Re: [RFC] gnupg 1.4.5: old default options file ignored

2008-03-04 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Jari Aalto wrote:
> [Please keep CC, I'm not in this list]

Please JOIN the List:

Gnupg-devel mailing list
[EMAIL PROTECTED]
http://lists.gnupg.org/mailman/listinfo/gnupg-devel

I do not 'Say' this to be a Smart-A** but merely to be constructive in
suggestions.  I, personally, consider it rude to query a Forum for
Answers, Feedback and Announce that You have chosen to not participate
beyond personal, instant gratification. >:o

RANT Concluded!

JOHN :-\
Timestamp: Tuesday 04 Mar 2008, 06:37  --500 (Eastern Standard Time)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9-svn4691: (MingW32)
Comment: Public Key at:  http://tinyurl.com/8cpho
Comment: Gossamer Spider Web of Trust: https://www.gswot.org
Comment: Homepage:  http://tinyurl.com/yzhbhx

iQEcBAEBCgAGBQJHzTSJAAoJEBCGy9eAtCsPjH4H/0TIR7nyyPdSvE0f12A32vKb
gQrEL4XP0Hd7hOqIoish5S/c/2xRG17167d5eYU314EXFsKTlskQkBhTeYZWM1wV
MYqSgY3mPkjxBXI+Bx4eV0iRIlOFqO78o2XDtfXXrZ2W3XTCgpMzOoH0aGfAem56
BI1RzNi5LrZy6oW/BwggSjwZq2IM920Fu2OzqmKlKRIXhOPUmTWfQ9Sc1Hu1m3lg
r9cYX66+I45uNxUvWzfCD7a+RN+9XY4FJb29kLmqw4+pL34DNRtxIghuT7t72+tO
q5XNOPVsi+GhuV8+fkmfG6wzlGWaXSeuPvmmt/OOsxU6mKpt3mkzeKcaeMqcTCw=
=NNbK
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG (win32) on a USB stick

2008-03-04 Thread Andrew Berg

John Clizbe wrote:

Andrew Berg wrote:
  

John Clizbe wrote:

set GNUPGHOME=x:\location\you\want  
  
It would be inconvenient (and inconsiderate to the host machine's 
owner(s)) to set an environment variable on every machine encountered, 
wouldn't it? Sven's idea is much better, I think.


And it shows a clear lack of understanding to think that a SET command at a
Windows command prompt sets an environment variable permanently or globally. The
variable exists in the process environment that invoked the command and those
processes invoked from it.
  


Actually, it shows that I wasn't thinking quite clearly. For some 
reason, I was thinking of something quite different. Sorry about that.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Strength of ciphers in PGP?

2008-03-04 Thread Anonymous
Do anyone have links to comparisons of the ciphers traditionally used in
PGP (IDEA, CAST5, 3DES). Thank you.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


gpg command

2008-03-04 Thread Elmer Espinosa
To whom it may concern,

I'm new with GNUPG. I used the command gpg -s file to encrypt the file. to
decrpyt the file I used gpg -d file, but the output appear only in the
command prompt I was to save it in my local disk I've tried adding the path
of the file but it doesn't work any can help me with this.

Thanks,
Elmer
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


changing location of the home folder from ~/.gnupg to other

2008-03-04 Thread vl.pavlov

hello 2 all

i wander is there a way to change location of my home folder, or at least of
keyring so that default keyring location is changed

any ideas?
-- 
View this message in context: 
http://www.nabble.com/changing-location-of-the-home-folder-from-%7E-.gnupg-to-other-tp15826081p15826081.html
Sent from the GnuPG - User mailing list archive at Nabble.com.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


IDEA not always working in GNUPG

2008-03-04 Thread Anonymous Remailer (austria)

Hi,

I occasionally receive messages encrypted by older PGP versions that are
not being decrypted by GNUPG 1.4.7

[scrubbed] gpg filename
gpg: assuming IDEA encrypted data
Enter passphrase: [scrubbed]

gpg: [don't know]: invalid packet (ctb=67)
gpg: WARNING: message was not integrity protected
gpg: [don't know]: invalid packet (ctb=0a)


Here is the output of gpg --version:

[scrubbed] gpg --version
gpg (GnuPG) 1.4.7
Copyright (C) 2006 Free Software Foundation, Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it
under certain conditions. See the file COPYING for details.

Home: ~/.gnupg
Supported algorithms:
Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA
Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH
Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
Compression: Uncompressed, ZIP, ZLIB, BZIP2

Is this normal behaviour? I'm getting round by using PGP to decrypt IDEA
messages that gpg won't decrypt but gpg does work with some IDEA
messages so I can't figure whats wrong.

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: gpg command

2008-03-04 Thread David Shaw
On Mon, Mar 03, 2008 at 09:07:47AM +0800, Elmer Espinosa wrote:
> To whom it may concern,
> 
> I'm new with GNUPG. I used the command gpg -s file to encrypt the file. to
> decrpyt the file I used gpg -d file, but the output appear only in the
> command prompt I was to save it in my local disk I've tried adding the path
> of the file but it doesn't work any can help me with this.

You want the -o option, as in "gpg -o output-goes-here.gpg -e
file-to-encrypt"

Note that "-s" doesn't encrypt.  It signs.

David

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


IDEA?

2008-03-04 Thread Maury Markowitz
Didn't IDEA's patent expire last year? I notice it's still not in the
list unless I load it by hand. Is there something else preventing it
from being used?

Maury

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Strength of ciphers in PGP?

2008-03-04 Thread David Shaw
On Sun, Mar 02, 2008 at 06:38:13PM +, Anonymous wrote:
> Do anyone have links to comparisons of the ciphers traditionally used in
> PGP (IDEA, CAST5, 3DES). Thank you.

You're not likely to find a comparison between those three ciphers
except in the most light sense of the word.  Certainly not a " is
better than " type of thing.  The question is just more
complicated than that.

I'd read these to get the information you want:

 http://en.wikipedia.org/wiki/International_Data_Encryption_Algorithm
 http://en.wikipedia.org/wiki/CAST5
 http://en.wikipedia.org/wiki/3DES

David

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: IDEA?

2008-03-04 Thread David Shaw
On Tue, Mar 04, 2008 at 11:51:13AM -0500, Maury Markowitz wrote:
> Didn't IDEA's patent expire last year? I notice it's still not in the
> list unless I load it by hand. Is there something else preventing it
> from being used?

It's patented until 2010 (2011 in some places).

IDEA is effectively dead.  I don't mean that as a knock against IDEA -
it was a fine cipher for its time, but time has moved on.  The only
reason to use IDEA is if you want to be compatible with PGP 2
messages.

David

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Strength of ciphers in PGP?

2008-03-04 Thread Robert J. Hansen
Anonymous wrote:
> Do anyone have links to comparisons of the ciphers traditionally used in
> PGP (IDEA, CAST5, 3DES). Thank you.

Yes.  IDEA is Godzilla, CAST5 is Moth-Ra and 3DES is MechaGodzilla.
They all excel at stomping cities flat and terrorizing inhabitants.  All
that people in Tokyo need to know about them is "when you see them
coming, run for the hills."

The above answer is tongue in cheek, but there's a lot of accuracy in
it.  Unless you're a professional cryptographer, the various
cryptanalytic analyses of the OpenPGP cipher suite are going to be
pretty much meaningless and unhelpful.  For 99% of other people--myself
included--it really reduces down to "they are all believed resistant
against all known forms of cryptanalysis, and are impractical to brute
force."

If you really want to go down this road, it would help if you clarified
your question a lot.  What sort of comparisons?  How many operations are
involved in an encryption cycle?  Decryption cycle?  How much processing
is involved in key setup?  Relative size of code?  Hardware
requirements?  Efficiency?  Best known cryptanalytic attacks?  Etc., etc.

Your question, as phrased, is far too general to give any sort of
meaningful answer except "as far as the layman is concerned, they're
pretty much identical".

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: IDEA?

2008-03-04 Thread Robert J. Hansen
Maury Markowitz wrote:
> Didn't IDEA's patent expire last year?

2010, I think.  Even once 2010 comes around, there's no point in using
it.  AES rules the roost for symmetric ciphers nowadays, and for fairly
good reasons.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: changing location of the home folder from ~/.gnupg to other

2008-03-04 Thread David Shaw
On Tue, Mar 04, 2008 at 04:24:19AM -0800, vl.pavlov wrote:
> 
> hello 2 all
> 
> i wander is there a way to change location of my home folder, or at least of
> keyring so that default keyring location is changed

  gpg --homedir /path/to/the/folder
or
  export GNUPGHOME=/path/to/the/folder

David

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: _almost_ working, now a command line question...

2008-03-04 Thread Maury Markowitz
On Mon, Mar 3, 2008 at 5:23 PM, John Clizbe <[EMAIL PROTECTED]> wrote:
>  Been a part of gnupg 1.x for ages. I tested it on XP with GnuPG 1.4.8
>
>  gpg --batch --passphrase-file <> --output <> --decrypt <>

Frigging frig! I had download 1.2.2! Where the heck did I get that?!

Everything is working perfectly now. Thanks to everyone that helped
this noob get up and running. I'll try to repay the kindness by
returning the favor.

Maury

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: [Junk released by User action] Re: Question on subkeys usage and OpenPGP card. - warning, quite lengthy

2008-03-04 Thread Neal Dudley
Already had the revocations generated, but won't send them to the keyserver
until I gen new replacement keys.  Thanks for the reminder, but I have it
covered.  Suppose I should have mentioned that, but I kinda thought it went
without saying.


On 3/4/08 1:23 AM, "John W. Moore III" <[EMAIL PROTECTED]> wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
> 
> Neal Dudley wrote:
>> Sounds like I should just regenerate a new 1024 bit RSA primary signing key
>> and copy it to the card (and an encryption subkey as well, of course).
> 
> Please do the World [& Yourself] a favor and generate a Revocation
> Certificate for the Key you May abandon.  ;)
> 
> If You have 'Sent' the old Key to the Keyservers then Please revoke it
> and "Go Green" by helping the 'Key Landfill' a little bit. :)
> 
> JOHN 8-)
> Timestamp: Tuesday 04 Mar 2008, 01:22  --500 (Eastern Standard Time)
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.9-svn4691: (MingW32)
> Comment: Public Key at:  http://tinyurl.com/8cpho
> Comment: Gossamer Spider Web of Trust: https://www.gswot.org
> Comment: Homepage:  http://tinyurl.com/yzhbhx
> 
> iQEcBAEBCgAGBQJHzOrOAAoJEBCGy9eAtCsPOn4H/A96qvvv9nqskzdHpXA2DP38
> D0Hgq5ZUBBOU7/F2C3OfDpXO/S/BPCsS6f8c4F7M6qnAcVLNoh3zJKs8PdVbMeEa
> vQxFHUMvf0EeRXOHy7Q6n14o8ZUb8f/BRXyzo+skCz8OYfIsXjE6FtDrCie64bQJ
> 1EKg5uY2wllXFVBCOWO0FlSYG67muIP6WkCsFjlz96brx2ptXbReryCOeIIQFmU4
> eff5ygIQsE6r87WVietev3t7foD9/3ZOP2azSGbAbC9aG6IYxooTTGPC+cP5DcK5
> htiGgeog1vZfYweevtnf1AY9gmnK/SIdB9thWN5VI3O0AYUfbmP9TKqaHKxCJp4=
> =nf1n
> -END PGP SIGNATURE-
> 
> ___
> Gnupg-users mailing list
> Gnupg-users@gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users
> 


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: [Junk released by User action] Re: Question on subkeys usage and OpenPGP card. - warning, quite lengthy

2008-03-04 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Neal Dudley wrote:
> Already had the revocations generated, but won't send them to the keyserver
> until I gen new replacement keys.  Thanks for the reminder, but I have it
> covered.  Suppose I should have mentioned that, but I kinda thought it went
> without saying.

Sadly, My experience has shown that it doesn't 'go without saying'. :(

Interestingly, having become the 'Cyber-Executor' for several Friends I
find Myself in the unique position of holding Revocation Certs In escrow
for many Keys.  :-\

My advice is to treat the 'care' of Keys as One would any other Asset
and specify what should be done when inevitable demise occurs.  Store
the Revocation Certs in a Safe place where they will be found along with
written instructions regarding what should be done with them.

JOHN ;)
Timestamp: Tuesday 04 Mar 2008, 16:04  --500 (Eastern Standard Time)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9-svn4691: (MingW32)
Comment: Public Key at:  http://tinyurl.com/8cpho
Comment: Gossamer Spider Web of Trust: https://www.gswot.org
Comment: Homepage:  http://tinyurl.com/yzhbhx

iQEcBAEBCgAGBQJHzblbAAoJEBCGy9eAtCsPS/cIAId1eJGHcWjsogA7Bt38Ac0x
aX9xho2IvddH5F61D2GtOxV128NIlC8vlW44+HP8alItPlMEF260+mvBzjoMCCOW
OWE2NTaA6qGbRVzyMkTCeZRR0IDUp2ejDfEqWNf4SKX1iR/5DfI1VeUh3E0krGSQ
NiRtSRCWS5jy0nFpXmI1FuH3l4QWYI6nsupwnaR7NTPmvH1Ua7YFTZUGSjNmgSQr
k31SKgc6Jd0i4O3YwYC5QPA6jatsxNgP0MrSKtcIZHBb6v3rECWKWeG9Spi60+36
alhd2IP0vnG2eOtwNwrNRPq8d5u7TVdWqqUq3bzzVZah/m1GYscGUQpTLkhmpYg=
=Id85
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users