Re: General brute force attack question

2015-06-16 Thread Jean-David Beyer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/16/2015 06:28 PM, James Moe wrote: > Hello, My understanding of en-/decryption is that there is no > indication of progress toward finding a successful key match of a > given encryption. Only when the key is exactly correct will the > encrypte

Re: General brute force attack question

2015-06-16 Thread Robert J. Hansen
> Is this a correct interpretation? Pretty close. > My understanding of en-/decryption is that there is no indication of > progress toward finding a successful key match of a given > encryption. Not quite. If you're doing a brute-force attack it's easy to figure out what fraction of the possib

gpg-agent unable to see yubikey until manually re-running `gpg --card-status`

2015-06-16 Thread Lance R. Vick
Very confused by this. Every time I insert my yubikey into a system I must do 'gpg --card-status' to make gpg-agent aware it exists again. Using: gpg/gpg-agent 2.1.4 Expected Results: 1. Insert yubikey 2. Issue version command to gpg agent 3. Version is reported 4. Remove and re-insert key 5. Is

General brute force attack question

2015-06-16 Thread James Moe
Hello, My understanding of en-/decryption is that there is no indication of progress toward finding a successful key match of a given encryption. Only when the key is exactly correct will the encrypted data be revealed. I have seen numerous TV and movie stories where someone is frantically atte

Re: Teaching GnuPG to noobs

2015-06-16 Thread Damien Goutte-Gattat
On 06/16/2015 03:50 PM, A.T. Leibson wrote: What aspects are the most challenging for new users to understand? I would say: all the stuff related to the concepts of "key validity" and "owner trust". Particularly, the fact that the validity of a given key is automatically determined by looki

Re: Re: OpenPGP based SSH authentification

2015-06-16 Thread theoneandonly
thx for your answer. What kind of PGP smartcard are you using? 15. Jun 2015 19:54 by m...@confidantmail.org: > You can use the gpg-agent for ssh auth. > In gpg-agent.conf you put: > enable-putty-support > > Than you can run the agent like this: > "c:\Program Files (x86)\GNU\GnuPG.v2\bin\gpg-age

Re: Teaching GnuPG to noobs

2015-06-16 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Tuesday 16 June 2015 at 4:22:01 PM, in , Steve Butler wrote: > I generated a set of documents about a decade ago that > someone asked permission to post on the web. Just did > a search and could not find. I'll try to dig through > my thum

RE: Teaching GnuPG to noobs

2015-06-16 Thread Steve Butler
Biggest pitfall -- new users sending me both their public and private keys. Most have a mental block on how these are used. I generated a set of documents about a decade ago that someone asked permission to post on the web. Just did a search and could not find. I'll try to dig through my thum

Teaching GnuPG to noobs

2015-06-16 Thread A.T. Leibson
Hi everyone, What has your experience been teaching inexperienced users how to use GnuPG properly? What are common pitfalls on the part of the instructor? What aspects are the most challenging for new users to understand? Lastly, what's your favorite noob-friendly guide, and why? Thanks, Adamh

Re: [Announce] GnuPG 2.1.5 released

2015-06-16 Thread Werner Koch
On Thu, 11 Jun 2015 18:11, j...@fastmail.com said: >> * Support for the forthcoming version 3 OpenPGP smartcard. >> > > Is there a contact for this, or a draft of the standard available? You find the specs at the bottom of the page http://g10code.com/p-card.html -- Die Gedanken sind frei.

Re: dirmngr vs ip addresses in keyserver URIs

2015-06-16 Thread Werner Koch
On Mon, 15 Jun 2015 07:01, cl...@jhcloos.com said: > My gpg.conf still has 'keyserver hkp://127.0.0.1', and I've tried adding > that also to dirmngr.conf, but it always fails. Right, this is a regression. The reason is that now the dirmngr daemon takes care of keyservers and it handles keyserver

Re: State-of-the-art way to setup a shared security@ email with hardware-backed keys?

2015-06-16 Thread Simon Josefsson
Daniel Kahn Gillmor writes: > Hi Simon-- > > Thanks for the interesting use case. > > On Tue 2015-06-09 09:21:08 -0400, Simon Josefsson wrote: >> My current idea is to generate a secur...@example.com master PGP key and >> keep that offline, and to generate one decryption sub-key, and load that >>