OpenPGP Smartcard and SSH ?!

2007-04-23 Thread Matthias Barmeier
Hi, I know this is asked a thousand times ... but it seems that everybody that asked this question has found a personal solution to do it. It would be great if I could get a step by step introduction on how to set up a ssh login with a smartcard. What works for me now is login via pam_poldi and

Re: Generating and storeing keys on usb pen

2007-04-23 Thread David Shaw
On Sun, Apr 22, 2007 at 01:42:37PM -0700, rocko wrote: > I want to generate a new key pair, but i want to save it to > a usb pen drive so i can keep it safe. > I don't want any gpg keys stored on my laptop, in case it gets > lost or stolen, the culprits won't have access to my gpg keys. There is

Re: Key signing parties

2007-04-23 Thread David Shaw
On Mon, Apr 23, 2007 at 04:38:32PM +0200, Bruno Costacurta wrote: > On Friday 20 April 2007 15:42:20 David Shaw wrote: > > On Fri, Apr 20, 2007 at 02:25:48PM +0200, Bruno Costacurta wrote: > > > Hello, > > > > > > are there some mailing list / blog / ..others.. where are mentioned key > > > signing

Re: libgcrypt: Length of IV

2007-04-23 Thread Robert J. Hansen
> Should the IV be of the same length as the key for a given symmetric > cipher or can it have any length? Ask on sci.crypt. When you do, please make sure to give more context, such as the algorithm you have in mind, the usage context, etc. ___ Gnu

Re: Key signing parties

2007-04-23 Thread Bruno Costacurta
On Friday 20 April 2007 15:42:20 David Shaw wrote: > On Fri, Apr 20, 2007 at 02:25:48PM +0200, Bruno Costacurta wrote: > > Hello, > > > > are there some mailing list / blog / ..others.. where are mentioned key > > signing parties ? > > > > I expected to find something at > > http://www.gnupg.org/ >

RE: libgcrypt: Length of IV

2007-04-23 Thread Blumenthal, Uri
> Should the IV be of the same length as the key > for a given symmetric cipher or can it have any > length? IV should be equal in length to the block size of the cipher (not the key size). Yes IV can be of a different length - but unless you fully understand the implications, I advise against i

libgcrypt: Length of IV

2007-04-23 Thread Jules Colding
Hi, Should the IV be of the same length as the key for a given symmetric cipher or can it have any length? Thanks, jules ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: UID changes (was Key Revocation)

2007-04-23 Thread Dirk Traulsen
Am 21 Apr 2007 um 23:25 hat Henry Hertz Hobbit geschrieben: > Once your changes are done, make sure you generate a new > revocation file with a: > > $ gpg -a --gen-revoke 98E6705C > rev_cpollock_embarqmail_com.asc > Is it really necessary to generate a new revocation certificate if you only cha

Re: unable to verify mail messages as signed files

2007-04-23 Thread Werner Koch
On Mon, 23 Apr 2007 11:44, [EMAIL PROTECTED] said: > I guess the tool does so to avoid creating temporary files. > In facts, it pipes faked clearsigned messages to gpg's stdin. > > What would you suggest it should do instead? Use two file descriptors. Or use gpgme which makes this much easier.

Re: unable to verify mail messages as signed files

2007-04-23 Thread Alessandro Vesely
Werner Koch wrote: > On Sat, 21 Apr 2007 21:12, [EMAIL PROTECTED] said: > >> Disagreement happens after the tool combines text and >> signature into a unique file. I reproduced it as follows: > > The simple answer is: You can't do that. Clearsigned messages are > different from detached signatur

Re: pinentry - Impossible to disable/ignore if present?

2007-04-23 Thread Werner Koch
On Fri, 20 Apr 2007 18:25, [EMAIL PROTECTED] said: > 1) make gpgme use my own callback passphrase function or, * Write a replacement for gpg-agent that loops back to your application. ;-) * Let your daemon ask for the passphrase and use the gpg-agent protocol (or gpg-preset-passphrase) to tell

Re: unable to verify mail messages as signed files

2007-04-23 Thread Werner Koch
On Sat, 21 Apr 2007 21:12, [EMAIL PROTECTED] said: > Disagreement happens after the tool combines text and > signature into a unique file. I reproduced it as follows: The simple answer is: You can't do that. Clearsigned messages are different from detached signatures. Shalom-Salam, Werner

Re: GnuPG::Interface

2007-04-23 Thread Alessandro Vesely
Linda Jen wrote: > I am new to this list and to GnuPG. so am I > I get the following messages in my apache server log: > > [Fri Apr 20 14:10:45 2007] [error] [client 852.12.22.138] gpg: WARNING: > unsafe permissions on homedir > "//.gnupg", referer: This is actually a warning