Re: SSH authentication using OpenPGP 2.0 smartcard

2011-01-25 Thread Patryk Cisek
On Tue, Jan 25, 2011 at 08:39:28PM +0100, Werner Koch wrote: > > Actually, I also needed to run 'gpgkey2ssh 0xDEADBEEF >> > > ~/.ssh/authorized_keys" so I could ssh into the box as well. > > You should use > > ssh-add -L > > which gives you the public key. The comment field has the card numbe

Re: SSH authentication using OpenPGP 2.0 smartcard

2011-01-25 Thread Patryk Cisek
On Tue, Jan 25, 2011 at 12:16:02PM -0500, Grant Olson wrote: > Did you create an authentication key? You might only have signing and > encryption keys. You need a third key for authentication. (A quick > look at pool.keyservers.net doesn't show an auth subkey.) Yes, I've got authentication key:

Re: Future plans for implementation of other algorithms

2011-01-25 Thread Grant Olson
On 01/25/2011 07:59 PM, Joseph Ziff wrote: > Just out of curiosity (this might be the wrong mailing list for this so > I apologize in advance if that is the case), are there any plans for > implementing any other encryption/signing algorithms in GPG and if so > what are they? I think it's really t

Future plans for implementation of other algorithms

2011-01-25 Thread Joseph Ziff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Just out of curiosity (this might be the wrong mailing list for this so I apologize in advance if that is the case), are there any plans for implementing any other encryption/signing algorithms in GPG and if so what are they? - -- Joseph Ziff , , T

Re: SSH authentication using OpenPGP 2.0 smartcard

2011-01-25 Thread Werner Koch
On Tue, 25 Jan 2011 18:39, k...@grant-olson.net said: > Actually, I also needed to run 'gpgkey2ssh 0xDEADBEEF >> > ~/.ssh/authorized_keys" so I could ssh into the box as well. You should use ssh-add -L which gives you the public key. The comment field has the card number. Shalom-Salam,

Re: [gpgtools-users] MacGPG2 v2.0.17 released!

2011-01-25 Thread Remco Rijnders
On Tue, Jan 25, 2011 at 05:58:41PM +, Andrew Long wrote: I downloaded the new package and the detached key, but have not yet done anything with them. The email, when processed by my current macgpg2 installation (2.0.14) complains about Bad signature from Benjamin Donnachie ! No signature

Re: MacGPG2 v2.0.17 released!

2011-01-25 Thread Andrew Long
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 - -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 24 Jan 2011, at 23:03, Benjamin Donnachie wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > ___ > Gnupg-users mailing list > Gnupg-user

Re: SSH authentication using OpenPGP 2.0 smartcard

2011-01-25 Thread Grant Olson
On 1/25/11 12:16 PM, Grant Olson wrote: > > I just setup Debian 6.0RC1 last week. I have a key I've already been > using to ssh. I had no problems. Just needed to add some stuff to > .bashrc as documented in the manpage for gpg-agent. > Actually, I also needed to run 'gpgkey2ssh 0xDEADBEEF >>

Re: SSH authentication using OpenPGP 2.0 smartcard

2011-01-25 Thread Grant Olson
On 1/25/11 10:07 AM, Patryk Cisek wrote: > Hi, > > I've been successfully using OpenPGP smartcard for signing my Debian > uploads for a while now. Today I wanted to set it up also for SSH > public key authentication. > Did you create an authentication key? You might only have signing and encryp

SSH authentication using OpenPGP 2.0 smartcard

2011-01-25 Thread Patryk Cisek
Hi, I've been successfully using OpenPGP smartcard for signing my Debian uploads for a while now. Today I wanted to set it up also for SSH public key authentication. I'm using: gnupg-2.0.17 libassuan-2.0.1 libgcrypt-1.4.6 libksba-1.1.0 pinentry-0.8.1 pinentry-qt-0.5.0 All installed into /usr/lo

Re: MacGPG2 v2.0.17 released!

2011-01-25 Thread Werner Koch
On Tue, 25 Jan 2011 11:03, joh...@vulcan.xs4all.nl said: > What kind of smartphone do you have? Since when does GnuPG exists for > phones? I would be really interested in a Symbian version, or I would > have to wait for Meego to become adult. N900 and HTC Touch Pro2, GnuPG 2.1 supports them. See

Re: MacGPG2 v2.0.17 released!

2011-01-25 Thread David Shaw
On Jan 25, 2011, at 5:03 AM, Johan Wevers wrote: > Op 25-1-2011 9:50, Werner Koch schreef: > >> Another and real practical >> reason against such a long key is that it will unusable on my >> smartphone. > > What kind of smartphone do you have? Since when does GnuPG exists for > phones? I would b

Re: MacGPG2 v2.0.17 released!

2011-01-25 Thread Benjamin Donnachie
On 25 Jan 2011, at 08:55, Werner Koch wrote: >> * Maximum key size increased to 8192 bits; recommended for expert users only > > I do not think this is a good idea. I personally agree with you and it was only implemented due to user demand. I'll look at a better way of implementing this request.

Re: Gpg for iPhone or iPad - Addendum

2011-01-25 Thread Derick Centeno
I believe that the output you are complaining about may be normal.  If you were using the MIME option which is available within Linux, you could generate a different output.  I'm not sure that the MIME option is available in the iPhone however which is why I'm looking at

Re: Gpg for iPhone or iPad

2011-01-25 Thread Derick Centeno
I believe that the output you are complaining about may be normal.  If you were using the MIME option which is available within Linux, you could generate a different output.  I'm not sure that the MIME option is available in the iPhone however which is why I'm looking at

Re: MacGPG2 v2.0.17 released!

2011-01-25 Thread Johan Wevers
Op 25-1-2011 9:50, Werner Koch schreef: > Another and real practical > reason against such a long key is that it will unusable on my > smartphone. What kind of smartphone do you have? Since when does GnuPG exists for phones? I would be really interested in a Symbian version, or I would have to wa

Re: MacGPG2 v2.0.17 released!

2011-01-25 Thread Werner Koch
On Tue, 25 Jan 2011 00:03, benja...@py-soft.co.uk said: > * Maximum key size increased to 8192 bits; recommended for expert users only I do not think this is a good idea. There is no point in such a long key size. The simplest reason against this is that the keysize is not the weakest link in