Re: idea.dll

2012-06-27 Thread Robert J. Hansen
On 6/26/2012 3:22 AM, Werner Koch wrote: This is very different in OpenPGP. SHA-1 is not used everywhere; its main use is for the fingerprint, this will eventually be a problem. I am not so sanguine. Marc Stevens claims [1] he has a working collision requiring 2**57 compressions: that number

Re: ideal.dll

2012-06-27 Thread Aaron Toponce
On Mon, Jun 25, 2012 at 08:44:11PM +0200, Werner Koch wrote: On Mon, 25 Jun 2012 20:12, aaron.topo...@gmail.com said: So, if the system can be improved by removing support for PGP2, which includes cleaning up code, squashing bugs, and tightening security, then why is it still around? 20

Re: idea.dll

2012-06-27 Thread Aaron Toponce
On Tue, Jun 26, 2012 at 01:12:12AM -0400, ved...@nym.hush.com wrote: it will be interesting to see if V4 keys will be gracefully abandoned as SHA1 becomes as broken as MD5, or if there will be die-hards holding onto they their V4 keys no matter what ... Please fix your client. I don't

migration paths from SHA-1 [was: Re: idea.dll]

2012-06-27 Thread Daniel Kahn Gillmor
On 06/27/2012 09:11 AM, Robert J. Hansen wrote: On 6/26/2012 3:22 AM, Werner Koch wrote: This is very different in OpenPGP. SHA-1 is not used everywhere; its main use is for the fingerprint, this will eventually be a problem. I am not so sanguine. Marc Stevens claims [1] he has a working

Re: ideal.dll // fixing thread breaking

2012-06-27 Thread vedaal
On Wed, 27 Jun 2012 09:33:38 -0400 Aaron Toponce aaron.topo...@gmail.com wrote: On Mon, Jun 25, 2012 at 08:44:11PM +0200, Werner Koch wrote: On Mon, 25 Jun 2012 20:12, aaron.topo...@gmail.com said: So, if Thus, the reason I began with 'if'. :) Am using Hushmail (have been using it since

Re: migration paths from SHA-1 [was: Re: idea.dll]

2012-06-27 Thread Robert J. Hansen
On 6/27/2012 10:24 AM, Daniel Kahn Gillmor wrote: For the key's fingerprint specifically, a pre-image (where the attacker crafts a new text that shares a digest with the victim's key material) is the thing to worry about, not a crafted collision (where the attacker generates two texts that

Re: ideal.dll // fixing thread breaking

2012-06-27 Thread Brad Rogers
On Wed, 27 Jun 2012 10:30:30 -0400 ved...@nym.hush.com wrote: Hello ved...@nym.hush.com, Unfortunately, as you suspected, the message I'm replying to did break threading. It's Hushmail that's at fault, I believe. does it require unsubscribing and re-subscribing, or is there an easier way?

Re: idea.dll

2012-06-27 Thread Brad Rogers
On Wed, 27 Jun 2012 07:32:17 -0600 Aaron Toponce aaron.topo...@gmail.com wrote: Hello Aaron, Please fix your client. I don't know if you can tell, but you are breaking the threads. Your client should support the 'in-reply-to' and vedaa is using Hushmail; A web mail system. -- Regards _

Re: ideal.dll // fixing thread breaking

2012-06-27 Thread Peter Lebbing
On 27/06/12 16:30, ved...@nym.hush.com wrote: btw, how do I change from 'digest-mode' to 'individual-list mode'? Go to http://lists.gnupg.org/mailman/options/gnupg-users, enter your e-mail address and password you subscribed with, and you get an interface where you can change such settings.

Re: ideal.dll // fixing thread breaking

2012-06-27 Thread Peter Lebbing
On 27/06/12 17:14, Brad Rogers wrote: Sadly, with mailman, unsubbing and resubbing is the only way for a regular user to change their subscription format. Having switched from digest to individual message mode myself about a year ago, I can tell you you are mistaken. I did it succesfully in the

Re: ideal.dll // fixing thread breaking

2012-06-27 Thread vedaal
On Wed, 27 Jun 2012 11:34:02 -0400 Peter Lebbing pe...@digitalbrains.com wrote: and you get an interface where you can change such settings. ok changed to individual digest mode, and replying directly (hushmail default of 'reply' is to individual user and cc to list) hope it works, if not,

Re: ideal.dll // fixing thread breaking

2012-06-27 Thread Andy Ruddock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 ved...@nym.hush.com wrote: ok changed to individual digest mode, and replying directly (hushmail default of 'reply' is to individual user and cc to list) hope it works, if not, any other suggestions to try in hushmail? TIA vedaal

pipe passphrase to unlock key

2012-06-27 Thread Face
Hell all, I am trying to pipe my passphrase to unlock the key. my problem is like this, when I use git to sign a tag gnupg ask for the passphrase and i need to pipe the passphrase. I try echo my long passphrase | git tag -s 1.0.0.42 -m 'version 1.0.0.1' however it did not work. i also try

Re: ideal.dll // fixing thread breaking (Andy Ruddock)

2012-06-27 Thread vedaal
Date: Wed, 27 Jun 2012 17:54:16 +0100 From: Andy Ruddock andy.rudd...@rainydayz.org I just set up a free hushmail account, using the web interface you don't get an In-Reply-To field in the header. I couldn't find any settings which would enable this. So, if you're using a free hushmail account

Re: GPA and hkps

2012-06-27 Thread John Clizbe
John wrote: Werner Koch w...@gnupg.org wrote in message news:87lijbfbzk.fsf__7982.15741892836$1340651488$gmane$o...@vigenere.g10code.de... On Fri, 22 Jun 2012 23:22, jw72...@verizon.net said: message when I use GPA to try retrieving a key. The message states this: There is no plugin

Cross-compiling GPGME

2012-06-27 Thread Robert J. Hansen
I have a small Qt application that uses GPGME. It compiles cleanly under Linux (on a Fedora 17/x64 setup). Although F17 has a really lovely mingw32 cross-compiler, and a pre-built libgpg-error for Win32 that I can use, it's missing gpgme -- meaning I need to cross-compile my own, so that the