Re: Card fails to decrypt using 4096-bit key

2012-11-07 Thread Werner Koch
On Wed, 31 Oct 2012 16:17, cor...@corsac.net said: Signing using a 4096R key works just fine, but decryption using an 4096R encryption key doesn't, with the same error. This is using GnuPG v2.0.19 on Debian sid, with pcscd 1.8.6 (in case that matters). I fixed this yesterday for 2.0 and

Re: import trustdb.gpg or start from scratch?

2012-11-08 Thread Werner Koch
On Thu, 8 Nov 2012 09:37, melvincarva...@gmail.com said: Does anyone know if there's a safe way to recover my web of trust, or should I make an ultimately trusted key first, and start from scratch? ssh otherbox rm .gnupg/trustdb.gpg gpg --export-ownertrust | ssh otherbox gpg

Re: ownertrust level of imported secret keys

2012-11-11 Thread Werner Koch
On Fri, 9 Nov 2012 19:33, mailinglis...@hauke-laging.de said: You have imported a secret key. It may be useful (probably if you are the only owner of this secret key) to set the trust level of this key to ultimate (see --edit key trust). That would be easy to implement for GUI frontends.

Re: difference in validity states

2012-11-11 Thread Werner Koch
On Fri, 9 Nov 2012 19:34, mailinglis...@hauke-laging.de said: n = The key is valid f = The key is fully valid What is the difference between the meaning of n and f? The first line has a bug, the second line is correct. Good catch. Shalom-Salam, Werner -- Die Gedanken sind frei.

Re: import trustdb.gpg or start from scratch?

2012-11-12 Thread Werner Koch
On Sat, 10 Nov 2012 20:33, melvincarva...@gmail.com said: gpg --import-ownertrust trustdb.gpg That does not work. --import-ownertrust expects the format as produced by --export-ownertrust. What you can do is to put trustdb.gpg into an empty directy and run the export command: cp

Re: import trustdb.gpg or start from scratch?

2012-11-13 Thread Werner Koch
On Tue, 13 Nov 2012 15:40, melvincarva...@gmail.com said: So I assume when backing up a key you should always back up trustdb too? Yes. Actually eyerything in ~/.gnupg and below should be go into the backup. Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein

Re: import trustdb.gpg or start from scratch?

2012-11-14 Thread Werner Koch
On Wed, 14 Nov 2012 00:27, r...@sixdemonbag.org said: Including random_seed? I've always been under the impression that's a big no-no. Well, it is a backup and assumed to be used after a loss of data and not to replicate the data to several sites. random_seed is a cache file to speed up

Re: import trustdb.gpg or start from scratch?

2012-11-14 Thread Werner Koch
On Wed, 14 Nov 2012 11:34, kue...@googlemail.com said: How do I decrypt my backup in case of a disaster, if the secret key is in the encrypted backup? You surely have your secret key somewhere on a CD or a printout (cf. paperkey), right? Salam-Shalom, Werner -- Die Gedanken sind frei.

Re: import trustdb.gpg or start from scratch?

2012-11-14 Thread Werner Koch
On Wed, 14 Nov 2012 12:15, kristian.fiskerstr...@sumptuouscapital.com said: Is there any configuration option to force the use of /dev/random? I'm You mena, not to use the seed file? gpg --no-random-seed-file Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein

Re: Debian64, gnupg-2.0.19, gpg-agent problems

2012-11-26 Thread Werner Koch
On Fri, 23 Nov 2012 16:58, pe...@asgalon.net said: I am configuring a crypto-stick for use with 4096 bit RSA keys and have run into two problems that look as if they are related to gpg-agent. 4096 bit RSA OpenPGP smartcards do not yet work with released GnuPG versions. There is a reason why

Re: Debian64, gnupg-2.0.19, gpg-agent problems

2012-11-26 Thread Werner Koch
On Mon, 26 Nov 2012 12:56, pe...@asgalon.net said: with 3072 bit RSA keys with either gpg1 or gpg2? Or what type of keys would you recommend if I wanted to give someone with basic linux experience and a need for a reasonable level of communication privacy The answer is simple and been

Re: GPG W32 1.0.6-2 - PRIVATE KEY IMPORT ISSUE

2012-11-29 Thread Werner Koch
On Wed, 28 Nov 2012 17:29, due...@gmail.com said: I downloaded GPG W32 1.0.6-2 on a Windows machine. This is a 11 years old version og GnuPG! You should not use it at all. The cuirrent version is 1.4.12 and a simple installer is available at

Re: Keypad support for PC/SC card readers?

2012-12-03 Thread Werner Koch
On Sun, 2 Dec 2012 10:57, cry...@artemicode.de said: I suppose gnupg tries to detect whether a keypad is available. Is that logged? Which debugging level would be needed. 2.0.19 has support for keypads via PC/SC. Add this to ~/.gnupg/scdaemon.conf log-file /some/file debug 2048

Re: Is it safe to rename file.gpg to `md5sum file`?

2012-12-06 Thread Werner Koch
On Wed, 5 Dec 2012 22:39, sben1...@yahoo.de said: If I wanted to have a fallback for loosing the mapping table, would there be a sane way to encrypt the filename with gpg? That way I could --set-filename string Use string as the filename which is stored inside

Re: WOT and Authentication Research

2012-12-06 Thread Werner Koch
On Wed, 5 Dec 2012 23:15, pa...@cs.ucsb.edu said: And of course the last issue is finding a sane way for user's to store and use private keys. Hence the PSST project and the eventual idea of PSST? That used to be the working title for a free implementation of ssh back in 1997. iirc, I sent

[admin] Mailing lists outage notice

2012-12-06 Thread Werner Koch
Hi, please be prepared that the mailing lists will be down for a few days due to a server upgrade. It would be too much work to move them temporary to another server. FTP will be down as well. The Web, Git, and the BTS should continue to work. Salam-Shalom, Werner -- Die Gedanken sind

Re: Same key on different smart cards

2012-12-13 Thread Werner Koch
On Thu, 13 Dec 2012 08:43, ricu...@gmail.com said: (~/.gnupg/secring.gpg). Thus if I try to use the second card, I get an error telling me to insert the correct card. You need to delete the secret key stub and then gpg should be able to re-create it using the current card. I am not sure about

Re: Elliptic curves in gnupg status?(ECC support)

2012-12-18 Thread Werner Koch
On Mon, 17 Dec 2012 03:14, phonetree...@gmail.com said: Hey, I found the discussion in this newsgroup linked to below. It was last posted to in 2010. Looked like ECC support was coming, but as far as I can tell GPG doesn't support ECC yet. Is it on it's way? It is supported since

Re: Elliptic curves in gnupg status?(ECC support)

2012-12-20 Thread Werner Koch
On Tue, 18 Dec 2012 20:21, phonetree...@gmail.com said: I was not able to find anything in the manual about it though. I searched and searched for the details on how to get on with using it, $ gpg2 --expert --gen-key gpg: NOTE: THIS IS A DEVELOPMENT VERSION! gpg: It is only intended for

[Announce] GnuPG 1.4.13 released

2012-12-20 Thread Werner Koch
author, Werner Koch. Maintenance and improvement of GnuPG and related software take up a most of their resources. To allow them continue their work they ask to either purchase a support contract, engage them for custom enhancements, or to donate money: http://g10code.com/gnupg-donation.html

Re: GnuPG 1.4.13 released

2012-12-21 Thread Werner Koch
On Fri, 21 Dec 2012 11:56, joh...@vulcan.xs4all.nl said: Indeed. Is the IDEA patent expired or so, that this algorithm is now included? * Patents on IDEA have expired: * Europe: EP0482154 on 2011-05-16, * Japan: JP3225440 on 2011-05-16, * U.S.: 5,214,703 on 2012-01-07. IDEA is

Re: GnuPG 1.4.13 released

2012-12-26 Thread Werner Koch
On Mon, 24 Dec 2012 12:47, expires2...@rocketmail.com said: Will you be including IDEA in the 2.x branch as well? Yes, if you use the development version of Libgcrypt. Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz.

Re: ASCII armor plus? - a main reason I find I and some others do not use encryption is that the messages get garbled

2012-12-26 Thread Werner Koch
On Tue, 25 Dec 2012 01:30, phonetree...@gmail.com said: The insertion of hard returns, blank lines, hyphens and so on is an issue I and others I have been trying to get to use encryption multiple times. It is one of the main reasons I don't use encryption Actually the OpenPGP armor format is

Re: ASCII armor plus?

2012-12-26 Thread Werner Koch
On Wed, 26 Dec 2012 13:42, r...@sixdemonbag.org said: When the community's flagship mailing lists cannot reliably use PGP/MIME, I'm a little cautious about recommending PGP/MIME as a general-purpose, ready-for-the-end-user solution. It is a sad time for standards, I know. Let's get rid of

Re: [Enigmail] Problem with automated decryption of encrypted drafts? (Key unlocking popup nightmares)

2013-01-02 Thread Werner Koch
On Wed, 2 Jan 2013 19:50, d...@fifthhorseman.net said: GnuPG 2.x, and there is nothing Enigmail could do about it. AFAIR there is an option in gpg-agent.conf to disable blocking the X session. It is called --no-grab. Do any gnupg contributors have suggestions about the fails to cache my

Re: Paperkey 1.3

2013-01-04 Thread Werner Koch
On Fri, 4 Jan 2013 15:27, joh...@vulcan.xs4all.nl said: CD/DVD-ROMs are going the way of the floppy disc; flash memory is much more reliable than either. Future support of USB ports or memory card FWIW: Some time ago I copied a bunch of ~25 years old 5.25 floppies to a disk. I had only

Re: New packet headers and gpg

2013-01-04 Thread Werner Koch
On Fri, 4 Jan 2013 17:34, singpol...@singpolyma.net said: headers. Such implementations' ouput can be read by gpg, but there's currently no way to convince gpg to talk to them :) I just checked the RFC and it says: If interoperability [with PGP 2] is not an issue, the new packet

Re: gnupg not working with RHEL 4

2013-01-04 Thread Werner Koch
On Fri, 4 Jan 2013 18:34, apadmar...@prounlimited.com said: Can I go ahead and update gnupg from 1.2.6 to 1.4.5 on Red Hat Enterprise Linux AS release 4 (Nahant Update 5)? Is 1.4.5 compatible with this Linux version? I did not find any information regarding this compatibility. GnuPG is

Re: Invalid packet error message

2013-01-08 Thread Werner Koch
On Mon, 7 Jan 2013 22:14, bd9...@att.com said: gpg: [don't know]: invalid packet (ctb=70) Does anyone know what this means? I tried several Google searches but Your input data is corrupted. OpenPGP messages are constructed from several packets, each packets starts with a tag byte

Re: embedded public key in signature as in smime.

2013-01-09 Thread Werner Koch
On Wed, 9 Jan 2013 15:35, o...@mat.ucm.es said: I started to use smime recently and besides its flaws I have to admit that the key interchange is easier (most likely be more insecure) With S/MIME you can send the keys because it is a centralized system and all trust comes the root

Re: Patch for using GPG on 64 bit Matching

2013-01-23 Thread Werner Koch
On Wed, 23 Jan 2013 02:59, aokunl...@gmail.com said: We have 64-bit servers and I was wondering if there is a Patch to apply to gpg so it could run successfully on 64 bit. GnuPG definitely runs on 64 bit boxes. There is only a glitch for big-endian boxes. If nobody complains I plan to do a

Re: Patch for using GPG on 64 bit Matching

2013-01-25 Thread Werner Koch
On Thu, 24 Jan 2013 13:05, joh...@vulcan.xs4all.nl said: Did I miss 1.4.14? You are right, the next version will be 1.4.14. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. ___ Gnupg-users mailing list

Re: 1.4.12 beta installer for Windows

2013-02-01 Thread Werner Koch
On Fri, 1 Feb 2013 15:23, joh...@vulcan.xs4all.nl said: iconv.dll gpg works without that DLL; it only makes sure that i18n works correctly. Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. ___

Re: Feature request for future OpenPGP card: force PIN

2013-02-08 Thread Werner Koch
On Fri, 8 Feb 2013 11:09, pe...@digitalbrains.com said: the same as for the signature key; both are a form of signatures. However, I'm not familiar with the rationale for adding the force signature PIN flag. That is simply a requirement due to the German law about qualified signatures. If

Re: Feature request for future OpenPGP card: force PIN

2013-02-09 Thread Werner Koch
On Fri, 8 Feb 2013 15:18, pe...@digitalbrains.com said: I have an SCM SPR 532 reader with pinpad; I thought the host could not get at the PIN when entered on the pinpad? The way I understood it, the host sends a That is right. However, if for other reasons the PIN is known to the host (used

Re: Problem after going from gpg 1.2.6 to 1.4.5

2013-02-14 Thread Werner Koch
On Thu, 14 Feb 2013 00:00, apadmar...@prounlimited.com said: However, with 1.4.5 we get an encrypted file everything in one line and gets cut at 80th char. With 1.2.6 we used to get an encrypted file in multiple lines with 80 chars per line and was able to see complete file. That pretty

Re: Fw: GPG Decryption Issue

2013-02-14 Thread Werner Koch
On Tue, 12 Feb 2013 09:27, kamalakanna...@tcs.com said: Currently we are using batch command as below to decrypt single files. gpg --batch --passphrase-file E:\Data\qfbi\Navtech\Working\passphrase.txt --output E:\Data\qfbi\Navtech\Working\NJS170203YBBNA.xml --decrypt

Re: default keyring file formats

2013-02-20 Thread Werner Koch
On Wed, 20 Feb 2013 06:05, jw72...@verizon.net said: Hi, David. I appreciated your prompt reply. So with a concatenated keyring in the format foo.pub would I first use a command like the following one if I want to get the keys out of it in order to move No, please don't do that! The API to

Re: Documentation on symmetric key options for GPGME

2013-02-21 Thread Werner Koch
On Thu, 21 Feb 2013 17:19, jtrei...@gmail.com said: own education, is it possible to force the use of AES (or any other cipher) using the GPGME library ? I don't see any parameters on the * Not directly. The usual advise I give is to set a different home directory (gpgme_set_engine_info) and

Re: options files

2013-02-21 Thread Werner Koch
On Thu, 21 Feb 2013 16:50, jw72...@verizon.net said: Can I get a link discussing one or more of a typical situations when options files are used? Thanks I have no link bu at least gpg.conf should always be used to set at least your own signing key and an --encrypt-to key. A keyserver entry is

Re: key ordering choices

2013-02-21 Thread Werner Koch
On Thu, 21 Feb 2013 16:50, jw72...@verizon.net said: The secret keys are listed from the keyring in my gpg homedir. When there are several secret keys, what is the ordering criteria used by gpg to No. Similar to files in a directory on Unix. gpg has no feature to sort them. If you want

Re: Reliably determining that the agent is available and starting it if not

2013-02-22 Thread Werner Koch
On Fri, 22 Feb 2013 01:21, cr...@2ndquadrant.com said: I expected it to be simple to make sure that the a GPG agent (either the gpg-agent program or something like Gnome's built-in agent) were Oh please don't use the latter, that is the cuase for a many problems. You may use gpg-connect-agent

[Announce] Libassuan 2.1.0 released

2013-02-22 Thread Werner Koch
Hello! I am pleased to announce version 2.1.0 of Libassuan. Libassuan is the IPC library used by GnuPG 2, GPGME, and a few other packages. This release adds support for the nPth thread library as used by the current development version of GnuPG. It also fixes some minor bugs and enables

[Announce] Libgpg-error 1.11 released

2013-02-25 Thread Werner Koch
Hi! I am pleased to announce version 1.11 of libgpg-error, a library for common error values and messages in GnuPG components. If you want to use this library for you own project, please chime in and gnupg-devel so that we can discuss whether it makes sense to add a new source identifier. This

Revocation certificate creation (was: options files)

2013-02-26 Thread Werner Koch
On Tue, 26 Feb 2013 01:25, cr...@2ndquadrant.com said: I really wish a 1y or 2y expiry was the default and that gpg prompted you to generate a revcert as part of key generation. I spend a lot of I wish I had done that right from the beginning. The reason why I did not was the fear that then

Re: Questions about OpenPGP best practices

2013-02-26 Thread Werner Koch
On Tue, 26 Feb 2013 08:52, ni...@dest-unreach.be said: It does work from time to time, so when doing a manual --recv-key, I usually get the key within a few tries. But when using e.g. caff (which The problem is that this is a pool of servers and you don't know which one you are currently

Re: Questions about OpenPGP best practices

2013-02-26 Thread Werner Koch
On Tue, 26 Feb 2013 11:19, pe...@digitalbrains.com said: In other words, trusting a certificate authority is currently an all-or-nothing thing where you now trust them to certify any SSL-protected service you connec Right, they are all implicitly cross-signed. In reality there is no

Re: Revocation certificate creation

2013-02-26 Thread Werner Koch
On Tue, 26 Feb 2013 12:45, o...@enigmail.net said: my vote: yes. Non-intrusive information about what next steps should be. When creating a key using Enigmail, it asks the user to save a rev cert. CLI should do the same. You mean printing a hint to create a recovation certificate would be

Re: what is the option for Use this key anyway? (y/N) y

2013-02-26 Thread Werner Koch
On Tue, 26 Feb 2013 13:02, epk14octs...@gmail.com said: But I want to pass this y key in the above command can you please help me which option is exactly used to pass this y value in single command On the comamnd line or in a script? The option --batch disables the interactive mode and --yes

Re: Revocation certificate creation

2013-02-26 Thread Werner Koch
On Tue, 26 Feb 2013 15:16, mailinglis...@hauke-laging.de said: I am a big fan of hints, too. If these get improved / extended an option like --no-hints=all Well, we have the --expert option. If it is used we could assume that a hint is not required. Salam-Shalom, Werner -- Die

[Announce] GPGME 1.4.0 released

2013-02-26 Thread Werner Koch
Hello! I am pleased to announce version 1.4.0 of GPGME. GnuPG Made Easy (GPGME) is a C language library that allows to add support for cryptography to a program. It is designed to make access to public key crypto engines as included in GnuPG easier for applications. GPGME provides a high-level

Re: what is the option for Use this key anyway? (y/N) y

2013-02-27 Thread Werner Koch
On Wed, 27 Feb 2013 07:59, epk14octs...@gmail.com said: I have tried using the --batch--yes and could not be to get the exact --batch and --yes are separate options not one. Please see the man page for details. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein

Re: what is the option for Use this key anyway? (y/N) y

2013-02-27 Thread Werner Koch
On Wed, 27 Feb 2013 11:31, epk14octs...@gmail.com said: [image: Inline image 1] Please don't send an image. Transscript the content. You may also copy and paste it from a Windows shell. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz.

Re: PGP for zLinux [full info]

2013-03-01 Thread Werner Koch
On Fri, 1 Mar 2013 17:04, gcal...@br.ibm.com said: I have sent an email earlier requesting information about the best PGP version to install in a zLinux server. [This is the GnuPG mailing list and not a PGP list]. I don't know wether Symantex provides a version of PGG for this system.

Re: PGP for zLinux [full info]

2013-03-03 Thread Werner Koch
On Sat, 2 Mar 2013 08:16, b...@adversary.org said: list. Since you have already received one reply to all from Werner, this has already happened. I apologize for having being tricked to do a drive by mailing to gnupg-announce. I need to add a check to reject accidental replies to that list.

Re: gpg: Signature made date time tamper resistant?

2013-03-03 Thread Werner Koch
On Fri, 1 Mar 2013 22:47, adrela...@riseup.net said: Or in other words, is the date and time taken from the signers machine clock and signed with the signers private key? Yes. The time of the signature is taken from the hashed area of the signature packet, which means that this is part of

Re: GnuPG future timestamp checks and security

2013-03-04 Thread Werner Koch
On Wed, 27 Feb 2013 17:01, casey.marsh...@gmail.com said: I'm considering ignoring the time checks (--ignore-time-conflict, --ignore-valid-from) due to clock drift being a common problem in my application. That is why we added these options. What was the motivation for adding the timestamp

Re: Public Keys not showing up in Choose Recipients

2013-03-06 Thread Werner Koch
On Tue, 5 Mar 2013 17:45, ivanbrod...@hotmail.com said: program, and this board is the only one I could find. Not that it matters to anyone here, but not resolving this problem in a timely fashion is going to cost me. There is an easy solution to your problem: Consult

Re: OpenPGP card reset procedure

2013-03-07 Thread Werner Koch
On Wed, 27 Feb 2013 14:00, ni...@dest-unreach.be said: sending 4 VERIFY-commands with the same (wrong) PINcode. It next locks the Admin PIN using a similar procedure. Right. According to my understanding, this will ACTIVATE FILE, and next TERMINATE DF. While the spec seems to indicate the

Re: /etc/gnugpg.d/

2013-03-07 Thread Werner Koch
On Thu, 7 Mar 2013 15:44, adrela...@riseup.net said: What about having /etc/gnugpg.d/ where you can drop configuration files just you can drop them into /etc/apt/apt.conf.d/? In general I consider those configuration directories a bad idea. They are nice at the first view because they make

Re: placing trust in imported keys

2013-03-09 Thread Werner Koch
On Sat, 9 Mar 2013 02:26, jw72...@verizon.net said: gpg: Total number processed: 1 gpg: imported: 1 That should be self-explaining. gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model This is the configuration of the WoT; see the man page for options to change

Re: gpg 2.0.19-r1 with libgcrypt 1.5.0-r2 -- Segmentation Fault

2013-03-11 Thread Werner Koch
On Thu, 7 Mar 2013 23:48, robertkotz2...@u.northwestern.edu said: less identical to the one that seems to be broken. I'm running Sabayon, a Sorry, I don't know Sabayon is and a version 1.5.0-r1 is not an original GnuPG version. Thus the problem may be grounded in your system or the pacthed

Re: key length for smart card key generation

2013-03-11 Thread Werner Koch
On Fri, 1 Mar 2013 13:10, bra...@majic.rs said: Now to see if there's any way of using the OpenPGP card through PKCS#11 :) http://www.scute.org Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. ___

Re: Fix for smartcards on some newer linux distros

2013-03-11 Thread Werner Koch
On Sun, 10 Mar 2013 01:10, k...@grant-olson.net said: P.S. Wonder if we can get a better error message since this really has nothing to do with unsupported certificates. Sorry, we can't do much here because gnome-keyring is hijacking the IPC between gpg and gpg-agent. The good news is that

Re: Enterprise Key Management?

2013-03-18 Thread Werner Koch
On Sat, 16 Mar 2013 12:36, a...@guardianproject.info said: This seems like a better application of S/MIME as it, by design, is centralized in the manner you describe. Hwever, with S/MIME you can _only_ do a centralized key management. OpenPGP allows to implement an arbitrary key management

Re: GPG2 and IDEA

2013-03-19 Thread Werner Koch
On Tue, 19 Mar 2013 11:57, chal...@gmail.com said: wget ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.2.4.tar.bz2 That is a pretty old version. You should move to a decent one; at least 1.4.x or better the latest 1.5.1. There is no IDEA support there, regular support is only available in

Re: [Announce] Libgcrypt 1.5.1 released

2013-03-19 Thread Werner Koch
On Tue, 19 Mar 2013 00:08, ou...@sympatico.ca said: Some guidance on how to set up the HMAC256 self-checking correctly might be of assistance. hmac256 is built and installed, but it This is only used for FIPS validation, which has only be done for Linux based systems. If you want to play

Re: GPG2 and IDEA

2013-03-19 Thread Werner Koch
On Tue, 19 Mar 2013 16:56, chal...@gmail.com said: I actually managed to compile just the module and load it dynamically in gpg: I doubt that. Looking at the 2.0 branch I see this in gpg.c: case oLoadExtension: /* Dummy so that gpg 1.4 conf files can work. Should

Re: GET_HIDDEN deprecated in gpgv2

2013-03-21 Thread Werner Koch
On Thu, 21 Mar 2013 10:22, jaimefde...@gmail.com said: I don't understand, I thought that GPA used GPGME not command line, so I dont know how I should use command-fd. I want to avoid the use of pinentry or any other external graphical tool. It is not about the command line but by complying to

Re: IDEA License

2013-03-25 Thread Werner Koch
On Mon, 25 Mar 2013 13:46, chal...@gmail.com said: is the IDEA algorithm licensed? Under which conditions am I allowed to use the idea extension in a commercial product? I assume your question is: Is the IDEA algorithm patented? It was patented and this was one or the main reasons to develop

Re: IDEA License

2013-03-25 Thread Werner Koch
On Mon, 25 Mar 2013 16:00, chal...@gmail.com said: I have to use GnuPG 1.4.10 and a self compiled idea.c from here You better use 1.4.13. ftp://ftp.uwsg.indiana.edu/linux/gentoo/distfiles/idea.c.gz so the question is .. can I ship the idea shared object with my software? The idea.c

Re: IDEA License

2013-03-26 Thread Werner Koch
On Tue, 26 Mar 2013 01:38, j...@berklix.com said: So to wikipedia, after Japan I appended expired 2011-05-16 I could edit in an href'd citation to wikipedia, if URL known ? I don't know; the dates are by Ulrich Müller ulm at gentoo.org Shalom-Salam, Werner -- Die Gedanken sind frei.

Re: Mail-Followup-To

2013-03-28 Thread Werner Koch
On Wed, 27 Mar 2013 19:27, pe...@digitalbrains.com said: Whether you like the headers Bernstein created or not, it would seem Werner didn't want to be on the recipient list, which is why I brought it up The thing is that I put most mailing lists I am subscribed to on Gnu's

Re: Non-interactively create subkey?

2013-03-28 Thread Werner Koch
On Thu, 28 Mar 2013 02:44, mailinglis...@hauke-laging.de said: echo addkey$'\n'8$'\n'e$'\n'q$'\n'2048$'\n'1y$'\n'save$'\n' | LC_ALL=C gpg --expert --batch --passphrase foo --command-fd 0 \ --edit-key $x_short_id Which only works with specific GPG versions; don't rely on that. The

Re: Mail-Followup-To

2013-03-30 Thread Werner Koch
On Sat, 30 Mar 2013 03:20, j...@berklix.com said: A person at my site regularly uses an EXMH on a slow X display started from xdm, with AMD + NFS ~/mail/ on a faster server, works fine. Slow in the mid 90ies was an ISDN data rate and a high latency due to too many hops. It was barely

Re: Why does gpg use so much entropy from /dev/random?

2013-04-02 Thread Werner Koch
On Sun, 31 Mar 2013 11:45, philip.g.pot...@gmail.com said: Can anyone shed any light on this? Why does GPG use more entropy than /dev/random says it should? Which /dev/random - there are hundreds of variants of that device all with other glitches. Thus GnuPG has always used /dev/random only

Re: Create subkey that will expire in 10 hours

2013-04-04 Thread Werner Koch
On Wed, 3 Apr 2013 18:54, di4...@nottheoilrig.com said: How can I create a new subkey that will expire in just 10 hours? When I'm prompted to specify how long the key should be valid I tried entering 10h or 0.42 but it complained that both are invalid. Enter seconds=36000 for 10 hours.

Re: Create subkey that will expire in 10 hours

2013-04-04 Thread Werner Koch
On Thu, 4 Apr 2013 12:44, pe...@digitalbrains.com said: of days, weeks, month or years. The special notation seconds=N is also allowed to directly give an Epoch value. Without a letter days are assumed. Note that there is Although I interpreted it to mean the number of

Re: gpgme fails encrypting on 64bit debian

2013-04-10 Thread Werner Koch
On Wed, 10 Apr 2013 10:54, simone.pagangr...@gmail.com said: gcc -m64 -D_FILE_OFFSET_BITS=64 -g test2.c -lgpgme -L/usr/lib/x86_64-linux-gnu -lgpg-error -o test2 Why do you want to tweak gcc options if you are anyway on a 64 bit system? Also they seem to be harmelss, hast gpgme been build with

Re: gpa reports error: Unsupported Protocol

2013-04-11 Thread Werner Koch
On Wed, 10 Apr 2013 23:36, je...@seibercom.net said: GPA continually displays an error screen when I start it. The screen Does gpa --disable-x509 help? Do you have gpgsm installed (run: gpgsm --version)? Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein

Re: Reading key capabilities information before importing a key

2013-04-11 Thread Werner Koch
On Thu, 11 Apr 2013 00:28, mailinglis...@hauke-laging.de said: 2) You import the key but direct it to a different keyring, see --keyring --secret-keyring --primary-keyring --no-default-keyring You better use a temporary directory. This is far easier than to play with all the options and it

Re: gpa reports error: Unsupported Protocol

2013-04-11 Thread Werner Koch
On Thu, 11 Apr 2013 11:53, je...@seibercom.net said: Yes, that corrects the problem, but why. Shouldn't it work without that hack? Yes. Actually I recall hat I fixed a bug related to this some time ago, but this should be in the release. Do you have any X.509 keys? gpgsm should auto-import

Re: gpa reports error: Unsupported Protocol

2013-04-11 Thread Werner Koch
, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. From 1d0c51e92875e0548968c38cca8b65ef5559cbc0 Mon Sep 17 00:00:00 2001 From: Werner Koch w...@gnupg.org Date: Thu, 11 Apr 2013 21:16:15 +0200 Subject: [PATCH] Do not bail out if libgpgme has no support for GPGSM. * src

Re: Reading key capabilities information before importing a key

2013-04-12 Thread Werner Koch
On Fri, 12 Apr 2013 03:00, mailinglis...@hauke-laging.de said: That is an inconsistent explanation. If --list-packets can show data from signatures without checking the signatures then obviously --with-colons It does not show that. It dumps the packets. The key capabilities need to be

Re: Extracting the session key using gpme?

2013-04-17 Thread Werner Koch
On Mon, 15 Apr 2013 20:01, _...@lvh.io said: I need to make many existing documents available to a new recipient by revealing the session key to them (in an encrypted message, of course). I Yeah, there is long standing request to add a feature to to that directly in gpg. gpgme. The

Re: Extracting the session key using gpme?

2013-04-18 Thread Werner Koch
On Wed, 17 Apr 2013 19:38, _...@lvh.io said: Or, perhaps more specifically: what I want isn't wrong, but the only way to accomplish it is using the gpg command line tool, there are good reasons for this, and I should just use the gpg command line tool? :) Exactly. gpg has 323 commands and

Re: gpgme fails encrypting on 64bit debian

2013-04-18 Thread Werner Koch
On Thu, 18 Apr 2013 09:33, simone.pagangr...@gmail.com said: from the debug info is that the encryption is successful but then there's an error right after(?). Thanks for your help, it's really appreciated! Here is the interesing part (I removed the hex parts): _gpgme_io_read (fd=0x4):

[Announce] Libgcrypt 1.5.2 released

2013-04-18 Thread Werner Koch
Hello! The GNU project is pleased to announce the availability of Libgcrypt version 1.5.2. This is a maintenance release for the stable branch. Libgcrypt is a general purpose library of cryptographic building blocks. It is originally based on code used by GnuPG. It does not provide any

Re: [OT] X.509 vs. OpenPGP (was: Please fix subscribe at ...)

2013-04-19 Thread Werner Koch
On Fri, 19 Apr 2013 00:28, do...@dougbarton.us said: This whole thread is wildly off topic for this list. Can people please stop replying to it? Given that GnuPG provides a full X.509 managemnet tool, I don't consider this entirely off topic. However, I would appreciate if people strip the

2.0.20 beta available

2013-04-24 Thread Werner Koch
Hi, it is now more than a year since we released 2.0.19. Thus it is really time to get 2.0.20 out of the door. If you want to quickly try a beta you may use: ftp://ftp.gnupg.org/gcrypt/alpha/gnupg/gnupg-2.0.20-beta118.tar.bz2 Please send bug reports only to the mailing list. Noteworthy

Re: random_seed - no locks available

2013-04-30 Thread Werner Koch
On Mon, 29 Apr 2013 23:29, hhhob...@securemecca.net said: reading and it is non-blocking. Why it should be there at all when you are really locking nothing (len=0) is a bit of a mystery. The length was probably set from a file stat. len==0 means to keep a lock from the start position to the

[Announce] GPA 0.9.4 released

2013-05-01 Thread Werner Koch
Hello! We are pleased to announce GPA version 0.9.4. GPA is a graphical frontend for the GNU Privacy Guard (GnuPG, http://www.gnupg.org). GPA can be used to encrypt, decrypt, and sign files, to verify signatures and to manage the private and public keys. You can find the release here:

[Announce] GPGME 1.4.1 released

2013-05-01 Thread Werner Koch
Hello! I am pleased to announce version 1.4.1 of GPGME. GnuPG Made Easy (GPGME) is a C language library that allows to add support for cryptography to a program. It is designed to make access to public key crypto engines as included in GnuPG easier for applications. GPGME provides a high-level

Re: Confusion with signature digest type.

2013-05-02 Thread Werner Koch
On Thu, 2 May 2013 06:48, r...@sixdemonbag.org said: thinking of these problems, and if-and-when Werner and g10 Code decide to shift the default behaviors I'm certain it will be towards a stronger hash algorithm. We always tried to make sure that new algorithms are deployed for a long time

Re: [Announce] GPA 0.9.4 released

2013-05-02 Thread Werner Koch
On Thu, 2 May 2013 00:56, ou...@interlog.com said: w - does the new GPA work with win7-64? Sure it has always worked with it. What does not work with 64 bit versions of Windows is GpgOL (Outlook plugin) [1] and GpgEX (Explorer plugin). If you encountered a problem with GPA in the 1.1.1-beta

Re: Suggest please

2013-05-03 Thread Werner Koch
On Fri, 3 May 2013 14:29, kibl...@gmail.com said: It is not appropriate for us to have several public-private-keys. Although I don't consider this a good idea: You may give a copy of the private key to all persons who need to decrypt the files. In general such a group owned private key is not

Re: Web of Trust in Practical Usage

2013-05-06 Thread Werner Koch
On Sun, 5 May 2013 08:43, ndk.cla...@gmail.com said: But since the slow part of key generation is the primes selection, you could speed it up just recycling primes from different keys. 2.1 already does something similar. Because the keys are generated by the gpg-agent daemon the prime cache

Re: Libgcrypt (hopefully not OT)

2013-05-06 Thread Werner Koch
On Fri, 3 May 2013 23:27, robe...@broadcom.com said: I am using Libgcrypt 1.5.2 with gcc v 4.5.3 on Cygwin to use the MPI functions. Can you please provide some guidance on how to handle signed and negative MPIs? I cannot seem to get a negative MPI, which Negative numbers are supported by

Re: How can I extract the --embedded-filename for scripting?

2013-05-08 Thread Werner Koch
On Wed, 8 May 2013 13:36, pe...@digitalbrains.com said: couldn't use standard out. This is a crude way to get the status-fd stuff in a file as you mention: $ gpg --status-fd 3 --use-embedded-filename foo.gpg 3foo.status That is not crude but a standard Unix pattern. Shalom-Salam,

Re: gnupg 2.0.20 on osx

2013-05-11 Thread Werner Koch
On Sat, 11 May 2013 20:05, so...@dersonic.org said: any suggestions? Yes, please apply the patch below. Seems nobody tried to build the beta on an Apple. Salam-Shalom, Werner From 8ddf604659b93754ffa6dea295678a8adc293f90 Mon Sep 17 00:00:00 2001 From: Werner Koch w...@gnupg.org Date

<    3   4   5   6   7   8   9   10   11   12   >