Re: Purchasing OpenPGP cards, card-readers to support GnuPG

2015-02-11 Thread Dave Pawson
I was hoping that long thread might suggest the same.
Quite willing to support GPG via a purchase,
but so little information is available...

regards DaveP

On 11 February 2015 at 15:35, taltman taltm...@stanford.edu wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 I'd like to both support the GnuPG project, and acquire an OpenPGP card
 and card reader.

 Is there any way to purchase these items where a portion of the proceeds
 goes to supporting GnuPG?

 Thanks,

 ~Tomer

 - --
 - 
 - ---

 Encrypted email preferred.
 http://taltman.sdf.org/public_key.asc
 Key fingerprint = DFE8 7D60 D452 9C4F 5D1F  7515 F55F BB30 1719 7991
 -BEGIN PGP SIGNATURE-

 iQIcBAEBCgAGBQJU23aqAAoJEMAutzpeVLZSxN8P/RZdL4+kzmRtjow5MfshaWfX
 cmZKxystchC8obkXg1jTxD5TFfQMccgkzC1ans1aRWtUjSJakmcrzsgq4F3ibCHO
 bRk0G9snXU7gdSMSOHfsJI0IMO29Sile/LmxqTXFRZWayM6m+71J0vsDHFcc65TR
 GMgvms6/6fL/4XrhL3TXHKdaUcwq1GAhzT3bBd0ERrJjr71q+CeVvsjBAswkqBYO
 TEo8e87wg/c2wYyE6tFhqinbTzIKukom4WMoRbWWU6LpdoZ1F9wFvDuc446J5R7D
 aQ+1LhDutYol6g97C1ZXqZYG0zEsrqdjqUGkh3lfpH9DW39GEOFhJCPakoFnrerS
 UEA4rn+UXyr3G2GXDQpck49Ks4TGSRudyvw8Frnuw8FH+MwU8W8ygdMJ5Pf657tB
 siYNKD9G/g4d5miH+7DDte+T35I+EQyp86oko97qFYhNUDUKFn6Zm2aSV9G0XuSY
 fROyFMKBZ3qlOScyG8tbaBEYZziQC8T4KNEomv0R5Tvm2scnfKqKd1bIHhvqe7mn
 VPfvNuaxidLMVqtITQSshFd2RpruhCHt1Vyd5q/cU1EgiDlxy/SluyqVit05SicX
 fRCNUE2ZtSvaxPoIwU+LSDWGg0+OPsP2whjjB+Fh3GsArAWfrVPyXCQg9t++f+AA
 YfchIHRrd4NQJiOLpDtn
 =zpRT
 -END PGP SIGNATURE-


 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Are there cases where gpg --verify will exit 0, even if verification failed?

2015-01-14 Thread Dave Pawson
In Unix terms, a program that has run successfully to completion
exits with status zero, no 'extra' semantic attached?

Dave

On 13 January 2015 at 19:03, Patrick Schleizer
patrick-mailingli...@whonix.org wrote:
 In another thread...

 Werner Koch
 On Mon, 12 Jan 2015 19:52, patrick-
 When it exits 0, then this approach is sound, sane and fine?
 You better check the status lines; in particular watch out for

   [GNUPG:] VALIDSIG E4B868C8F90C.

 or use gpgv.

 Are there cases where gpg --verify will exit 0, even if verification failed?

 (Suppose one uses a separate --homedir where only legitimate signing
 keys are imported.)


 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Symmetric encrypt many files (batch mode)

2015-01-02 Thread Dave Pawson
If you can get a list (comma, space separated) of the files, bash
would do it nicely?
  whatever you do, you'll need that?
then obtain the basename, $bn and use a for each on the list?

HTH

On 2 January 2015 at 19:34, Egon cvimai...@gmail.com wrote:
 Hi All!

 I want to symmetrically encrypt many hundreds of files under Linux, the
 files stored in many subdirectories. I am looking for a shell script which
 can do it for me. What is the simplest way to do it?

 Best regards, Egon


 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


MOOC's

2014-12-29 Thread Dave Pawson
https://www.futurelearn.com/courses/introduction-to-cyber-security

Starting shortly, free Open course on cyber security.

regards

-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: File Encryption

2014-12-20 Thread Dave Pawson
Hi Gus. Using symmetrical encryption I do just that
on Linux, without the GUI?

With a small bash script, you could filter out just the entry you want too.
  I currently do it with Python and their encryption, but want it for
my windows box and Linux, hence gpg.

e.g. unlock is

source lockp.sh # parameters
#usage=Usage $0  #  creates $plnfile.txt

if [[ ! -f ${target}/${encfile} ]]
then
echo Unable to find  $1
exit 2
fi

# File $1 exists, has .gpg extension, create .txt
echo Decrypt CAST5 encrypted file $1
echo gpg --output ${target}/${plnfile}  --decrypt ${target}/${encfile}
gpg --output ${target}/${plnfile}  --decrypt ${target}/${encfile}
ckexit gpg

echo Created ${target}/${plnfile}
more ${target}/${plnfile}


with params shared (encrypt / decrypt) as
# params for lock.sh and unlock.sh
source ~/bin/dpFunctions.sh
target=/apps/Dropbox/fp
plnfile=test.txt
encfile=test.gpg

nb dpfunctions are pure bash.

Let me know if you want more.

HTH

On 19 December 2014 at 22:20, Gus Zernial gus_zern...@yahoo.com wrote:
 I'm a home user of Linux. I'm looking for an encryption utility for my
 personal password file, preferably one with a graphical user interface.

 After initial encryption of the file with a master password, I'd like to be
 able to decrypt and display the cleartext file, using my master password,
 without destroying the underlying encrypted file. Accordingly, when I close
 the cleartext version it ceases to exist, leaving only the pre-existing
 encrypted file.

 With what program and/or how can I do this?

 Thx, Gus


 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users




-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: [Announce] GnuPG 2.1.1 released

2014-12-18 Thread Dave Pawson
, be it
 testing, coding, translating, suggesting, auditing, administering the
 servers, spreading the word, and answering questions on the mailing
 lists.

 Finally, a big Thank You to all who helped greatly by donating money.


 Salam-Shalom,

Werner

 --
 Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.

 ___
 Gnupg-announce mailing list
 gnupg-annou...@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-announce
 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users




-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG and g10 code

2014-12-17 Thread Dave Pawson
Not meant as a critique of the content, just pointing out that
it does not explain 'why' and 'what' the card and software (as a system) do
for the reader new to the idea. It may be accurate technically.

Dave



On 17 December 2014 at 00:35, Peter Lebbing pe...@digitalbrains.com wrote:
 On 16/12/14 13:26, Dave Pawson wrote:
 What about:

   https://en.wikipedia.org/wiki/OpenPGP_card

 (IMHO) pure geekery copied from one of the other pages?

 Hmmm, that article seems lacking. If you would have asked nicely, I might have
 bothered to improve it. Now, I don't feel inclined to do it. I'll get around 
 to
 it one day.

 Peter.

 --
 I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
 You can send me encrypted mail if you want some privacy.
 My key is available at http://digitalbrains.com/2012/openpgp-key-peter

 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG and g10 code

2014-12-16 Thread Dave Pawson
Hi Werner.
1. I knew nothing about this smart card.
2 Searched on Google. Found http://shop.kernelconcepts.de/product_info.php

from there I see For more information, please visit this products webpage.

Sadly that page is 404
http://www.hidglobal.de/products/readers/omnikeyindex.php?id=20

Where can I read a user view of this product and software please?

regards


On 16 December 2014 at 09:06, Werner Koch w...@gnupg.org wrote:
 On Mon, 15 Dec 2014 13:02, br...@minton.name said:
 Thanks for the good work! Do you get any income from kernel concepts with
 sale of the OpenPGP smart cards? I prefer to buy products from for-profit
 companies, and donate only to charities / nonprofit organizations.

 Initially I distributed few hundreds cards myself; however this is a lot
 of work given that my business is not setup for distributing small
 physical goods.  Thus I asked Petra of kernelconcepts whether they want
 to do take care of it.  They do not make a lot of profit from the cards
 and thus I do not ask for a share of it.

 g10 Code is not a charity but there have been talks on how to set up a
 charitable entity to support crypto projects.  I hope that we can
 establish this by next spring.  In the meantime you may donate to the
 Wau Holland Stiftung https://www.wauland.de/en/donation.html#61 which
 is a charity and will use these donation to pay for development work on
 GnuPG.


 Salam-Shalom,

Werner

 --
 Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: OpenPGP card (Was Re: GnuPG and g10 code)

2014-12-16 Thread Dave Pawson
On 16 December 2014 at 11:31, MFPA
2014-667rhzu3dc-lists-gro...@riseup.net wrote:

 from there I see For more information, please visit
 this products webpage.

 Sadly that page is 404

 Try https://shop.kernelconcepts.de/product_info.php?products_id=42.

Which links on to the GNU pgp page?

all written by techies, for techies?

Nothing to explain what it's all about, how it might be used,
why it is useful etc?

IMHO that class of  information would help to raise interest.
My first question was, can I install a reader and use 'my' card
to log on to my computer? No idea.
Next? What else can I use a card/card reader for? Not answered.

regards



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG and g10 code

2014-12-16 Thread Dave Pawson
On 16 December 2014 at 12:16, Werner Koch w...@gnupg.org wrote:
 On Tue, 16 Dec 2014 11:11, dave.paw...@gmail.com said:

 1. I knew nothing about this smart card.
 2 Searched on Google. Found http://shop.kernelconcepts.de/product_info.php

 What about:

   https://en.wikipedia.org/wiki/OpenPGP_card

(IMHO) pure geekery copied from one of the other pages?



 and the second section of

   https://gnupg.org/documentation/howtos.html

https://gnupg.org/howtos/card-howto/en/smartcard-howto-single.html#id2456468

Note how quickly it gets into using GPG? Then into software installation?
Missing, the layer above this, the marketing 'spiel'.

OK, it could be me (I don't think it is).

Simple question, WTF is thing all about? I have lots of credit cards
(are they smart? No idea).
I know what to do with them. I think this thing is different, so my
first question is what is it for?
Why should I be interested, what can it do (especially as it
costs?80 Euro with reader?)

As if you are talking to your little sister (big sister, anyone one
non-geek :-) tell me (us)
what it offers?

I'll shut up now sorry/

regards







 Shalom-Salam,

Werner


 --
 Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.




-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Linux and windows mix?

2014-12-13 Thread Dave Pawson
I asked a few weeks ago about sharing an encrypted
file between windows and Linux boxes.

Lots of hassle uninstalling an old version of gpg4win (I had to stop
the service prior to deleting / uninstalling), but now
working well.

Thanks for the suggestion.

Bash/shell scripts available if wanted.

regards

-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Cross platform working

2014-12-09 Thread Dave Pawson
I'm looking at sharing an encrypted file, Linux to 64 bit windows.

It seems that a Windows version isn't available, is this right please?
Lots of similar names, nothing from GNU?

TiA

-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Cross platform working

2014-12-09 Thread Dave Pawson
Thanks - I'll try it.

regards Dave P

On 9 December 2014 at 08:26, kendrick eastes keas...@gmail.com wrote:
 per https://www.gnupg.org/download/index.html that would be GPG4win (
 http://www.gpg4win.org/), there is only an x86 exe, but it works just fine
 on x64 windows.

 On Tue, Dec 9, 2014 at 1:07 AM, Dave Pawson dave.paw...@gmail.com wrote:

 I'm looking at sharing an encrypted file, Linux to 64 bit windows.

 It seems that a Windows version isn't available, is this right please?
 Lots of similar names, nothing from GNU?

 TiA

 --
 Dave Pawson
 XSLT XSL-FO FAQ.
 Docbook FAQ.
 http://www.dpawson.co.uk

 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users





-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Symmetrical encryption or ...

2014-11-22 Thread Dave Pawson
https://launchpad.net/ubuntu/+source/keepass2

Looks like Ubuntu only?

Not found for Fedora.

I'll stick with symmetric for now.

Thanks Jason

On 22 November 2014 08:47, Jason Antony alexander...@gmail.com wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 On 2014-11-22 18:54, Dave Pawson wrote:

 I installed keepassx. Not much use to me. 1. Illegible with my
 eyesight (reported to them) 2. Insufficient fields (seems to be non
 expandable).

 Try Keepass2 (official). It worked fine for me when I last used Linux,
 and requires the Mono runtime. Fonts are adjustable, and the auto-type
 (requires the xdotool package for Linux) will fulfil the wishes you
 had stated earlier.

 All the best,

 Jason
 -BEGIN PGP SIGNATURE-

 iQIcBAEBCgAGBQJUcE22AAoJED1Q2DsLuMaGC9oQAIRgnf0bZ5/m1ZADwkLMe9GV
 6pytc9ThExmRFUYNstHOdl7UHY+dgXzIvhszcyZsSDAMLG2zHrdIuWEoud429qol
 6Mu7Xp44wQfmlqMCPi7zX69YgnZo2E/I5Wwi10hPhcy80UGprkilMbHl9DrR6m5q
 40nFas6FQG6dOG6OHZPizUc7JI6/bdJhH0NxLoBnSynoqvsnEQvpDnufzXqQZRUa
 GYV5n0pO3OUPTXSWxtJKWVWdNdUQGe+16pyPPdrc+7WLJkFGQ42ZxxxQYTTskt+M
 IFnJu8QnQ31vn0ydpia7cagOYvYohPfkai84rFHNEioeKY5JUsS3N3u9l4j0NM5Q
 6howXRnxINfKZ3u0XrEEvXBiZy6jBFwfeofqrGGLveP2HuaLxRDhjpmhJqdad4VK
 Ccc/4B0CYFNMi4sYctKGEd83MYQdDNu4+4XJWbgVrddsxQXbrks6GBwv7q7aSoif
 SUCasJwZHK9xa2OWoSUixlkmZ9TwviixphbagvulABmaW0JIAux9o7CwnxfvRf2r
 SLm5mXQIY3L9f3iX/gqwXiBjrMNk4mOKutAJel2DcKWDa+3kh6mlWHMKxD9uYi6c
 E3Hvg26XI2fe+cjJ87nyMGrxGdK/8BEHJKAs02tCK7af3plCcqd+nUhpP8cspM2A
 u3pLdGRT4dMI4NdiNSM6
 =VeTD
 -END PGP SIGNATURE-

 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Symmetrical encryption or ...

2014-11-21 Thread Dave Pawson
Thanks Robert. I'll give it a try.

regards Dave P

On 21 November 2014 18:24, Robert J. Hansen r...@sixdemonbag.org wrote:
 Only I use the two machines, but need the file encrypted.

 Any alternatives to symmetrical encryption of a file?


 Not really.  Sym would appear to be ideal for your use case.


 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Symmetrical encryption or ...

2014-11-21 Thread Dave Pawson
1. A matter of trust (low)
2. One mc is Linux, the other windows - they tend not to mix?

Tks, Dave

On 21 November 2014 18:36, Schlacta, Christ aarc...@aarcane.org wrote:
 For a password safe you might look into existing solutions, such as
 keepass(x) or other similar password storage solutions

 On Nov 21, 2014 10:29 AM, Dave Pawson dave.paw...@gmail.com wrote:

 Thanks Robert. I'll give it a try.

 regards Dave P

 On 21 November 2014 18:24, Robert J. Hansen r...@sixdemonbag.org wrote:
  Only I use the two machines, but need the file encrypted.
 
  Any alternatives to symmetrical encryption of a file?
 
 
  Not really.  Sym would appear to be ideal for your use case.
 
 
  ___
  Gnupg-users mailing list
  Gnupg-users@gnupg.org
  http://lists.gnupg.org/mailman/listinfo/gnupg-users



 --
 Dave Pawson
 XSLT XSL-FO FAQ.
 Docbook FAQ.
 http://www.dpawson.co.uk

 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Symmetrical encryption or ...

2014-11-21 Thread Dave Pawson
Thanks Doug

On 22 November 2014 02:37, Doug Barton dougb@dougbarton.email wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA256


 Either symmetric or PK encryption would suit your needs, but as
 someone pointed out already, a better solution is to use a password safe.

 KeePass is an excellent solution, and I use the same password db
 between Windows, Linux, and OS X (not in that order). :)  You want to
 use the lowest common denominator format between those systems, which
 at this point is the 1.28 version for Windows, and the keepassx
 version that comes with most Linux distributions (I use Ubuntu
 primarily).

Noted.

typically Secure access requires n items, login/pwd/mothers maiden
name/ inside leg measurement etc... Can keepassx store a list of
key:value pairs?
  I know some systems are restrictive in this area. I'm currently
running Python code which dumps the dictionary content for use, direct
from the decryption.


So where do you store the data? Online for access from 3 machines? Dropbox?
   Seems an unnecessary exposure. I'll have a look.


  And obviously you don't want to use solutions like
 LastPass, where your stuff is stored in their cloud. The question of
 What if they get hacked? is no longer academic, since it happened
 recently.

Yes...


 For synchronization between systems I use SpiderOak, which also has
 clients for all 3 platforms. KeePass already encrypts the db file, and
 SpiderOak, unlike most cloud storage platforms, encrypts the files
 it backs up locally (on your system) with a special key that the
 company does not know.

Another exposure? At least with a symmetrical encryption the files are
only local... (Am I being too cautious?)



 http://keepass.info/index.html

 https://www.schneier.com/blog/archives/2014/09/security_of_pas.html

 If you use this link to sign up for SpiderOak, I get free space. :)
 https://spideroak.com/signup/referral/25c4971714a13f13c24fa98a43317dc2/

Thanks Doug. More options.



 -BEGIN PGP SIGNATURE-
 Version: GnuPG v2

 iQEcBAEBCAAGBQJUb/bPAAoJEFzGhvEaGryEq9EH/0pwRxi7PpJMlJs9yGOvdcBO
 +oqL6uJ99U72kdmUeznLzSewN5pHJoKB26gHAqs2WvNnoNGDOfRKz89ijKxCOWbE
 8uJfz+AEqDJLe6CdLXSVTTa8SdLDydYUqrQZuV3aPxVPCCA91I4vi0HVB3MAlqLV
 ndOEaX6wP6/GCqVDkHUDQ9V37jmFHa7jl2RKFXj5BRL31ztQuqVQ4VlCiVbZFvje
 aipBL8p1l9EBdEUdQIM7tnykeP9EY+0F5zQmSqAuxxk+CFKQZBJ2FqZN1bnvi5OC
 QQFaUy4sGQKdI/uoOQOVM5YHXzQxJ6tZY1zFUudQwcs/Sdi2EQkRZQVOpMHeeqQ=
 =dI3t
 -END PGP SIGNATURE-


 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Symmetrical encryption or ...

2014-11-21 Thread Dave Pawson
I installed keepassx. Not much use to me.
1. Illegible with my eyesight (reported to them)
2. Insufficient fields (seems to be non expandable).

regards

On 22 November 2014 02:37, Doug Barton dougb@dougbarton.email wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA256

 On 11/20/14 10:40 AM, Dave Pawson wrote:
 | Requirement. Two machines (one Linux, one Windows).
 |
 | I want a secure file 'shared' between them, as a pwd-safe.
 |
 | Only I use the two machines, but need the file encrypted.
 |
 | Any alternatives to symmetrical encryption of a file?

 Either symmetric or PK encryption would suit your needs, but as
 someone pointed out already, a better solution is to use a password safe.

 KeePass is an excellent solution, and I use the same password db
 between Windows, Linux, and OS X (not in that order). :)  You want to
 use the lowest common denominator format between those systems, which
 at this point is the 1.28 version for Windows, and the keepassx
 version that comes with most Linux distributions (I use Ubuntu
 primarily). For OS X it gets a little trickier, since the version that
 includes auto-type is community sourced, but the person who produces
 it is well trusted, and a lot of people use it.

 Schneier had an interesting blog post recently about password safes,
 with a link to papers that did extensive research on them. KeePass
 came out looking pretty good, as one of the key problems with most
 password safes is that if the auto-type is truly automatic, it can be
 triggered by malicious software and grab your passwords off the
 clipboard in windows. While KeePass does have an auto-type feature,
 you have to trigger the key sequence to use it, and that sequence is
 user-configurable. And obviously you don't want to use solutions like
 LastPass, where your stuff is stored in their cloud. The question of
 What if they get hacked? is no longer academic, since it happened
 recently.

 For synchronization between systems I use SpiderOak, which also has
 clients for all 3 platforms. KeePass already encrypts the db file, and
 SpiderOak, unlike most cloud storage platforms, encrypts the files
 it backs up locally (on your system) with a special key that the
 company does not know. The upload channel is encrypted to their
 servers as well, so your data is never available in the clear. Because
 they don't know the encryption key your data is never de-duplicated
 with other people's stuff, although if you set up folder
 synchronization between systems the same files will be de-duplicated
 within your own account.

 ... and speaking of folder synchronization, one of the things I like
 about SpiderOak is that you can set up arbitrary folders to
 synchronize between systems, you don't have to put all of your stuff
 in one folder. You can also configure it to exclude certain files from
 syncing, which is handy to avoid synching the .lock file for KeePass. :)

 http://keepass.info/index.html

 https://www.schneier.com/blog/archives/2014/09/security_of_pas.html

 If you use this link to sign up for SpiderOak, I get free space. :)
 https://spideroak.com/signup/referral/25c4971714a13f13c24fa98a43317dc2/

 Or, here is the regular link, if you prefer:
 https://spideroak.com/

 hope this helps,

 Doug

 -BEGIN PGP SIGNATURE-
 Version: GnuPG v2

 iQEcBAEBCAAGBQJUb/bPAAoJEFzGhvEaGryEq9EH/0pwRxi7PpJMlJs9yGOvdcBO
 +oqL6uJ99U72kdmUeznLzSewN5pHJoKB26gHAqs2WvNnoNGDOfRKz89ijKxCOWbE
 8uJfz+AEqDJLe6CdLXSVTTa8SdLDydYUqrQZuV3aPxVPCCA91I4vi0HVB3MAlqLV
 ndOEaX6wP6/GCqVDkHUDQ9V37jmFHa7jl2RKFXj5BRL31ztQuqVQ4VlCiVbZFvje
 aipBL8p1l9EBdEUdQIM7tnykeP9EY+0F5zQmSqAuxxk+CFKQZBJ2FqZN1bnvi5OC
 QQFaUy4sGQKdI/uoOQOVM5YHXzQxJ6tZY1zFUudQwcs/Sdi2EQkRZQVOpMHeeqQ=
 =dI3t
 -END PGP SIGNATURE-


 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Symmetrical encryption or ...

2014-11-20 Thread Dave Pawson
Requirement.
Two machines (one Linux, one Windows).

I want a secure file 'shared' between them, as a pwd-safe.

Only I use the two machines, but need the file encrypted.

Any alternatives to symmetrical encryption of a file?

TiA,



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users