 Thread Werner Koch
On Tue, 11 Apr 2006 14:00:56 +0200, Michael Bienia said: if I try to set the url field of an OpenPGP card using gpg with gpg-agent it fails with the following error: | gpg: sending command `SCD SETATTR' to agent failed: ec=6.32769 | gpg: error setting URL: general error But I can set an url

Re: setting the url field of a OpenPGP fails when using gpg-agent

2006-04-12 Thread Werner Koch
On Tue, 11 Apr 2006 23:43:57 +0200, Michael Bienia said: Looking at the available options for scdaemon, is adding allow-admin into scdaemon.conf the correct solution for my problem? It is safe to use allow-admin? Right. I forgot about this. I introduced --allow-admin to give sysadmins a way

Re: [gpgol] gpgol not working with Outlook 2002]

2006-04-12 Thread Werner Koch
On Wed, 12 Apr 2006 13:15:13 +0200, Storm Ralf said: 1348/GPGol: detected Outlook build version 0xd0625 (13.1573) 1348/GPGol: actual version 0x1030400 (1.3.4.0) 1348/GPGol:virtual version 0x1030400 (1.3.4.0) Outlook calls itself Outlook 2002 (10.6515.6626)

Re: MPI too large

2006-04-13 Thread Werner Koch
On Mon, 10 Apr 2006 14:18:39 -0400, Boyce, Collin said: Error: gpg: mpi too large for this implementation (9 bits) The input file is corrupted. Compare position.txt.pgp against the orginal version at the sender's side. You may use gpg --print-md sha1 position.txt.pgp to get a checksum

Re: Mac OS X - Installing and configuring 'gpg-agent'

2006-04-25 Thread Werner Koch
On Tue, 25 Apr 2006 07:06:02 -0400, Charly Avital said: New to this list. Running Mac OSX 10.4.6 (Darwin 8.6.0), gpg 1.4.3. Installed gpg-agent 1.9.10 using darwin.ports following the instructions That is a pretty old version. - man gpg-agent outputs 'No manual entry for gpg-agent' There is

Key signing at the LinuxTag

2006-04-28 Thread Werner Koch
Hi! This is just a short note, that I will attend the LinuxTag and be available for key signing. The LinuxTag[1] is the largest trade show and conference event in Europe for GNU/Linux related things. It will take place next week From May 3rd to 6th at the Rhein-Main-Hallen in Wiesbaden (close

Re: card inactive

2006-05-02 Thread Werner Koch
On Sun, 30 Apr 2006 16:08:07 +0200, Adrian Friedli said: $ gpg -v --card-status gpg: reader slot 0: using ccid driver gpg: apdu_send_simple(0) failed: card inactive Please run with gpg --debug 2048 --debug-ccid-driver -v --card-status It is likely that the card is indeed broken.

Re: GPG4Palm

2006-05-10 Thread Werner Koch
Moueen BG [EMAIL PROTECTED] writes: the few reliable HIPAA compliant applications for Palm. Now the available applications vary in reliability and show a near complete lack of standardization. The PGP people refuse to make PGP for Palm available even commercially. I am not using a PDA,

Re: Rijndael usage

2006-05-10 Thread Werner Koch
David Gray [EMAIL PROTECTED] writes: What do you mean by raw Rijndael? The output of the cipher not embedded into any protocol (like OpenPGP). Such a protocol needs to specify for example where to put the IV, what key size is used etc. I don't know the CryptStream stuff from C#; it might

<    7   8   9   10   11   12   13   14   15   16   >