Re: PGP encryption
On Mon, Jul 19, 1999 at 01:43:23PM -0600, [EMAIL PROTECTED] wrote: > Hans wrote: >> When implementing PGP base encryption, is this implementation MUST >> use symetrically Algorithms ?? Is it possible to use only the >> public/private key ? > > There currently isn't a way to do it under the OpenPGP Draft. Why would > you want to? Symmetric algorithms are generally one or two orders of > magnitude faster, and as far as we can tell, every bit as secure. You might want to avoid the symmetric algorithms if your treath model includes the cryptosystems being broken. If you use only PK, you are only vulnerable if your PK algorithm fails. If you use PK to encrypt a symmetric key, you are vulnerable both if the PK fails, and if the symmetric algorithm fails. Eivind. [Moderator's note: As has been noted, however, it is actually much harder to produce a secure PK only system because of the nature of various attacks made against such systems. It also continues to be impractical to use such systems because of the slow speed of most PK algorithms, even on modern hardware. Other messages address this topic in more detail --Perry]
Re: PGP encryption
For traditional PGP applications, there was never a good reason NOT to use symmetric algorithms. IDEA is strong, and much faster than RSA, PCs were a lot slower than they are today, and most of the messages people wanted to encrypt were email or files. Also, RSA can only encrypt short strings, e.g. 1024 bits, so any message that was longer would be very awkward using RSA. The overhead in using both algorithms is small - PGP has the IDEA software in it whether you use it or not. But there are applications where you only want to send short messages - credit card numbers or things like that, that can fit in 512 or 1024 bits, and there's some value in using a standard format if you can. At 01:43 PM 7/19/99 -0600, [EMAIL PROTECTED] wrote: >Hans wrote: >>When implementing PGP base encryption, is this implementation MUST use >>symetrically Algorithms ?? Is it possible to use only the >public/private key ? > >There currently isn't a way to do it under the OpenPGP Draft. Why would >you want to? Symmetric algorithms are generally one or two orders of >magnitude faster, and as far as we can tell, every bit as secure. Thanks! Bill Bill Stewart, [EMAIL PROTECTED] PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639
Re: PGP encryption
>Hans asked: > >>When implementing PGP base encryption, is this implementation MUST use >>symetrically Algorithms ?? Is it possible to use only the >public/private key ? At 01:43 PM 7/19/99 -0600, [EMAIL PROTECTED] replied: >There currently isn't a way to do it under the OpenPGP Draft. Why would >you want to? Symmetric algorithms are generally one or two orders of >magnitude faster, and as far as we can tell, every bit as secure. Actually, security is better on the symmetric algorithms, since PK algorithms can be more vulnerable to attack depending on the data being encrypted. They're pretty safe when encrypting random data (i.e. a secret key). Rick. [EMAIL PROTECTED]
Re: PGP encryption
Hans wrote: >When implementing PGP base encryption, is this implementation MUST use >symetrically Algorithms ?? Is it possible to use only the >public/private key ? There currently isn't a way to do it under the OpenPGP Draft. Why would you want to? Symmetric algorithms are generally one or two orders of magnitude faster, and as far as we can tell, every bit as secure. -- Mike Stay Cryptographer / Programmer AccessData Corp. mailto:[EMAIL PROTECTED]
PGP encryption
Hi Folks, When implementing PGP base encryption, is this implementation MUST use symetrically Algorithms ?? Is it possible to use only the public/private key ? I would like more explanation about that! :o) Best regards, Hans...
Re: Mailinglist programs with PGP-encryption?
On Sat, Jan 16, 1999 at 07:40:36AM +0100, Anonymous wrote: > > Jukka E Isosaari <[EMAIL PROTECTED]> writes: > > > Are there any mailinglist programs that would let the > > subscribers to give a public PGP-key for encrypting all the list > > e-mails when subscribing, and that would also handle them > > automatically? > > Of course there is. We use John Perry's PGPdomo for a couple of > private mailing lists, and it should work for you with a little bit of > hacking. It used to be at ftp://vishnu.alias.net/, although C2 > appears to have shut that down (g). A search engine ought to be > able to find another archive... I'm honored! I didn't think anyone was using my code! It's available at ftp://ftp.jpunix.com if anyone else wants it. It's called PGPdomo and anyone that wants it can have it. -- John Perry KG5RG [EMAIL PROTECTED] PGP-encrypted e-mail welcome! Amateur Radio Address: [EMAIL PROTECTED] WWW - http://www.jpunix.com PGP 2.62 key for [EMAIL PROTECTED] is on the keyservers.
Re: Mailinglist programs with PGP-encryption?
On Sat, Jan 16, 1999 at 07:40:36AM +0100, Anonymous wrote: > > Jukka E Isosaari <[EMAIL PROTECTED]> writes: > > > Are there any mailinglist programs that would let the > > subscribers to give a public PGP-key for encrypting all the list > > e-mails when subscribing, and that would also handle them > > automatically? > > Of course there is. We use John Perry's PGPdomo for a couple of > private mailing lists, and it should work for you with a little bit of > hacking. It used to be at ftp://vishnu.alias.net/, although C2 > appears to have shut that down (g). A search engine ought to be > able to find another archive... An addendum... If sufficient interest is shown I will start supporting it again. Enough said. -- John Perry KG5RG [EMAIL PROTECTED] PGP-encrypted e-mail welcome! Amateur Radio Address: [EMAIL PROTECTED] WWW - http://www.jpunix.com PGP 2.62 key for [EMAIL PROTECTED] is on the keyservers.
Re: Mailinglist programs with PGP-encryption?
> Jukka E Isosaari <[EMAIL PROTECTED]> writes: > Are there any mailinglist programs that would let the > subscribers to give a public PGP-key for encrypting all the list > e-mails when subscribing, and that would also handle them > automatically? Of course there is. We use John Perry's PGPdomo for a couple of private mailing lists, and it should work for you with a little bit of hacking. It used to be at ftp://vishnu.alias.net/, although C2 appears to have shut that down (g). A search engine ought to be able to find another archive...
Re: Mailinglist programs with PGP-encryption?
Ask the Oracle for pointers to "pgpdomo". Thanks! Bill Bill Stewart, [EMAIL PROTECTED] PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639
